Privacy Policy

1. Information We Collect

Vera is designed to give you transparency about bottled water without compromising your own privacy. We collect the minimum amount of information necessary to deliver the app experience.

• Account information — When you create an account via email, Apple Sign-In, or Google Sign-In, we collect your email address and authentication credentials. Passwords are securely hashed and never stored in plain text. We store a unique user identifier to associate your account with your data.
• Scan data — When you scan a bottled water product, we process the barcode or photo on your device to identify the brand. Photos captured during scanning are compressed and sent to our servers for product identification. The product identifier is then used to retrieve or generate the corresponding purity report. Photos are processed in real time and are not permanently stored on our servers.
• Scan history — We store a record of products you have scanned, including the product identifier, timestamp, and scan method (barcode or photo). You can delete individual scan records at any time.
• Saved collections — Products you save to your collection are stored in our database and linked to your account. You can remove items from your collection at any time.
• Subscription data — If you subscribe to Vera Pro, your purchase is processed through the Apple App Store. We use RevenueCat to manage subscription status. RevenueCat receives your anonymous user identifier and subscription entitlement data. We do not receive or store your payment details.
• Rate limiting — To prevent abuse, we log your user identifier or IP address alongside request timestamps. This data is automatically deleted after 48 hours.

2. How We Use Your Information

• To provide, maintain, and improve the Vera app and services
• To retrieve and display water purity reports for scanned products
• To process product images and identify brands and barcodes
• To manage your subscription and account status
• To detect, prevent, and address abuse and technical issues
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. AI Processing & Third-Party Models

Vera uses third-party artificial intelligence services to identify products and extract water quality data. By using Vera, you acknowledge and agree that:

• Product images you capture during scanning may be sent to Google Gemini for visual product identification.
• Product names, brands, and related information may be sent to Anthropic Claude for data extraction, analysis, and purity scoring.
• Web search queries related to scanned products may be sent to Tavily for retrieving publicly available water quality reports and laboratory data.

These services process your data in accordance with their own privacy policies: Google Gemini, Anthropic Claude, Tavily.

We send only the minimum data necessary for product identification and analysis. We do not send your email address, account details, or personal information to these services. Image data sent for identification is not stored by Vera after processing is complete.

4. Data Storage & Security

Your data is stored on Supabase, a secure cloud database platform, with encryption at rest and in transit. Row-level security ensures that users can only access their own scan history, saved collections, and account data. We implement industry-standard security measures including TLS for all network communications.

5. Third-Party Services

Vera integrates with the following third-party services:

• Apple App Store — For app distribution and in-app purchases. Subject to Apple's Privacy Policy.
• Supabase — For authentication, database storage, and backend functions. Subject to Supabase's Privacy Policy.
• RevenueCat — For subscription management. Receives your anonymous user identifier and subscription status. Subject to RevenueCat's Privacy Policy.
• Google Gemini — For visual product identification. Receives product images during scanning.
• Anthropic Claude — For product data extraction and purity scoring. Receives product information.
• Tavily — For web search during product analysis. Receives product-related search queries.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Delete individual scan records and saved products from within the app

To exercise any of these rights, contact us at privacy@vera.app.

7. Data Retention

We retain your account data for as long as your account is active. Scan history is retained until you delete it or delete your account. Rate limiting data is automatically deleted after 48 hours. If you delete your account, all personal data is permanently removed within 30 days.

8. What We Do Not Collect

• We do not collect your device location.
• We do not collect device advertising identifiers.
• We do not use analytics or tracking SDKs.
• We do not collect health, financial, or biometric data.
• We do not track your activity across other apps or websites.

9. Children's Privacy

Vera is not directed at children under 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. Your continued use of Vera after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@vera.app.