Privacy Policy

Effective Date: December 15, 2025 | Last Updated: February 8, 2026

Our Commitment

We will never sell your financial data. Your trust is the foundation of Vero. We collect only what we need to provide you with a seamless financial management experience, and we protect your data with industry-standard security practices.

1. Information We Collect

Information You Provide

Account Information: Email address and profile details you provide during registration
Authentication: Login is handled via secure one-time codes or magic links. We do not require you to create an app password.
Financial Account Credentials: When you connect your bank accounts, you enter your bank login information directly into Plaid's secure flow. Vero does not see or store your bank login credentials.

Information from Financial Institutions

When you connect your accounts through Plaid, we receive:

Account Data: Account names, types, and account numbers (masked)
Balance Information: Current and available balances
Transaction Data: Transaction history, including merchant names, amounts, dates, and categories

User Content

Chat Messages: Questions and messages you send to Vero's AI assistant are processed to generate personalized financial insights and responses

Information Collected Automatically

Device Information: Device type, operating system, and unique device identifiers
Usage Data: Chat messages and interactions with Vero's features (budgets, category customizations, transaction edits)
Log Data: IP address, access times, and app performance data
Error Tracking: Crash logs and performance metrics (via Sentry)

Biometric Data

If you enable Face ID or Touch ID for app authentication, biometric verification is processed entirely on your device by Apple's secure enclave. Vero never receives, stores, or has access to your biometric data.

2. How We Use Your Information

We use your information to:

Provide Services: Display your accounts, balances, transactions, and AI-powered financial insights. Your chat messages are processed by our AI provider to generate personalized responses
Improve the App: Analyze usage patterns to enhance features and fix issues
Security: Detect and prevent fraud, unauthorized access, and other security threats
Communications: Send important updates about your account and our services
Legal Compliance: Meet our legal obligations and respond to lawful requests

3. How We Share Your Information

Service Providers

We share data with trusted third-party service providers who help us operate Vero:

Plaid, Inc.: Bank account connections and transaction enrichment. We share account data and transactions. (Plaid handles your bank login credentials in its secure flow.)
Supabase: Database and authentication. We share user account data, transaction data, chat history, and encrypted connection tokens used to access financial data.
Anthropic (Claude): AI-powered financial insights and chat responses. When you ask Vero a question, your message and relevant financial context are processed by Anthropic's AI to generate a response. Anthropic does not use your data to train its models.
OpenAI: Transaction search via semantic embeddings. We share transaction metadata (merchant names, amounts, categories) for generating search embeddings, enabling natural language search across your transactions.
Exa AI: Merchant identification and web search. When you ask about a transaction, Exa may be used to look up merchant information. We share merchant names and search queries only, not your financial data.
RevenueCat: Subscription and entitlement management. We share your user ID, subscription status, purchase events, and device information.
Sentry: Error tracking and crash reporting. We share crash logs and performance data to help us identify and fix app issues. We aim to avoid sending sensitive financial information in error reports.

These providers are contractually bound to protect your data and use it only to provide services to Vero.

For information about how our service providers handle your data, please review their privacy policies:

We Do NOT:

Sell your personal or financial information to third parties
Share your data with advertisers
Use your financial data for purposes other than providing Vero's services

4. Data Security

We implement industry-standard security measures to protect your data:

Encryption in Transit: All data transmitted uses TLS 1.2 or higher encryption
Encryption at Rest: Your data is encrypted using AES-256 encryption
Access Controls: Role-based access controls limit who can access user data
Authentication: We support biometric login (Face ID/Touch ID)
Secure Infrastructure: Our infrastructure is hosted on Supabase, which maintains SOC 2 Type II compliance

5. Data Retention and Deletion

Active Accounts: We retain your data while your account is active
Account Deletion: You may request deletion at any time by contacting us at support@askvero.app
Post-Deletion: We will delete your personal and financial data within 7 days, except where retention is required by law

6. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request your data in a portable format
Disconnect Accounts: Revoke access to connected financial accounts at any time

You can also disconnect your linked accounts via the Plaid Portal.

To exercise these rights, contact us at support@askvero.app.

7. Children's Privacy

Vero is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above. Your continued use of Vero after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at support@askvero.app.

10. Third-Party Privacy Policies

Your data may also be subject to the privacy policies of our service providers: