Skip to content
Solvena Labs
Legal

Privacy Policy

Veluma — a product of Solvena Labs · Last updated: 17.08.2026

1. Introduction and Scope

This Privacy Policy explains how Solvena Labs collects, uses, discloses, and protects personal data when you use the Veluma mobile application. This Policy is intended to comply with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and, where applicable to users in the United States, the California Consumer Privacy Act (CCPA/CPRA) and other applicable privacy laws.

2. Data Controller

The data controller responsible for processing your personal data is:

Solvena Labs, Inhaber: Justus Hesse
Nienburger Str. 31, 27283 Verden, Germany
Email: solvenalabs@gmail.com

3. What Data We Collect

3.1 Account and Profile Data (stored on our server infrastructure)

  • Email address
  • Username
  • Display name (optional)
  • Bio / profile text (optional)
  • Profile picture URL (optional)
  • Home church / community (optional)
  • Preferred Bible translation
  • Account creation date
  • Usage statistics: current streak, longest streak, total active days, number of verses memorized, completed reading plans, favorite ("key") verse
  • Privacy and visibility settings: profile visibility (public / friends only / private), streak visibility, statistics visibility
  • Saved and memorized Bible verses, including verse text, reference, translation, language, learning status, learning level, and next review date

3.2 Data Stored Locally on Your Device

  • Preferred Bible translations (list)
  • Theme setting (light / dark / system)

This local data is not transmitted to our servers.

3.3 Subscription and Payment Data

Veluma offers a free Basic plan and a paid Premium plan (monthly or annual billing). Payment is processed entirely by Apple (App Store) or Google (Google Play) and managed through our subscription management provider, RevenueCat. We do not receive or store your payment card details.

  • Subscription status and plan type (Basic / Premium)
  • Subscription start, renewal, and expiration dates
  • Transaction and purchase identifiers provided by Apple, Google, and RevenueCat

3.4 Advertising Data

Veluma displays advertisements to users on the free Basic plan, served through Google AdMob. To do so, the App collects and shares the following with Google:

  • Advertising identifier (IDFA on iOS / Advertising ID on Android)
  • Device information and app usage data used for ad delivery and measurement

Before requesting or displaying any ads, the App obtains your consent via Google's User Messaging Platform (UMP), in accordance with GDPR/UK consent requirements, and, on iOS, requests permission through Apple's App Tracking Transparency (ATT) framework. If you decline tracking permission, you will still see ads, but they will not be personalized based on your activity in other apps or websites. Unlimited subscribers do not see ads.

4. Purposes and Legal Basis for Processing

We process your personal data on the following legal bases under Art. 6 GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR): to create and manage your account, provide Bible reading and memorization features, and process your Premium subscription.
  • Legitimate interests (Art. 6(1)(f) GDPR): to maintain and improve the App, ensure security, and prevent misuse.
  • Consent (Art. 6(1)(a) GDPR): where you actively choose to make your profile, streak, or statistics visible to other users.
  • Legal obligation (Art. 6(1)(c) GDPR): where we are required to retain certain data, e.g. for tax or accounting purposes.

5. Third-Party Recipients (Processors and Service Providers)

We share personal data only with the following categories of recipients, each of whom acts either as our data processor or as an independent controller for their own services:

Supabase, Inc. (hosting and backend infrastructure)

Supabase provides our authentication, database, and server-function infrastructure. Account data, statistics, saved verses, and privacy settings are stored on Supabase's servers. As disclosed to us, Supabase's infrastructure for this project is hosted in the United States.

bible.helloao.org (Bible text API)

Bible verse text is loaded live from this third-party API based on your selected translation and reference. No account-identifying personal data is transmitted with these requests.

Apple Inc. and Google LLC (app stores and in-app purchases)

If you purchase a Premium subscription, your payment is processed entirely by Apple or Google in accordance with their respective privacy policies. We do not receive your payment card information.

RevenueCat, Inc. (subscription management)

RevenueCat helps us manage and verify subscription status across platforms. RevenueCat receives purchase and subscription-related identifiers from Apple/Google on our behalf.

Google AdMob (advertising)

We use Google AdMob to display ads to free-plan users. AdMob may collect your advertising identifier and usage data to serve and measure ads, subject to your consent (see Section 3.4). Google acts as an independent controller for data processed for its own advertising purposes. For more information, see Google's Privacy Policy at policies.google.com/privacy.

6. International Data Transfers

Because Supabase's infrastructure for this project is located in the United States, your personal data may be transferred to and processed in a country outside the European Economic Area (EEA). Where this is the case, we rely on appropriate safeguards recognized under Art. 44 et seq. GDPR, such as Standard Contractual Clauses (SCCs) with our service providers, to ensure your data receives a level of protection consistent with EU law. You may request further information about these safeguards by contacting us at solvenalabs@gmail.com.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your data is permanently deleted from our systems, except where we are legally required to retain certain records (e.g. for tax purposes) for a limited period thereafter.

8. Visibility of Your Data to Other Users

[This feature will be added in future updates and is therefore not yet available.]

Veluma includes an optional public profile feature. Depending on your chosen visibility settings (public, friends only, or private), other users of the App may be able to see your profile information, streak, and statistics. This is a sharing of information within the App's community feature, not a disclosure to external third parties. You can change these settings at any time within the App.

9. Children and Minors

Veluma does not currently enforce a minimum age requirement. However, under Art. 8 GDPR, children under the age of 16 require the consent of a parent or legal guardian to create an account and use the App within the European Union. If you are a parent or guardian and believe your child has provided personal data without your consent, please contact us at solvenalabs@gmail.com so we can take appropriate action, including deletion of the account.

For users in the United States, please note that we do not knowingly collect personal data from children under 13 in a manner inconsistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has created an account, please contact us immediately.

10. Your Rights

If you are located in the EEA or Germany, you have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement

If you are a California resident, you may have similar rights under the CCPA/CPRA, including the right to know, delete, and opt out of the sale or sharing of personal information. Solvena Labs does not sell your personal information.

To exercise any of these rights, please contact us at solvenalabs@gmail.com.

You can manage or withdraw your advertising consent at any time via the consent dialog shown in the App, or by adjusting your device's ad tracking settings (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Privacy > Ads).

11. Account Deletion

You may delete your account at any time directly within the App. Account deletion is processed via a dedicated server-side function that permanently removes your profile, statistics, saved verses, and privacy settings from our systems.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, in line with industry standards used by our infrastructure provider, Supabase.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, technical, or business reasons. We will notify you of material changes within the App or by other appropriate means.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Solvena Labs, Justus Hesse
Nienburger Str. 31, 27283 Verden, Germany
Email: solvenalabs@gmail.com