Privacy Policy

1. Introduction

This Privacy Policy describes how Calin Sirian ("we," "us," or "our") collects, uses, and protects information in connection with the Vela Browser application ("Vela" or the "App") for macOS and iOS. By downloading, installing, or using Vela, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy. Vela is designed with a local-first architecture. We do not build advertising profiles and we do not monetize your personal information. Server storage is used only when you choose to create a Vela account or use the optional Shared Profiles feature.

2. Information Collection

Vela collects minimal data, and the vast majority of information associated with your use of Vela never leaves your device. Below is a comprehensive overview of the data categories and how they are handled.

2.1 Data Stored Locally on Your Device

The following data is created and stored on your device. Vela does not transmit it to a server we operate unless you explicitly publish the profile through Shared Profiles:

• Browsing History — A record of the websites you visit, stored locally in Vela's application data on your device.
• Bookmarks & Favorites — Any bookmarks or favorites you save are stored in Vela's local database.
• Cookies & Site Data — Standard web cookies and site-specific storage data managed by the WebKit engine on your device.
• Open Tabs & Sessions — Information about your open tabs, tab groups, and browsing sessions.
• Preferences & Settings — Your chosen theme, layout preferences, content blocker rules, and other configuration settings.
• Downloaded Files — Files you download are saved to locations you designate on your device.

2.2 Data We Do Not Collect Automatically

Vela does not collect any of the following automatically or for analytics:

• Your browsing history or the content of any web pages you visit
• Search queries or form input data
• Device identifiers, IP addresses, or geolocation data
• Usage patterns, session durations, or feature-usage metrics
• Crash reports or diagnostic logs
• Contact lists, photos, or other personal files

2.3 Accounts & Shared Profiles

Account creation and Shared Profiles are optional. If you use them, we store your email address, a one-way password hash, authentication-token hashes, profile membership and invitation records, revision history metadata, and the latest profile archive you publish.

A shared profile archive can contain cookies, website storage, open and recently closed tabs, profile settings, thumbnails, and saved credentials associated with that profile. This information may reveal signed-in sessions and other highly sensitive data. It is uploaded only after an explicit publish action and is available to the owner, invited editors or viewers, and authorized service administrators. Invite only people you trust. Editors can replace the shared archive; viewers can download it.

Shared archives are protected in transit with HTTPS and stored outside direct public web access. Because Shared Profiles is an account-based server feature rather than iCloud Keychain, do not use it if you do not want this data stored on Vela's server. You may remove collaborators, leave a profile, or delete a profile from the app or account website.

3. AI Features

Vela integrates optional artificial intelligence features that allow you to interact with AI models directly within the browser. The privacy implications of these features depend on which AI provider you select.

3.1 Provider Selection

You have full control over which AI provider Vela uses. You may choose from the following providers, each with different privacy characteristics:

• Apple Intelligence — Processes AI requests on-device using Apple's built-in machine learning frameworks. Data does not leave your device. This is the most private option available.
• Ollama (Local Models) — Runs AI models locally on your machine. When configured to use a local Ollama server, your data does not leave your device or local network.
• OpenAI — When you select OpenAI as your provider, the text or data you submit through Vela's AI features is sent to OpenAI's servers for processing. This data is handled in accordance with OpenAI's Privacy Policy.
• Anthropic — When you select Anthropic as your provider, the text or data you submit through Vela's AI features is sent to Anthropic's servers for processing. This data is handled in accordance with Anthropic's Privacy Policy.

3.2 What Data Is Sent

When you use a cloud-based AI provider (OpenAI or Anthropic), only the specific content you choose to submit — such as selected text, page summaries, or your typed prompts — is transmitted to the provider. Vela does not send your browsing history, bookmarks, passwords, or any other local data to AI providers.

3.3 Your Control

AI features are entirely optional. You may disable them at any time in Vela's settings, switch between providers freely, or choose an on-device provider to ensure no data is transmitted externally.

4. News Feed & Wallpaper

4.1 RSS News Feed

Vela's news feed feature aggregates content from publicly available RSS and Atom feeds. When you use the news feed:

• Your device fetches RSS feed data directly from the news sources you have configured. Vela does not proxy, cache, or relay these requests through any server we operate.
• The news sources you subscribe to may log standard HTTP request data (such as your IP address) in accordance with their own privacy policies.
• No information about which feeds you subscribe to, which articles you read, or how you interact with the news feed is collected or transmitted by Vela.

4.2 Wallpaper Images

Vela may display wallpaper images on the new tab page sourced from Picsum Photos (Lorem Picsum). When a wallpaper image is loaded, your device makes a direct request to Picsum's servers. Vela does not track which wallpapers are displayed or interact with Picsum on your behalf in any other capacity. Picsum's use of data is governed by their own privacy practices.

5. iCloud Sync

Vela offers optional synchronization of certain data across your Apple devices using Apple's CloudKit framework. When iCloud Sync is enabled:

• Data such as bookmarks, tab groups, and selected preferences may be synced across your devices via Apple's iCloud infrastructure.
• All synced data is encrypted in transit and at rest by Apple's iCloud security mechanisms.
• Vela does not operate any synchronization servers. All sync traffic flows exclusively through Apple's CloudKit infrastructure, subject to Apple's Privacy Policy.
• We do not have access to, and cannot read, the data stored in your iCloud account.

You may disable iCloud Sync at any time in Vela's settings or in your device's iCloud preferences. Disabling sync does not delete data already stored locally on your devices.

6. Content Blocking & Fingerprint Protection

Vela includes built-in content blocking and browser fingerprint protection features designed to enhance your privacy while browsing the web.

• Content Blocking — Vela's content blocker uses locally stored filter lists to block ads, trackers, and other unwanted content. Filter list processing occurs entirely on your device. No information about blocked requests is transmitted to any external server.
• Fingerprint Protection — Vela employs techniques to reduce the uniqueness of your browser fingerprint, making it more difficult for websites to track you across the web. All fingerprint protection measures are applied locally on your device.

These features operate independently of any network connection to Vela and require no data collection to function. Filter lists may be periodically updated by fetching the latest versions from their public sources directly to your device.

7. Passwords & Credentials

Vela includes a password management feature that leverages Apple's Keychain Services and iCloud Keychain infrastructure to securely store and sync your credentials.

7.1 Storage & Encryption

• Passwords and other saved credentials are stored in the Apple Keychain on your device, which uses hardware-backed encryption, unless you explicitly publish a profile containing those credentials through Shared Profiles.
• All credential data is encrypted at rest using AES-256 encryption via Apple's security framework.
• When iCloud Keychain sync is enabled, credentials are synchronized across your Apple devices through Apple's end-to-end encrypted iCloud Keychain infrastructure.

7.2 Access Protection

• Access to stored passwords requires biometric authentication (Touch ID or Face ID) or your device passcode.
• Vela accesses password data only at the moment of autofill or when you explicitly view your saved credentials within the app.

7.3 Our Access

8. No Analytics or Telemetry

Vela does not incorporate any analytics frameworks, telemetry systems, or usage-tracking mechanisms. Specifically:

• No Analytics SDKs — Vela does not include Google Analytics, Mixpanel, Firebase Analytics, Amplitude, or any other analytics or tracking SDK.
• No Crash Reporting — Vela does not collect or transmit crash reports, stack traces, or diagnostic data. If you have opted in to sharing crash data with Apple via your device settings, Apple may collect crash logs for apps distributed through the App Store in accordance with Apple's own privacy practices.
• No Telemetry — Vela does not phone home, ping remote servers, or transmit any data about how you use the application, how often you use it, or which features you engage with.
• No A/B Testing — Vela does not conduct remote A/B tests, feature flags, or experiments that require data collection.

9. No Advertising

Vela is and will remain free of advertisements. We are committed to the following:

• No Ads — Vela does not display advertisements of any kind, including banner ads, interstitial ads, native ads, or sponsored content.
• No Ad Tracking — Vela does not integrate with any advertising networks or ad-tracking platforms. We do not collect or share advertising identifiers (such as IDFA).
• No Data Sales — We do not sell, rent, lease, or otherwise commercially transfer your personal information to any third party for any purpose, including advertising or marketing.
• No Data Sharing for Profit — We do not share your data with data brokers, marketing firms, or any other entity for monetary or other consideration.

10. Third-Party Services

Vela interacts with the following third-party services in the course of normal operation. In each case, your device communicates directly with the third-party service — Vela does not act as an intermediary or proxy.

10.1 AI Providers

• Apple Intelligence — On-device AI processing via Apple's machine learning frameworks. Subject to Apple's Privacy Policy.
• OpenAI — Cloud-based AI processing when selected by the user. Subject to OpenAI's Privacy Policy.
• Anthropic — Cloud-based AI processing when selected by the user. Subject to Anthropic's Privacy Policy.
• Ollama — Local AI model execution. Data remains on your device or local network. See Ollama's documentation for details.

10.2 Content Services

• RSS Feed Sources — Various public news sources whose RSS or Atom feeds you choose to subscribe to. Each source has its own privacy policy.
• Picsum Photos — Provides wallpaper images for the new tab page. See picsum.photos.

10.3 Apple Services

• iCloud / CloudKit — Used for optional cross-device synchronization. Subject to Apple's Privacy Policy.
• Apple Keychain / iCloud Keychain — Used for secure password storage and synchronization. Subject to Apple's Privacy Policy.
• App Store — Vela is distributed via the Apple App Store. Apple may collect data related to app downloads and updates per their privacy practices.

We encourage you to review the privacy policies of any third-party services you interact with through Vela. We are not responsible for the privacy practices of these third parties.

11. Data Retention & Deletion

Because Vela stores all user data locally on your device (or in your personal iCloud account for synced data), you have complete control over data retention and deletion.

11.1 Local Data

• You may clear your browsing history, cookies, site data, and cache at any time through Vela's settings.
• You may delete individual bookmarks, saved passwords, or other stored data at any time through the app's interface.
• Uninstalling Vela from your device removes all locally stored application data.

11.2 iCloud Data

• Data synced to iCloud can be managed through your device's iCloud settings or through Vela's sync preferences.
• Disabling iCloud Sync for Vela stops future synchronization. To remove data already synced to iCloud, you may use your iCloud account settings.

11.3 Third-Party Data

For data that may have been processed by third-party AI providers (OpenAI, Anthropic), please refer to the respective provider's privacy policy for information on their data retention and deletion practices. Vela does not retain copies of data sent to AI providers.

11.4 No Server-Side Retention

12. Children's Privacy

Vela complies with the Children's Online Privacy Protection Act (COPPA) and similar international regulations regarding children's privacy.

• Vela does not knowingly collect personal information from children under the age of 13 (or the applicable age in your jurisdiction).
• Because Vela does not collect personal information from any user, there is no mechanism through which children's data could be inadvertently collected by us.
• If you are a parent or guardian and believe that your child has provided personal information to a third-party service through Vela, please contact the relevant third-party service directly and reach out to us at [email protected] so we can assist.

Parents and guardians are encouraged to supervise their children's use of internet browsers and to utilize the parental control features available on Apple devices (Screen Time, Content Restrictions) to manage their children's browsing experience.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• The "Effective Date" at the top of this page will be updated to reflect the date of the most recent revision.
• For material changes that significantly affect how your data is handled, we will provide prominent notice within the Vela application or through the App Store update notes.
• Your continued use of Vela after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your privacy. The most current version will always be available at velabrowser.com/privacy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or Vela's privacy practices, please contact us:

We are committed to resolving any privacy concerns promptly and transparently. If you believe your privacy rights have been violated, you also have the right to lodge a complaint with your local data protection authority.