Privacy Policy

1. The short version

• You never give us your name, email address or phone number.
• Other members see only an alias the App assigns you, such as “Heron 04”.
• Veil never handles money and never records donation amounts.
• No ads, no analytics, no tracking, and we never sell or share your data.
• You can delete your posts at any time, and your whole account from inside the App.

2. Information we collect

• An anonymous account. A random identifier created when you first open the App, and a session token that keeps you signed in. Only a one-way hash of the token is stored on our server.
• Google sign-in, only if you choose it. To restore your groups on a new phone, you may connect a Google account. We store only a keyed one-way hash of Google’s account identifier. We do not store your name, email address or photo. The email shown in the App’s settings is kept on your phone only.
• Your group activity. The groups you create or join, the alias assigned to you in each, your role (member or admin), and the messages and screenshots you post.
• Group settings. A group’s name, purpose, donation day, reminder schedule, time zone and invite code, as set by its admin.
• An optional private note you write about yourself in a group.
• Moderation records. Reports you file about posts, and the members you block.
• A push token. If you allow notifications, your phone’s Firebase Cloud Messaging token, so we can tell you when someone posts in your group. Pushes carry only ids, the poster’s alias and whether it was a screenshot, never what was written or the group’s name. Google delivers them; it receives nothing else from Veil.
• Basic server logs. The time, address path and result of each request, kept for security and troubleshooting. Logs never contain message text, images or tokens.

3. What we do not collect

• No payment, bank or card details, and no donation amounts.
• No location, contacts, microphone, or advertising identifiers.
• No photo metadata: before a screenshot is uploaded you can blur or black out anything on it, and every image is re-encoded on your phone and again on our server, which removes location and camera data. The original image never leaves your phone.
• No third-party analytics, advertising or crash-reporting SDKs.

4. Who can see what

• Members of a group see your alias, your posts and screenshots in that group, and whether you have posted this month. They never see your account or which other groups you are in: your identifier is different in every group.
• A group’s admin additionally sees your private note in that group, and reports about posts. The admin never sees who filed a report.
• Your blocks are visible only to you.
• Blocship operates the server and can technically access stored data. We access it only to run, secure and support the service, or where the law requires it.

5. How we use information

Only to provide the App: to run your groups, show posts to their members, assign aliases, apply moderation, restore your account if you connected Google, and keep the service secure. Reminders are scheduled on your phone; our server is never told when you give.

6. Sharing

We do not sell, rent or share your information with third parties for marketing or any other purpose. We may disclose information if required by law, or to protect the safety of users or the integrity of the service. Google is involved only if you choose Google sign-in, and only to confirm the sign-in.

7. Storage & security

Data is stored on servers operated by Blocship and is sent only over encrypted connections (HTTPS). Screenshots are private and are served only to active members of the group they were posted in. The database is not reachable from the internet. No system is perfectly secure, but we design Veil so that there is very little about you to expose in the first place.

8. Retention & deletion

• Posts and screenshots stay until you (or the group’s admin) delete them; deleting a post deletes its screenshot from our server.
• Deleting your account: in the App, go to Settings → Delete my account. You leave every group and your account, sessions, blocks and Google link are deleted immediately. If you ran a group, it passes to its longest-standing member. Posts you did not delete remain under your alias so the group’s history still makes sense; delete them first if you want them gone.
• Uninstalling without connecting Google leaves an anonymous account that cannot be linked to you by anyone, including you.
• Automatic clean-up: accounts not used for 180 days are deleted (leaving their groups first); groups with no members are deleted 30 days after their last activity, and archived groups after 180 days, with their screenshots. Resolved reports are deleted after 90 days.
• You can also ask us to delete data through the contact form below.

9. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export your data, and to object to or restrict its processing. Most of these you can exercise directly in the App. For anything else, contact us. Because we hold no name or email for you, we may ask you to make the request from inside the App so we can find your data.

10. Children’s privacy

Veil is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect information from them.

11. Changes to this policy

We may update this policy. When we make material changes we will update the date above and, where appropriate, tell you in the App.

12. Contact us

Questions or requests: use the contact form at blocship.io.