Privacy Policy

Last updated: June 2, 2026

Vellicor ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Vellicor mobile application ("the App").

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and a password (or authentication token if using Sign in with Apple). We also generate a username and avatar for your profile.

Profile Information: You may choose to add a bio and customize your avatar color. This information is visible to other users.

Book Rankings: We store your book rankings, notes, sentiment ratings, and reading preferences. Rankings marked as "stealth" are only visible to you.

Social Data: We store your follow relationships, book club memberships, and lending records.

Messages: We store messages you send within the app (direct messages, book club chats, lending conversations).

Usage Data: We may collect anonymized data about how you use the app, such as search queries and feature usage, to improve the service.

Device Information: We do not collect device identifiers, location data, or contacts beyond what you explicitly authorize (e.g., finding friends from contacts).

2. How We Use Your Information

• To create and manage your account
• To display your rankings and profile to other users (unless set to private)
• To power social features (following, book clubs, lending, messaging)
• To calculate global book rankings from aggregated user data
• To suggest books based on your reading history (sequel recommendations)
• To process affiliate link referrals (Bookshop.org, Apple Books, Amazon)
• To improve the app and fix bugs
• To send you notifications you've opted into

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

• Public profile data: Your display name, username, avatar, and non-stealth rankings are visible to other users.
• Affiliate partners: When you click a buy link, the bookstore (Bookshop.org, Apple Books, Amazon) receives your click data per their own privacy policies. We do not share your personal data with them.
• Service providers: We use a small set of carefully chosen vendors. Each receives only what it needs:
  • Supabase — database, authentication, and push relay. Your account data is stored in their infrastructure. See Supabase Privacy Policy.
  • Resend — transactional email delivery (email confirmation, password reset, magic-link sign-in). Receives your email address and the message body of those emails only.
  • Sentry — crash reports and performance traces, with IP and user-agent scrubbing enabled.
  • PostHog — anonymized product analytics events.
  • Apple — sign-in, push notifications, in-app purchases. Subject to Apple's Privacy Policy.
• Legal requirements: We may disclose information if required by law or to protect our rights.

4. Data Security

We take reasonable measures to protect your information:

• All data is transmitted over HTTPS (TLS encryption in transit)
• Database is encrypted at rest via Supabase's infrastructure
• Authentication tokens are stored securely on your device
• Row Level Security (RLS) ensures users can only access their own data
• Passwords are hashed and never stored in plain text

5. Your Rights

You have the right to:

• Access your data: Export all your data via Settings > Export Data
• Correct your data: Edit your profile and rankings at any time
• Delete your data: Delete your entire account via Settings > Delete Account. This permanently removes all your data from our servers.
• Control visibility: Set your profile to private, use stealth mode for individual rankings, or block specific users
• Opt out of notifications: Manage notification preferences in Settings

6. Children's Privacy

Vellicor is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

7. Third-Party Links

The App contains links to bookstores and external websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Your continued use of the App after changes constitutes acceptance of the updated policy.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete all your data within 30 days. Anonymized, aggregated data (such as global ranking statistics) may be retained indefinitely.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal information.

11. European Residents (GDPR)

If you are in the European Economic Area, you have additional rights including data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is your consent (account creation) and legitimate interest (service improvement).