Privacy Policy

Last Updated:

1. Introduction

Welcome to aegisvectro.com. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website, when you use our mobile applications (including VELORYN), and when you interact with any of our products operated under the AegisVectro and AegisVectro Labs umbrella (including QuantumPy and the Aegis Threat Analyzer). It tells you about your privacy rights and how the law protects you.

This policy is one document covering several products. Where a clause applies only to a specific product, it is labelled accordingly (e.g. "VELORYN only"). All other clauses apply across the AegisVectro family of products.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: Includes first name, last name, or similar identifier provided via our contact forms or, for VELORYN, an optional display name you choose during onboarding (the name remains on your device and is only sent to the on-device AI to personalise the Companion conversational tone — see Section 6).
• Contact Data: Includes email address and telephone numbers you voluntarily provide to us via the website contact links or in-app feedback flows.
• Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, operating system, and (for mobile apps) device model, Android version, and ABI.
• Usage Data — Website: Information inputted into our Aegis Threat Analyzer or other interactive tools. Please do not input highly sensitive, proprietary, or classified code into the public threat analyzer.
• Usage Data — VELORYN (on-device only): Chat conversations with the on-device AI, attached photos (only when you explicitly attach them), voice transcripts from speech-to-text, journal entries, custom inventory items, tool layouts, and other personalisation. This data never leaves your device. It is stored in the application sandbox and is removed when you uninstall the app or clear app data.
• Location Data — VELORYN (on-device only): If you grant the location permission, your approximate or precise GPS coordinates are used on-device to detect your biome (e.g. forest, desert, alpine) and surface biome-relevant survival guidance. Coordinates are not transmitted to us or to any third party.
• Bluetooth Data — VELORYN (on-device only): If you use the optional mesh-networking feature, VELORYN scans for nearby Bluetooth peers running VELORYN. The scan is declared with the Android neverForLocation flag, meaning the operating system enforces that scan results cannot be used to infer your physical location. We do not collect or transmit scan results.
• Purchase Data — VELORYN: If you purchase the optional Premium upgrade (VELORYN Full Intelligence) via Google Play in-app billing, Google Play processes the payment and shares an entitlement token with the app. We do not see or store your payment card details — only whether your account is entitled to Premium content.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To respond to your inquiries submitted via our contact links or in-app feedback flows.
• To process inputs through our Aegis Threat Analyzer to provide you with security feedback (data is processed ephemerally and not used to train global public models without consent).
• For VELORYN, to operate the on-device AI, vector knowledge base, and offline survival tools entirely on your device. Inference, retrieval, voice recognition, and image analysis all run locally — nothing is sent to our servers.
• To improve our website, products, services, marketing, or customer relationships, including by aggregating anonymous, optional diagnostic information you choose to share with us via in-app feedback.

4. Third-Party Services

We utilise third-party infrastructure to operate our website, AI tools, and mobile applications. Depending on which product you are using, your data may be processed by the following providers strictly for the purpose of executing the requested services:

• Netlify — static hosting for aegisvectro.com.
• OpenAI / Google Gemini APIs — power the Aegis Threat Analyzer on the website.
• Google Play (Android) — distributes VELORYN and processes in-app purchases via Google Play Billing. Google's own privacy policy governs their handling of payment information.
• Play Asset Delivery — Google service that delivers VELORYN's large on-device assets (AI model files, the vector knowledge base, the knowledge graph) to your device after install. The delivery is encrypted in transit by Google.
• AegisVectro Labs products (e.g. QuantumPy) — separate products developed under the AegisVectro Labs umbrella may have additional or different third-party dependencies, disclosed within each product's own documentation where required.

VELORYN itself does not transmit your usage data, queries, location, voice, photos, or chat history to any third party. The mobile app's offline-first design means it does not require a network connection to operate after initial setup.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. For VELORYN, the strongest security guarantee is structural: most of your data simply never leaves your device — it is stored in the Android application sandbox and is protected by the operating system's per-app isolation. Premium purchase verification is bound to your Google account via signed entitlement tokens; tampering with local files does not grant access to Premium content.

However, no transmission over the internet and no storage system is entirely secure, and we cannot guarantee absolute security. You should keep your device's lock screen and software up to date as part of your own defence-in-depth.

6. VELORYN — Mobile Application Privacy

This section describes data practices specific to VELORYN, our offline-first survival intelligence mobile application. Where this section conflicts with general clauses in this policy, this section prevails for VELORYN only.

6.1. Offline-first by design. VELORYN is designed to operate without any network connection. After Google Play has delivered the initial application package and any required asset packs, no further server communication is required for VELORYN's core features to function. Your chat conversations, voice transcripts, journal entries, tool layouts, inventory, and biome detection are processed and stored exclusively on your device.

6.2. Permissions you may grant. Each permission is requested only for a specific purpose and may be denied without losing access to VELORYN's other features:

• Location (precise/approximate): Used on-device to detect your biome and to attach coordinates to a distress signal you explicitly broadcast over mesh networking. Never transmitted to us or any third party.
• Notifications: Used to surface emergency information and download progress.
• Bluetooth Scan / Bluetooth Connect / Bluetooth Advertise: Used to discover and exchange data with nearby VELORYN peers in mesh-network mode. Scan results are flagged neverForLocation at the Android manifest level so the operating system enforces that they cannot be used to infer location.
• Microphone: Used by the on-device speech-to-text engine (Vosk) to convert your voice queries to text. Audio is processed locally; no recordings are transmitted or retained beyond a short buffer needed for recognition.
• Camera / Photo Library: Used only when you attach a photo to a chat message for on-device image analysis (Premium feature). Photos are processed by the on-device vision model and stay on your device.
• Foreground Service: Used to keep the on-device AI inference process alive while it generates a response, so the operating system does not kill it mid-generation.

6.3. Optional display name. During onboarding, you may enter a display name. The name is stored locally and only injected into the on-device AI prompt when you have selected the Companion conversational tone — never under any other tone. You can remove or change it at any time in Settings.

6.4. Data export and deletion. You can export your chat history at any time via the in-app share controls (saved to your device's Downloads or shared via the Android share sheet of your choice). You can delete all VELORYN data by uninstalling the app or clearing app data via Android Settings — there is no server-side copy to delete because no server-side copy exists.

7. Children's Privacy

The AegisVectro website and Aegis Threat Analyzer are intended for users aged 18 or older.

VELORYN is rated "Everyone" on Google Play (PEGI 3) and may be used by users under 18 under the supervision of a parent or guardian, where local law permits. We do not knowingly collect personal information from children. Because VELORYN is offline-first and does not transmit personal data to our servers, we do not maintain any directly identifying records about any user — including children. If you believe a child has provided personal information directly to us through any contact form, please contact us at contact@aegisvectro.com and we will delete it.

8. Your Rights

Depending on the jurisdiction you are in (e.g. the European Economic Area, the United Kingdom, California, or other regions with comprehensive privacy laws), you may have one or more of the following rights with respect to personal data we hold about you:

• The right to access the personal data we hold about you.
• The right to correct inaccurate personal data.
• The right to request deletion of personal data, subject to legal retention requirements.
• The right to object to or restrict certain processing activities.
• The right to data portability where applicable.
• The right to withdraw consent for processing carried out on the basis of consent.
• The right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at contact@aegisvectro.com. For VELORYN, the most effective way to exercise your right to deletion is to uninstall the app or clear app data — this removes all on-device records.

9. Changes to this Policy

We may update this privacy policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we do, we will revise the "Last Updated" date at the top of this page. For material changes affecting how we handle your personal data, we will take additional steps to notify you, such as a prominent notice on the website or an in-app notification within the affected product.

10. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us at:

contact@aegisvectro.com