Scope of this policy
This policy applies to the Veyron Studio website, iOS app, and their connected service interfaces. External services you choose to use may also be governed by their own policies.
Data we collect
On first app launch we create a guest account and support ID automatically. We store only a one-way hash of the random installation token kept in your device Keychain. We may also handle an email address after optional registration, username, profile details and preferences; text, prompts, uploaded media and generated results; device and notification identifiers; transaction records and Apple purchase evidence; and technical data such as network address, browser type, and error logs. We do not store passwords for external sign-in services.
How we use data
We use data to operate guest or registered accounts, generation, and saved projects; calculate points and verify purchases; show the support team the account, subscription and transaction records linked to your support ID; send notifications you allow; prevent fraud and abuse; and improve service reliability and security.
Service providers
Inputs or media needed for your request may be sent to enabled AI and infrastructure providers, which may include OpenAI, Google, ByteDance, Kuaishou, and other AI processing providers. We use Auth0 for authentication when enabled, OneSignal for notifications when enabled, and Apple for purchases. We share the minimum necessary to provide the requested function, and each provider handles data under its own terms and policies.
Private media and links
Account media is stored privately and made available through time-limited signed links after ownership checks. Keep a link private while it remains valid, and do not submit content you do not have the right to use.
Retention and deletion
Guest accounts are retained like registered accounts until you or an administrator delete them; they are not removed automatically for inactivity. Deleting a project hides it from you, while deleting an account schedules removal of its data and media after active jobs finish. Financial records or transaction evidence may be retained without an account association for operational integrity and fraud prevention.
Your choices and rights
You can update your profile, manage notifications, delete projects, or request account deletion in the app. You may contact support to ask for access, correction, deletion, or an objection to processing. We will handle the request under applicable requirements after verifying your identity.
Security
We use reasonable technical and organizational safeguards, including access controls, signed links, and hashed session tokens. No transmission or storage method is completely secure, so protect your device and sign-in methods.
Children
The service is not directed to anyone who lacks legal capacity to use it independently. A user who is a minor under the rules that apply to them must use the service with the consent and supervision of an authorized guardian.
Changes to this policy
We may update this policy as the product or our practices change. The current version and update date will appear on this page, and we may use an in-service notice for a material change.