Privacy Policy
Effective: March 20, 2026 | Last Updated: March 20, 2026
SmileOn Labs ("Company") is committed to protecting the personal information of users of Velo ("Service") in accordance with applicable privacy laws, including the Korean Personal Information Protection Act. This Privacy Policy describes how we collect, use, and safeguard your information.
1. Personal Information We Collect
| Category | Items | Collection Method |
|---|---|---|
| Required | Name, email address | Automatically collected via Google/Apple social login |
| Auto-generated | User unique identifier (UID), device identifier | Generated upon account creation and service usage |
| Auto-collected | Purchase history (subscription status, payment type) | Collected through RevenueCat during in-app purchases |
| Auto-collected | Subscription history (plan type, purchase date) | Stored on our own server (Supabase) for Pro status restoration |
| Auto-collected | App crash logs, performance data | Automatically collected during app usage |
Information We Do NOT Collect: Phone number, physical address, location data, contacts (address book), financial information (card numbers, etc.). Payment processing is handled directly by Apple App Store and Google Play Store; the Company does not have access to this information.
Photos & Videos: Your photos and videos are accessed solely for compression purposes and are processed entirely on your device. They are never uploaded to or stored on our servers. All compression operations are performed 100% offline on the user's device.
2. Purpose of Collecting and Using Personal Information
| Purpose | Details |
|---|---|
| Service delivery | User identification, login authentication, subscription status management |
| App functionality | Compression features, saving user preferences |
| Service improvement | App performance monitoring, crash analysis, bug fixes |
| Customer support | Responding to inquiries, delivering notices |
3. Retention and Disposal of Personal Information
The Company promptly destroys personal information once the purpose of collection and use has been fulfilled.
- Account deletion: Immediately destroyed
- Purchase history: Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, then destroyed
- Crash logs: Automatically deleted 90 days after collection
4. Sharing Personal Information with Third Parties
The Company does not share users' personal information with third parties as a general principle. Exceptions apply only in the following cases:
- When the user has given prior consent
- When required by applicable laws or regulations
5. Outsourcing of Personal Information Processing
| Service Provider | Outsourced Tasks |
|---|---|
| Supabase Inc. | User authentication and account management |
| RevenueCat Inc. | Subscription and payment status management |
| Apple Inc. / Google LLC | Social login authentication, in-app payment processing |
6. Users' Rights and How to Exercise Them
Users may exercise the following rights at any time:
- Right to access: You may request to view the personal information we have collected.
- Right to correction: You may request correction of inaccurate information.
- Right to deletion (account deletion): You may delete your account via Settings > Delete Account in the app, which will immediately destroy all personal information.
- Right to suspend processing: You may request suspension of personal information processing.
These rights may be exercised through in-app features or by contacting us via the email address below.
7. Measures to Ensure Security of Personal Information
- HTTPS (TLS) encryption applied to all data transmissions
- No user passwords stored (OAuth-based social login used)
- Photos and videos are never transmitted to servers; processed only on the device
- Principle of least privilege applied to access controls
8. Automatic Data Collection and Opt-Out
The Service does not use cookies. App crash logs and performance data are automatically collected to ensure service stability and are processed in a form that does not identify specific individuals.
9. Personal Information of Children Under 14
The Service is not directed at children under the age of 14, and we do not intentionally collect personal information from children under 14. If we become aware that we have collected personal information from a child under 14, we will promptly delete such information.
10. Changes to This Privacy Policy
This policy may be updated in accordance with changes in applicable laws or the Service. Any changes will be communicated in advance through in-app notifications or email.
11. Account Deletion Guide
Users may request account deletion at any time.
Method 1: Delete Within the App
- Open the Velo app
- Go to the Settings menu
- Tap the Delete Account button
- Confirm and submit your deletion request
Method 2: Request Deletion by Email
Email: [email protected]
Subject: Account Deletion Request
Body: Please include the email address used when you signed up.
Data That Will Be Deleted
- Email address and profile information
- Subscription and license information
- App usage history
Data Retained for a Limited Period
For legal obligations and dispute resolution, payment transaction records are retained for 30 days after the deletion request and then permanently deleted.
Processing Time
Account deletion requests are processed within 7 business days.
Important Notes
- If you have an active subscription, please cancel it first through Google Play or the Apple App Store.
- Deleting your account does not automatically cancel your subscription.
- If you own a lifetime license, it cannot be restored to the same account after deletion.
12. Privacy Officer and Contact Information
- Company: SmileOn Labs
- Service: Velo
- Email: [email protected]