Legal
Privacy Policy
Effective date: July 28, 2026
Pryvo is a proof-based accountability app. This policy explains the information Pryvo processes to create tasks, review proof, and provide earned access to selected distracting apps.
Who Is Responsible For Your Information
Pryvo is published under the trading name Veldrose by Alejandro Mendoza, an individual developer operating as a sole proprietor. There is no separate company; Alejandro Mendoza is personally the party responsible for the information described in this policy.
- Responsible party: Alejandro Mendoza, trading as Veldrose
- Postal address: Wright Street, Cárdenas, Ancón, Panama City, Republic of Panama
- Email:
support@pryvoapp.net
Where Pryvo Is Offered
Pryvo is offered in the United States, Latin America, and other regions where it is listed on the Apple App Store and Google Play. Pryvo is not offered in the European Economic Area, the United Kingdom, or Switzerland, and its store listings exclude those regions. Pryvo does not knowingly provide the service to, or solicit personal information from, residents of those regions. If that changes, this policy will be updated before the service is made available there.
Information Pryvo Processes
Pryvo may process:
- an anonymous or upgraded account identifier
- task titles, completion standards, reward settings, and selected app identifiers
- proof photos and their submission metadata
- validation decisions, appeals, and reviewer responses
- weekly report inputs and results, including task titles, accepted-proof dates and times, first-review outcomes, earned reward minutes, generated insights, and the selected response voice; proof photos are not retransmitted to generate a weekly report
- entitlement, quota, and unlock-grant state
- subscription plan, product, store, lifecycle, renewal, trial, expiration, and provider-event identifiers when billing is enabled; Pryvo analytics do not contain raw receipts or purchase tokens
- a random installation identifier used for abuse prevention
- one-way hashes derived from installation and network signals used to prevent quota evasion
- privacy-bounded crash and startup diagnostics, limited to a coarse error classification, startup stage, platform, fatality indicator, app version, build environment, the time the failure occurred, and a mask identifying which required fields were absent; Pryvo does not send configuration values, raw client error messages, or stack traces for this purpose, and does not use a third-party crash-reporting service
- when a diagnostic cannot be sent immediately, it is held on the device in the same bounded form and retried for up to three days, then discarded
Pryvo does not sell personal information and does not use proof photos for advertising.
How Information Is Used
Information is used to:
- provide the task, proof-review, appeal, and earned-access experience
- generate an optional Premium weekly progress report from proof-backed activity
- prevent fraud, duplicate requests, and quota abuse
- diagnose failures and improve review reliability
- maintain purchases and entitlements after paid plans launch
- comply with legal obligations and protect users and the service
Service Providers
Pryvo uses service providers acting on its behalf, including:
- Supabase for authentication, database, object storage, and server functions
- DeepInfra for hosted visual evidence review and optional Premium weekly reports
- Apple and Google for app distribution and, after billing launches, purchase processing
- RevenueCat for store transaction verification, purchase restoration, and subscription lifecycle delivery when billing is enabled
Proof submitted for hosted review may be transmitted to the configured model provider using a short-lived signed URL. Pryvo does not place provider API keys in the mobile application.
When a user requests a Premium weekly report, Pryvo sends DeepInfra a bounded summary containing task titles, accepted-proof timing, first-review outcomes, and earned reward minutes. It does not send proof photos, proof storage paths, appeal messages, or raw validation reasons for this report.
DeepInfra states that data submitted to its inference API is held only in memory for the duration of the request and is not written to disk, that it does not train on submitted data, and that it does not share submitted data with third parties. DeepInfra also states that it does not generally log request content, but reserves the right to log a small portion of requests for debugging or security purposes. Pryvo sends proof images to DeepInfra one request at a time and does not use bulk inference, which DeepInfra handles under different retention terms. These are DeepInfra's commitments, not Pryvo's, and are described in DeepInfra's own data privacy documentation.
Where Information Is Stored
Pryvo's database, file storage, and server functions run in Supabase's United States region (us-east-1, Northern Virginia). Hosted proof review is performed by DeepInfra in the United States. The person responsible for Pryvo is located in Panama and administers the service from there. By using Pryvo, you understand that your information is stored and processed in the United States and accessed from Panama, which may have data-protection laws that differ from those of your own country.
Automated Review
Pryvo uses automated review to assess whether a camera-captured photo visibly proves task completion. Automated review can be wrong and does not make a decision about a person's character, eligibility, or legal rights. Users may use the in-app same-photo reconsideration path after a rejection. Do not submit sensitive, illegal, or third-party content without authority.
Retention And Deletion
Pryvo limits proof-image size and operates scheduled retention cleanup. Each category of information is kept for the period stated below and is then deleted automatically.
| Information | Retention period |
|---|---|
| Proof image (stored file) | Detached from Pryvo task screens at the next 2:00 AM in the relevant task timezone, then the private storage object is deleted three Pryvo days later |
| Uploaded image never attached to a submission | Deleted 24 hours after upload |
| Task, decision, appeal, and grant records (text only) | Until the user deletes the task or the account |
| Weekly coach reports and their bounded fact summaries | Until the user deletes the account |
| Subscription and entitlement records | Until the user deletes the account, then as required for tax and store-reconciliation obligations |
| Anonymous account that can no longer be reached (app uninstalled or app data cleared) | The account and everything it owns are deleted after 180 days with no sign-in, session refresh, task, proof, or unlock activity |
| Privacy-bounded startup diagnostics | 90 days |
| Privacy-bounded client error diagnostics | 30 days |
| Product analytics events | 13 months |
| Quota-evasion counters derived from one-way hashes | 90 days |
| Rate-limiting counters | 8 days |
| Diagnostics queued on the device because they could not be sent | Retried for up to 3 days, then discarded |
Deletion is performed by a scheduled job that runs continuously rather than on a fixed calendar date, so a record may persist for a short operational interval past the period above before the job reaches it. Pryvo does not extend these periods; where a legal hold, active fraud investigation, or security incident requires Pryvo to keep a specific record longer, only that record is retained and only for as long as the obligation lasts.
Users can delete their account and hosted data from the Account screen at any time, before any of the periods above elapse. Account deletion removes hosted tasks, evidence metadata, review history, appeals, grants, settings, and known proof objects. Backups and security logs may persist temporarily where required for disaster recovery, fraud prevention, or legal compliance.
Pryvo can be used without creating an account, in which case the account exists only on the device. If that app is uninstalled or its data is cleared, nothing can sign in to that account again, and its owner has no way to ask Pryvo to delete it. Pryvo therefore deletes those accounts itself: an account with no sign-in method attached is deleted, with everything it owns, after 180 days with no activity of any kind. Adding an email address or an Apple or Google sign-in stops this, because the account can then be reached and deleted by the person it belongs to. An account with a paid subscription or an unexpired Premium entitlement is also never deleted this way.
Your Privacy Rights
Depending on where you live, you may have the right to know what personal information Pryvo holds about you, to obtain a copy of it, to correct it, to delete it, and to not be discriminated against for exercising those rights. Pryvo extends the rights below to every user regardless of location.
How To Make A Request
The fastest route is in the app itself. The Account screen lets you delete your account and its hosted data immediately, without contacting anyone and without waiting.
For any other request, email support@pryvoapp.net with the request you are making. Pryvo acknowledges requests within 10 days and responds substantively within 30 days of receipt. Where a request is complex or numerous, Pryvo may extend this once by a further 45 days and will tell you the reason before the original 30 days elapse. Pryvo does not charge a fee for these requests unless a request is manifestly unfounded or repetitive, in which case Pryvo will say so rather than silently ignoring it.
How Pryvo Verifies Who You Are
Pryvo must be reasonably sure a request comes from the person the information belongs to, because acting on an unverified request would itself expose your data.
- If your account has an email address, send your request from that address. Pryvo treats control of the registered address as verification.
- If your account is anonymous, Pryvo has no email, name, or other identifier linking you to your account, and therefore has no way to confirm from an email alone which account is yours or that it belongs to you. In that situation Pryvo cannot act on an emailed request, and will tell you so. Use the delete option on the Account screen of the device where the app is installed — it is authenticated as your account and requires no proof of identity beyond having the app. Pryvo will not collect additional identifying information from you for the sole purpose of enabling a remote request.
If you have lost access to the device holding an anonymous account, that account cannot be recovered or remotely deleted. It will be removed by the retention schedule above; proof images are deleted within days regardless.
An Authorized Agent
You may use an authorized agent to make a request on your behalf. Pryvo will ask for written proof that you authorized the agent, and may still ask you to verify your own identity directly using the methods above.
Regional Disclosures
California
If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the rights described under Your Privacy Rights above, and the following disclosures apply.
In the past 12 months Pryvo has collected these categories of personal information, in each case directly from you or automatically from your device as you use the app:
| CCPA category | What Pryvo collects | Purpose |
|---|---|---|
| Identifiers | Account identifier, email address if you create one, random installation identifier | Provide the service, prevent abuse |
| Commercial information | Subscription plan, product, store, and renewal state | Maintain purchases and entitlements |
| Internet or network activity | Selected app identifiers, app-control state, diagnostic and analytics events | Provide earned access, diagnose failures |
| Visual information | Proof photos you capture | Automated review of task completion |
| Inferences | Validation decisions and appeal outcomes | Provide the proof-review experience |
Pryvo does not sell personal information and does not share it for cross-context behavioral advertising, as those terms are defined by the CPRA. Pryvo has not sold or shared personal information in the preceding 12 months, including the personal information of consumers under 16. Pryvo does not use or disclose sensitive personal information for purposes other than those permitted without a right to limit.
Pryvo does not use your personal information to make decisions that produce legal or similarly significant effects about you. Automated review determines only whether a submitted photo visibly proves you completed your own task.
Other United States States
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law, you have substantially the rights described under Your Privacy Rights above: to confirm whether Pryvo processes your personal data, to access and obtain a copy of it, to correct it, to delete it, and to opt out of targeted advertising, sale, and profiling with legal or similarly significant effects. Pryvo does not conduct targeted advertising, does not sell personal data, and does not profile users in furtherance of decisions producing legal or similarly significant effects, so there is nothing for you to opt out of.
Where your state provides a right to appeal a refused request, you may appeal by replying to Pryvo's decision at support@pryvoapp.net with the word "appeal". Pryvo will respond to an appeal within 45 days and, if the appeal is denied, will tell you how to contact your state Attorney General.
Panama
Pryvo is operated from the Republic of Panama and is subject to Law 81 of 2019 on the Protection of Personal Data and its implementing regulations. Alejandro Mendoza is the data custodian for the purposes of that law. Panamanian residents have the rights of access, rectification, cancellation, opposition, and portability, exercisable through the contact details above and answered within the periods stated under Your Privacy Rights.
Device App-Control Data
Blocked-app preferences and live Android accessibility-service state are processed on the device. Pryvo uses accessibility capability only to identify and block user-selected distracting apps and meter earned access. It is not intended to read messages, passwords, or the content of unrelated apps. Device controls are voluntary and may be revoked or bypassed through device changes; Pryvo does not promise tamper-resistant or universal blocking.
To let you pick which apps to block, Pryvo asks Android which launchable apps are installed on the device, and on iPhone checks whether a small fixed list of apps is present. That list is read on the device, shown to you in the picker, and is not uploaded to Pryvo's servers or to anyone else. Only the identifiers of the apps you actually select are stored with your account, because a reward rule cannot work without them.
Turning Analytics Off
Pryvo's usage analytics record which features are used and where they fail. They never contain proof photos, task text, email addresses, or store receipts. You can switch them off at any time under Privacy & data in the app; the setting applies to that device and takes effect immediately. Turning analytics off does not limit any other part of Pryvo, and diagnostics that exist to detect security and abuse problems continue as described above.
Anonymous Sessions
Pryvo can start with an anonymous account. Until account upgrade is available, uninstalling the app or losing the device may permanently remove access to that anonymous account and its hosted history.
Security
Pryvo uses private storage, user-scoped reads, server-authoritative state changes, expiring signed URLs, atomic quotas, idempotency controls, and bounded job leases. No system is perfectly secure, but Pryvo is designed to minimize access and keep trust-critical decisions off the untrusted client.
Children
Pryvo is not directed to children under 13, and Pryvo does not knowingly collect personal information from a child under 13. If you are a parent or guardian and believe a child under 13 has provided personal information to Pryvo, contact support@pryvoapp.net and Pryvo will delete the account and its data. Because Pryvo can be used with an anonymous account, the fastest remedy is to open the app on the child's device and use the delete option on the Account screen.
Changes
Material changes will be reflected by updating the effective date and, where appropriate, providing in-app notice.
Contact
For privacy questions or rights requests, contact:
Alejandro Mendoza, trading as Veldrose Wright Street, Cárdenas, Ancón Panama City, Republic of Panama support@pryvoapp.net
The public policy URL is https://pryvoapp.net/privacy/, the Terms URL is https://pryvoapp.net/terms/, and the public deletion-request URL is https://pryvoapp.net/delete-account/.