What we collect, who sees it, what we'll never do.
Vela handles family-coordination data — events, tasks, shopping items, who's picking up whom, the occasional school flyer you forwarded. That's intimate stuff. This page is the document that says, in plain English, what we do with it. If the in-app settings say one thing and this page says another, the in-app settings are wrong and we need to know.
01What we collect.
The data your family puts in: events, tasks, shopping items, photos, voice notes, and inbox forwards you send to Vela. Plus the metadata around them — when you sent something, from which platform, and which family member it belonged to.
Plus the operational minimum: your email (so we can write to you), your subscription tier (so we know what you've paid for), and a usage counter (so we can show you the action-count anchor on pricing). That's the list.
The data we have on your family is the data you sent us, plus a counter and your email. There is no shadow profile, no "interest graph," nothing assembled from third parties.
02Who sees it.
People inside your family see the family's data. Vela (the AI butler) sees it so she can answer the family. The vendors we work with (next section) see only the slice they need.
We do not sell, share, rent, or license your data to anyone else. We do not use your data to train public AI models.
03The processors we work with.
Vela is built on a small set of third-party services. The canonical, always-current list lives at docs/branding/VENDORS.md in our repo, and a readable rendering appears in M4 chapter 06.
Every contract is enterprise-tier with no-training and no-retention clauses where applicable. We re-review annually; the most recent review was May 2026.
04Exporting your data.
Settings → Privacy → Export. A single zip of events, tasks, shopping, and conversation history in plain JSON. Rate-limited to once per 24 hours; delivered to your email within minutes.
05Deleting your account.
Settings → Privacy → Delete account. Confirms with a phrase you type (“delete my account”); sets a 30-day tombstone.
Within those 30 days you can come back and pick up where you left off. After 30 days, your family's data is gone from our infrastructure for good. Not “soft-deleted.” Gone.
06Kids.
Kids are tracked without accounts — a parent or guardian adds them to the family and removes them when needed. No account, no email, no login. Vela never collects PII directly from a child.
07Jurisdiction.
Vela Family Inc. is a British Columbia corporation. Data is stored in the US (Supabase US-East). GDPR / PIPEDA / CCPA rights are respected globally — exercise them by emailing hello@vela.family.
08Changes to this page.
Material changes get an email at least 30 days before they take effect. Non-material edits (typos, link fixes) update the “last updated” stamp at top. Version history lives in our git repo.