VelvetVerb
App Store Google Play
Home

Privacy Policy

Last updated October 19, 2026

1. Who we are

Neural Vector Lab LLC (“Neural Vector Lab,” “we,” “us”) operates VelvetVerb, an English-learning service. Our address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. Company information is also published at neuralvector.org.

This Privacy Policy explains how we handle personal information when you use velvetverb.com, the VelvetVerb apps, and related accounts and practice tools (the “Service”). It does not describe a different product that posts its own policy.

For privacy requests, email privacy@velvetverb.com . For product help, email support@velvetverb.com .

2. Scope

This policy covers information we collect from learners, from people who browse the public site, and from people who email us. It covers information we collect directly, information generated as you practice, and information we receive from a sign-in provider you choose, such as Google. It does not cover third-party sites you open from the Service, including an app store or neuralvector.org when that site is governed by its own notice.

3. Information we collect

We collect the following categories. We do not collect government ID numbers, precise location, contacts, advertising identifiers, or push-notification tokens. We do not collect payment-card or billing details, because VelvetVerb does not sell a paid plan today.

  • Account. Email address, whether the email is verified, a short-lived sign-in code, and, if you use Google, your Google account identifier, tokens needed to complete sign-in, and the profile image URL Google provides. We store a session token and, with the session, the IP address and user agent of the sign-in.
  • Profile. Display name, first and last name if you set them, gender, birth year, theme preference, and a profile photo if you upload one.
  • Learning settings. Native language, target language, CEFR band from placement, and the topics you choose.
  • Practice activity. Quiz answers and whether they were correct, mastery and review-scheduling values, which slides you have viewed, and likes or dislikes you give a slide.
  • Voice practice. While a session is active, your microphone audio is sent from your device to OpenAI over an encrypted connection so the practice can respond. We do not store that audio. We do store the transcript of what you and the practice said, the time of the turns, and session metadata such as duration and usage.
  • Search. Text you type into Explore is sent to OpenAI so we can embed it and find lessons. We do not build an advertising profile from searches.
  • Support. The contents of email you send us, and the address you send it from.
  • Diagnostics. Error and performance data, and, in the mobile app, a masked session replay used to debug crashes. Replay is configured to mask text and images.

4. How we use information

We use personal information to:

  • Create and secure your account, send one-time sign-in codes, and keep you signed in.
  • Place you at a CEFR band, fill your feed, remember practice history, and run voice practice.
  • Store a profile photo and serve lesson media.
  • Debug failures, prevent abuse, and keep the Service reliable.
  • Respond to support and privacy requests.
  • Comply with law and enforce our Terms.

6. Service providers

We use companies to run VelvetVerb. They may process personal information only on our instructions or as their own role requires, and not for their own advertising.

  • OpenAI. Embeddings of Explore searches and of lesson text, and the live voice session (audio in transit, plus transcription). We send a hashed learner identifier as a safety identifier, not your email address.
  • OpenRouter. Lesson generation, image generation, spoken audio for lessons, and related model calls. Prompts are built from topics, level, and lesson content, not from your email or name.
  • Cloudflare. Storage and delivery of profile photos and lesson media (Images, Stream, R2).
  • Resend. Delivery of sign-in emails to your address.
  • Sentry. Error reports and, on mobile, masked session replay.
  • Northflank. Hosting of the application and the managed database that stores account and learning records.
  • Google. Sign-in, only if you choose it.
  • Redis. Operational cache. It is not the system of record for your account.

7. AI processing

Automated systems generate lessons and reply during voice practice. A placement step sets a CEFR band from words you mark as known. Quiz results update mastery and review timing. These steps personalize practice. They do not produce a legal or similarly significant decision about you.

Live voice audio goes to OpenAI and is not written to our database. Transcripts are. Providers may retain a copy under their own policies for safety and abuse monitoring. We do not use your voice audio to advertise to you, and we do not sell it.

8. No sale or advertising sharing

We do not sell personal information. We do not share it for cross-context behavioral advertising, and we do not allow advertising networks to track you across other companies’ apps or sites through VelvetVerb. We do not use personal information to train a public advertising profile.

9. Retention

We keep account, profile, learning-history, and voice-transcript records while your account is open. Sign-in codes expire within minutes. Sessions last until they expire or you sign out.

After a verified deletion request, we delete or de-identify the personal information we hold in the account, profile, learning history, and voice transcripts, except where we need a record to comply with law, resolve a dispute, or enforce the Terms. Backups may keep a residual copy until the backup cycle overwrites it.

There is no self-serve export or delete button in the app today. Deletion and access requests are handled by email, as described under Your rights. A partial delete of learning records exists in our API for support use; emailing privacy@velvetverb.com is how you exercise the right.

Diagnostic logs are kept only as long as needed to investigate failures and abuse.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You may also complain to a data-protection authority. If we rely on legitimate interests, you may object and we will stop unless we have a compelling ground that overrides your interests.

Email privacy@velvetverb.com from the address on the account, and describe the request. We will respond within 30 days, or tell you if we need longer where the law allows it. We may ask for information to confirm the request is yours. An authorized agent may submit a request if they provide proof of authority and we can verify you.

We will not discriminate against you for exercising a privacy right. Because there is no paid tier, exercising a right does not change a price.

11. International transfers

We are based in the United States, and our providers process information in the United States and in other countries where they operate. Those countries may not provide the same protection as your home country. Where the GDPR or UK GDPR requires a transfer tool, we use an available safeguard such as Standard Contractual Clauses offered by the provider. You may ask for a summary of the relevant safeguard by emailing privacy@velvetverb.com .

12. Security

We use HTTPS for traffic to our Service, store native session material in device secure storage, and limit administrative access. The identifier we send to OpenAI for voice safety is a hash, not your email. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Please use a device only you control when you sign in.

13. Children

VelvetVerb is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe we have, email privacy@velvetverb.com and we will delete the account and associated personal information. Users who are 13 or older but under the age of digital consent where they live may use the Service only with a parent or guardian’s consent.

14. US state privacy rights

Residents of California, Colorado, Connecticut, Virginia, and other US states with consumer privacy laws may have rights to know, access, correct, and delete personal information, and to opt out of sale, sharing, and certain profiling. We do not sell personal information and we do not share it for cross-context behavioral advertising, so those opt-outs have no separate effect on our current practices. We do not use personal information for profiling that produces a legal or similarly significant effect.

California residents may also request the categories and specific pieces of personal information we collected, the categories of sources, the business or commercial purposes, and the categories of third parties we disclose to. Those categories are listed in this policy. We do not disclose personal information for money or other valuable consideration.

To use these rights, email privacy@velvetverb.com . You may appeal a denial by replying to our decision. If the appeal is denied, we will tell you how to contact your state attorney general where the law requires that notice.

15. Device permissions

The app asks for the microphone only so a voice-practice session can run, and for photo-library access only so you can choose a profile photo. You can deny either permission and still use the rest of the Service, aside from the feature that needs it. We do not ask for your contacts, location, camera, or an advertising identifier.

16. Changes

We will post changes on this page and update the date above. If a change is material, we will provide additional notice where we reasonably can, such as by email. Continued use after the update takes effect means you accept the updated policy, to the extent the law allows that form of acceptance. Where the law requires fresh consent, we will ask for it.

17. Contact

Neural Vector Lab LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Privacy: privacy@velvetverb.com . Support: support@velvetverb.com .