Privacy Policy

This Privacy Policy describes how Proxy Tech Ltd (trading as Vera) (“Vera,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our marketing website (including the waitlist), our Vera mobile application, and related backend services (collectively, the “Services”).

This is a practical summary aligned with how our product is built. It is not legal advice. We encourage you to review this policy with your own counsel if you have questions about your situation.

1. Who we are

Controller: Proxy Tech Ltd.

Contact (privacy): stefano@stefanofracchiolla.com

Postal address: 28 Wenlock Road, London, HA89JF, UK

2. Scope

This policy applies to visitors of our website, people who join our waitlist, and users of the Vera mobile app. Some details apply only to certain parts of the Services; we call those out below.

3. Information we collect

3.1 Website and waitlist

• Waitlist: email address (required) and optional name. We use this to add or update your contact record with our email provider so we can send waitlist and product-related messages.
• Technical data: when you load our site, standard server and hosting logs may include information such as IP address, browser type, and timestamps.
• Analytics: we use PostHog (EU region) to understand how the site is used. PostHog may use cookies or similar technologies.
• Fonts: we load fonts from Google Fonts; your browser may connect to Google, which can receive technical data typical of web requests.

3.2 Vera mobile app and backend

• Account identifier: the app uses anonymous sign-in via Supabase Auth. You receive a stable account identifier (user id) without a traditional username/password flow on the device.
• Chat and content you provide: messages you send, including text and optional media such as images or audio (which may be transcribed for processing). This content is stored and used to operate the chat experience.
• Profile and relationship context: information you provide or that we derive to power Vera, such as display name, language/locale, onboarding assessments, profiles about people you are dating, scores and insights, and categorized “memory” text used to retrieve relevant context (including vector embeddings for search).
• Session context sent with requests: for example, device language/locale and timezone may be sent so responses can match your language and local date context. Timezone is used for prompting and is not stored as a dedicated profile field in our architecture; locale may be stored on your profile where the product is configured to save it.
• Local storage on your device: to improve speed and offline resilience, parts of your data (such as recent messages or profile summaries) may be cached on your device. Removing the app or clearing app data typically deletes that cache.
• Diagnostics: we may use tools such as Sentry for error reporting and PostHog for product analytics in the app and backend, which can include technical and usage information.

4. How we use information

We use the information above to:

• Provide, maintain, and improve the Services (including AI-powered features).
• Operate waitlist and transactional or product-related email communications.
• Understand usage and reliability (analytics and error monitoring).
• Protect security, prevent abuse, and comply with legal obligations.

AI features rely on sending relevant portions of your content to model providers so they can generate responses and structured outputs used to update your experience (see Subprocessors).

5. Legal bases (EEA, UK, and similar regions)

Where required, we rely on appropriate legal bases such as: performing our contract with you (providing the Services); legitimate interests (e.g. securing the Services, understanding aggregate usage, and improving the product) where not overridden by your rights; consent where we ask for it (for example, certain marketing communications where applicable); and legal obligations.

6. Subprocessors and service providers

We use trusted service providers to run the Services. They process data on our instructions and for the purposes described in this policy. Examples include:

• Loops — waitlist and email communications.
• PostHog — product analytics (we configure EU hosting for our PostHog project).
• Vercel — hosting for the marketing website and related serverless endpoints.
• Supabase — authentication, database, and serverless functions for the product backend.
• Anthropic — AI models used to generate Vera’s responses and tool-driven outputs.
• OpenAI — embeddings used for semantic search over stored memory content.
• Google — delivery of web fonts on the marketing site.
• Sentry — error monitoring and diagnostics for the app and backend.

Provider locations and transfer mechanisms (such as standard contractual clauses) may apply depending on where you live and how each vendor processes data. Ask us using the contact above if you need more detail for your region.

7. International transfers

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have different data protection rules than your own. Where required, we use appropriate safeguards for cross-border transfers.

8. Retention

We keep information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce our agreements. Retention periods can vary depending on the type of data and how it is used. You may request deletion as described below, subject to legal exceptions.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You may also have the right to withdraw consent where processing is based on consent (for example, marketing emails where applicable).

To exercise these rights, contact us at the privacy email above. You may also lodge a complaint with a data protection authority in your country.

Delete your account: you can request deletion of your Vera account and associated data at any time using our dedicated page: Delete your account. That page explains what is removed and how to submit your request (including if you no longer have the app installed).

10. Information about other people

Vera may help you reflect on conversations and behavior involving other individuals. You should only share content you have the right to share, and use Vera for personal, private purposes. Do not use the Services to violate someone else’s privacy or rights.

11. Children

The Services are not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps.

12. Security

We implement administrative, technical, and organizational measures designed to protect your information, including encryption in transit for data sent over the internet and access controls on our systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If changes are material, we will provide notice as required by law.