Privacy Policy
Data Processing & AI Transparency
Your privacy is our priority. Veloop is built on "Privacy by Design", meaning we minimize data collection and give you full control over what our AI model learns.
1Why do we collect data?
Veloop uses Machine Learning (ML) to make your shopping experience more efficient. By learning your habits, the app automatically sorts your shopping list so you don't have to search for items in the store. The sole purpose of data collection is to improve the app's functionality and user experience.
2Behavioral Data (Shopping Habits)
When you check off an item, we record the order and timestamp. This helps our models understand which items are usually picked together or in what sequence. If you disable smart features, this data is saved only locally on your device (via SQLite/LocalStorage) and is never sent to our servers.
3Location-Based Data
If you have enabled location-based sorting, the app requests your GPS position when checking off items. This is used to learn unique picking orders for different grocery store chains. Location data is stored anonymously and used strictly to trigger the correct sorting model for your current location.
4Improved Food Suggestions
To deliver our smart services, your item check-offs are shared anonymously with other members of that specific shared list. This allows the AI to learn the patterns of your entire household, providing improved suggestions for everyone. Data is strictly shared per-list, never across different lists or with external parties. As Veloop is built on "Privacy by Design", you can choose to opt out of this under "Smart features" in your profile settings.
5Security and Storage
All data synced to the cloud is encrypted and protected by Supabase Row Level Security (RLS). We never share your personal shopping habits with third parties for their financial gain. The data is kept entirely within our closed loop to train your personal model.
6Our Technology Partners
To deliver the best AI experience, we rely on industry-leading partners: • Supabase (cloud services and database) – for secure storage and real-time synchronization of your data. • Google Gemini AI (meal planning and categorization) – to provide smart meal suggestions and automatic item categorization. Data processed by Gemini includes item names from your shopping list, dietary preferences, household size, and optionally food images you choose to capture (for the "analyze leftovers" feature). We never share your name, email, address, payment information, or location data with Gemini. Veloop uses Google's paid API service, which means Google is contractually obligated not to use your data to train their public AI models. • RevenueCat (subscription management) – to manage your subscription. RevenueCat receives only an anonymous user ID and subscription status. • Sentry (error tracking) – to detect and fix technical issues. Sentry receives anonymized crash reports without personal content. All data processing by our partners is governed by Data Processing Agreements (DPA) in accordance with GDPR.
7Your Rights (GDPR)
Under the GDPR, you have the right to access your data, the right to deletion (the right to be forgotten), and the right to withdraw your consent. You can clear your local history or disable smart features and cloud synchronization directly from "Smart features" in your profile settings.
8Legal Basis
The processing of your behavioral data for machine learning is based on it being necessary for the performance of a contract (GDPR Art. 6.1 b) to deliver Veloop's core service, which is a smart shopping experience. You still maintain full control and can disable these smart features at any time.
9Payment Information
When you upgrade to a paid subscription, we never store your card details. All transactions are handled securely by the Apple App Store and our payment partner RevenueCat.
10Age Limit (COPPA / GDPR)
You must be at least 13 years old to create a user account and use our services. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will delete that information immediately.
11Privacy Contact & Data Deletion
Studio Serafin is the data controller for your personal information. If you have questions regarding privacy, wish to exercise your rights, or request data deletion, please reach out using the contact information provided in our Terms and Conditions.
*Download Your Data
You have the right to access your own data. This feature is available in the Veloop mobile app under the profile settings. From there, you can generate a complete overview of your stored information in a machine-readable JSON format.
Last updated: March 27, 2026
Veloop.app – Designed for a seamless everyday life.