VelvetalePrivacy Policy
Last updated 8 October 2026
Velvetale is an app for adults (18+) to play interactive stories with AI characters. This policy explains what we collect, why, who processes it, and the choices you have.
"We" means Gabriel Capraru, United Kingdom, the controller of your data. Contact: support@velvetale.app.
What we collect
| Data | Why |
|---|---|
| Your Apple account identifier, and the email Apple shares (often a private relay address) | To sign you in with Sign in with Apple and keep your stories on your account. |
| The name you want characters to call you, your pronouns, personas you create | So stories address you the way you asked. |
| Your birthday | To confirm you are 18 or older, and to allow Mature content only for adults who turn it on. |
| Your stories: your messages, the replies, pinned and noticed memories, story summaries | To show your stories and to write the next reply. |
| Characters you create, including their pictures | To let you and, if you publish them, other readers use them. |
| Ink balance and history, purchases and subscription status (from Apple's signed receipts) | To give you what you bought and to prevent fraud. |
| Reports you file, and moderation decisions about your content | To keep Velvetale safe and follow the App Store's rules for user content. |
| Usage needed to run the service: when replies were written, how many, their cost | To enforce daily limits and fair use, and to keep the service affordable. |
| A notification token for your device, if you allow notifications | To send the notifications you turned on. You can turn them off in Settings. |
| Where you first heard about Velvetale, if you answer | To learn which channels work. It's optional. |
| Crash and hang reports from Apple's MetricKit | To fix bugs. They are stored without any link to your account. |
We don't sell your data, we don't show ads, and we don't use third-party analytics or advertising trackers. This website sets no cookies.
AI processing
To write a reply, the text of the story (the character, your persona, memories, a summary and recent messages) is sent to Anthropic's Claude API, which processes it on our behalf. Anthropic does not use API data to train its models. The app asks for your permission before any story text is sent to Anthropic, and replies can't be written without it; you can withdraw it by deleting your account. Short safety checks (moderation) and helpers that summarise long stories also run on Claude. Pictures you upload for a character are checked by Claude when you publish it.
Who processes your data
- Supabase hosts our database, files and server functions in the EU (Frankfurt).
- Anthropic writes replies and runs safety checks (Claude API). Anthropic processes data in the United States; transfers are covered by standard contractual clauses and the UK addendum.
- Apple handles sign-in, payments and push notifications.
- Hetzner hosts this website on our server in Germany.
What other people can see
Your stories are private. If you publish a character, its name, picture, description, first message and your @handle are visible to other readers. Creators see counts of readers and messages for their characters, never who the readers are or what they wrote.
How long we keep it
We keep your data while your account exists. When you delete your account, we delete your profile, stories, personas, memories, characters and their pictures, and revoke Sign in with Apple. We keep limited records where needed: purchase records required for accounting and to stop the same purchase being reused, and reports about content, without your identity. Crash reports are kept for up to 90 days. See how to delete your account.
Your rights
You can see and change most of your data in the app, export your stories by writing to us, and delete your account at any time in the app. If you are in the UK, the EU or the EEA you also have the rights of access, correction, deletion, restriction, portability and objection. You may complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority. Write to support@velvetale.app.
Children
Velvetale is only for adults. We don't knowingly collect data from anyone under 18; if we learn an account belongs to a minor, we delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.