VelisonaPrivacy Policy
How Velisona handles your information.
Effective October 3, 2026
Who operates Velisona
Velisona is operated by Ihor Maiorov. Privacy and support: igor.v.maiorov@gmail.com. This policy covers the website and the macOS, iPhone, iPad and Android apps.
Account and service data
We store your email address, name, optional avatar, authentication identifiers, password hash when applicable, registered device public keys, contacts, blocks and sign-in sessions. We process delivery identifiers, read/unsend status, call participants, timestamps, durations and notification tokens to provide the service. We do not collect your address book automatically.
Calls, messages and attachments
Calls use encrypted peer-to-peer WebRTC with TURN relay when a direct connection is unavailable. A relay transports encrypted media and cannot decode it. Message and chat attachment contents are end-to-end encrypted. Your message history and encryption keys stay on your devices. The server queues encrypted deliveries for up to 7 days and has no message decryption keys. Account, message-status and call metadata remain until account deletion. Other participants can save copies.
Problem reports and diagnostics
When you submit a problem report, its description, the screenshot or video files you choose, app version, OS version and platform are sent to our server for review by the Velisona team. Signed-in reports are associated with your account. These reports are intentionally shared with us and are separate from end-to-end encrypted chats. Do not attach passwords or private conversations without permission. If you enable Share technical error reports, the app sends error categories and app/OS versions. It does not automatically send chat contents, recordings, passwords, raw logs or screenshots. You can turn this off in Settings. Reports and their files are deleted within 90 days, or sooner when their linked account is deleted.
Purposes and choices
We use data to operate and secure Velisona, deliver notifications, provide support and diagnose problems. We do not sell personal data or use advertising trackers. Optional diagnostics require your choice. Where applicable, service operation is necessary to provide the service, security relies on legitimate interests and optional diagnostics rely on consent. You can withdraw diagnostic consent without losing access to calls or messages.
Service providers and international processing
Infrastructure is hosted with DigitalOcean in New York, United States. Resend delivers verification email from no-reply@velisona.com. Apple provides Sign in with Apple and Apple Push Notification service; Google provides Google sign-in and Firebase Cloud Messaging on Android. Those providers receive the information needed for their function and process it under their own policies. Internet connections also expose IP addresses to participating devices and infrastructure. Your information may be processed outside your country, including the United States.
Retention, access and deletion
Delete your account in Settings → Account / Sign-in → Delete account. Confirmation permanently removes the account, server-side relationships, sessions, queued deliveries, associated call/message records and linked problem reports. The app signs out and clears that account’s local history on the device used for deletion. Restricted server database backups rotate after approximately 8 days; expired chat attachment contents are not backed up. Copies on other devices, downloaded exports and copies retained by other people cannot be remotely erased. To request deletion without the app, or request access or correction, visit /delete-account/ or email support from your registered address.
Website, security and age
The website stores your language preference locally. The administrator console uses an essential secure session cookie. Transport encryption and access controls protect server data, but no system can guarantee complete security. The open beta is intended for adults aged 18 or older and is not directed at children.
Changes
We publish updates and their effective date here. Material changes will be communicated through the service or email when appropriate. Contact us at igor.v.maiorov@gmail.com with questions or to exercise applicable privacy rights, including objection, restriction and complaints to your local data-protection authority.