Legal
Privacy Policy
Last updated: July 11, 2026
This policy is a general template provided for drafting purposes and has not been reviewed by an attorney. Forin Labs should have qualified legal counsel review and finalize this document before publishing it or relying on it, and should update it to match VeRa's actual data practices and applicable law in each region of operation.
1. Who we are
VeRa is operated by Forin Labs ("Forin Labs," "we," "us," "our"). This Privacy Policy explains what information we collect when you use the VeRa app, how we use it, how long we keep it, and the choices you have.
2. Information we collect
We collect the following categories of information:
- Account information — your name, phone number or email, username, and profile photo.
- Camera content — the live, dual-camera photos you take and send when you knock on a door, peek behind one, or reveal a moment.
- Circle and activity data — who you knock on, who knocks on you, mystery knock activity, and timestamps of when doors open, are answered, or expire.
- Device and usage data — device type, operating system, app version, crash logs, and general usage patterns.
- Approximate location — if you enable location sharing, a general location may be attached to a reveal.
3. How we use your information
- To operate the core Knock, Reveal, and Mystery Knock mechanics.
- To enforce the 5-minute reply window and the nightly Midnight Wipe.
- To keep the app safe — detecting abuse, enforcing our Terms, and responding to reports.
- To maintain and improve app performance and reliability.
- To communicate with you about your account, safety notices, and product updates.
4. The Midnight Wipe and data retention
VeRa is built around impermanence. Photos exchanged through Knocks and Reveals are automatically and permanently deleted from our active systems at midnight local time each day, except for content that both participants have explicitly and separately consented to push to the Public Feed. Deleted content may briefly persist in backup systems for a limited period for disaster-recovery purposes before being purged.
5. The Public Feed
Content is only shared to the Public Feed when every participant in a Reveal affirmatively consents. Once shared, that content is visible to other VeRa users (or the public, depending on your settings) and is retained until you remove it or your account is deleted.
6. How we share information
We do not sell your personal information. We may share information with:
- Service providers who help us operate VeRa (such as cloud hosting and analytics), under contracts that limit their use of your data.
- Law enforcement or regulators, when required by law or to protect the safety of our users.
- A successor entity, in the event of a merger, acquisition, or sale of assets.
7. Your choices and rights
- You can review and update your account information in-app at any time.
- You can disable location sharing at any time in your device or app settings.
- You can request a copy of your data, or request deletion of your account and associated data, by contacting us below.
- Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.
8. Children's privacy
VeRa is not intended for anyone under the age of 13 (or the minimum age required in your country). We do not knowingly collect information from children under that age. If we learn that we have, we will delete it promptly.
9. Security
We use industry-standard technical and organizational measures to protect your information. No system is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by other reasonable means before the changes take effect.
11. Contact us
Questions about this Privacy Policy can be sent to Forin Labs at contact@forinlabs.com.