Verity App Privacy Policy

Last Updated: May 11, 2025

Thank you for using Verity! This Privacy Policy explains how Floatflow (“we,” “us,” or “our”) handles information in connection with the Verity mobile application (the “App”).

Information We Collect

• Login Information: We collect a simple email address for login purposes to secure your access to the App.
• Query Timestamps: We collect timestamps for queries made to the App (i.e., when a request for analysis is made).
• Content You Share for Analysis: When you share content with Verity for analysis (such as text, URLs to articles, or URLs to publicly available videos on platforms like Reddit or Twitter/X), this content is processed to provide you with the service.
  • Audio from Public Videos: If you share a link to a publicly available video, the audio content of that video may be processed by third-party services to perform the analysis. Verity does not directly access your device’s microphone to record user-specific audio.
• No Query Content Storage by Verity: Verity itself does not log or store the actual content (the text you type, the specific URLs you share beyond temporary processing, or the substance of audio from public videos) on our servers after the analysis is provided to you.

How We Use Information

The information we collect is used for the following purposes:

• Login Information: To provide and secure your access to the App.
• Query Timestamps:
  • To monitor the overall usage of the App’s resources.
  • To identify patterns that may indicate resource abuse.
  • To help ensure the stability, availability, and fair use of the service for all users.
• Content You Share for Analysis:
  • The content you share (text, content from URLs, audio from public videos) is sent to and processed by third-party services (detailed below) to generate the factual analysis, contextual insights, and (if applicable) text-to-speech output.
  • Your identity (e.g., email used for login) is completely hidden from these upstream service providers; queries are made anonymously from our backend where feasible with the service.

We do not use your query timestamps to track your specific interests or for purposes like advertising. The primary use of timestamps is for operational monitoring and abuse prevention.

Third-Party Services and Data Sharing

Our Stance on Selling Data: We do not sell your personal information to third parties.

To provide its analysis and features, Verity utilizes several third-party services. When you share content or make a query, relevant data is shared with these services for processing. We encourage you to review their respective privacy policies to understand how they handle data:

• LLM Services (AI Analysis):
  • Service: Google’s Gemini models (via Google AI Studio or its APIs).
  • Purpose: To analyze the text or transcribed audio content you provide and generate contextual insights.
  • Data Shared: The text or transcribed audio content of your query/shared item.
  • Privacy Policy: Google Privacy Policy, Gemini API Terms of Service
• Internet Search (for AI Agent):
  • Service: Brave Search API.
  • Purpose: To allow the AI agent to scan the internet for relevant information when verified content is not readily available.
  • Data Shared: Search queries generated by our AI agent based on your initial request.
  • Privacy Policy: Brave Search Privacy Policy
• Fact-Checking Database:
  • Service: Google Fact Check API.
  • Purpose: To query for existing fact-checks related to the content.
  • Data Shared: Content snippets or keywords from your query/shared item.
  • Privacy Policy: Google Privacy Policy, Google API Terms of Service
• Speech-to-Text (STT):
  • Service: ElevenLabs STT.
  • Purpose: To convert the textual analysis results into spoken audio.
  • Data Shared: The text generated by our analysis to be converted to speech.
  • Privacy Policy: ElevenLabs Privacy Policy
• Content from Social Media Platforms (e.g., Reddit):
  • Service/Tool: PRAW (Python Reddit API Wrapper) to interact with Reddit.
  • Purpose: To fetch content from Reddit when you share a Reddit URL or item.
  • Data Shared/Accessed: The Reddit URL or identifier you provide. The app will access the content from Reddit’s platform via its API.
  • Note: Your interaction with Reddit content is also subject to Reddit’s Privacy Policy.

We select service providers that we believe maintain high standards of data privacy and security. However, the data shared with them is subject to their individual policies and practices. Verity endeavors to send the minimal data necessary to these services to fulfill your request.

Data Security

We take the security of your information seriously and implement reasonable technical and administrative measures to protect the data we handle. Our approach includes:

• Secure Authentication: To protect your account, we utilize robust authentication mechanisms for user login, leveraging services such as AWS Cognito and AWS Amplify. This process involves secure methods like JSON Web Tokens (JWTs) to verify your identity and safeguard your account access.
• Protection of Sensitive Information: Internal system credentials and API keys (used to communicate with third-party services) are securely stored and managed using specialized services like AWS Secrets Manager to prevent unauthorized access.
• Access Controls: Access to our backend systems and the data we store (such as your login information and operational query timestamps) is restricted internally through role-based access controls. This ensures that access is limited to authorized personnel based on the principle of least privilege and their specific responsibilities.
• Encryption in Transit: We use encryption (HTTPS/TLS - Secure Sockets Layer/Transport Layer Security) to protect data transmitted between your Verity app, our servers, and the third-party services Verity communicates with.
• Cloud Infrastructure Security: We build our services on reputable cloud infrastructure providers (Amazon Web Services - AWS), which employ their own comprehensive security measures to protect the underlying servers and network.

While we strive to use these strong security measures to protect your information, it’s important to remember that no system can be 100% secure. We cannot guarantee the absolute security of your data. Users also play a role in protecting their information by using strong, unique passwords and safeguarding their login credentials.

Data Retention

• Login Information: Your email address used for login is retained as long as your account is active, for the purpose of account security and access. You can request account deletion by contacting us.
• Query Timestamps: Query timestamps are retained for a limited period (90 days) for the operational purposes stated above (usage monitoring, abuse prevention) and are then aggregated or deleted. They are not permanently associated with your login information in a way that tracks your specific query history long-term after this period.
• Content Shared for Analysis: As stated, Verity does not store the content of your queries on its servers post-analysis. Third-party services may have their own retention policies for the data they process; please refer to their respective privacy policies.

Your Rights Regarding Your Information

We believe you should have control over your personal information. Depending on your location and applicable laws, you may have certain rights regarding the personal information that Verity holds about you. These rights may include:

• Right to Access: You have the right to request information about the personal data we hold about you, such as your login email address and a general description of the types of operational data we maintain (like query timestamps associated with your account usage).
• Right to Correction (Rectification): If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. This primarily applies to your login email address.
• Right to Deletion (Erasure / “Right to be Forgotten”): You have the right to request the deletion of your Verity account and the personal information associated with it, such as your login email address. Upon such a request, we will delete your personal information from our active systems, subject to any legal obligations or legitimate operational needs to retain certain data (for example, anonymized or aggregated usage data for statistical purposes, or data necessary for security and abuse prevention for a limited period).
• Right to Object to Processing: In certain circumstances, you may have the right to object to our processing of your personal information. For Verity, since the processing of shared content (via third-party services) and the collection of timestamps for operational integrity are core to providing and maintaining the service, objecting to this processing would typically mean ceasing to use the service and requesting account deletion.
• Right to Withdraw Consent: If we rely on your consent to process your personal information (for example, your consent to this Privacy Policy and the app’s functionality when you create an account), you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. Withdrawing consent for the core processing activities of Verity will mean you can no longer use the service.

How to Exercise Your Rights:

To exercise any of these rights, please contact us at verityapp@protonmail.com. Please clearly describe your request.

To protect your privacy and security, we may need to verify your identity before processing your request. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection laws.

Please note that exercising some of these rights, such as the right to deletion or the withdrawal of consent for core processing, may result in your inability to use some or all of Verity’s services. We will inform you if this is the case when you make your request.

We will not discriminate against you for exercising any of your privacy rights.

International Data Transfers

Verity’s primary data storage and processing for information we directly control (such as your login email address and query timestamps) occurs on servers located in the United States (specifically, AWS region us-east-1).

However, to provide Verity’s analytical features, we utilize various third-party services as detailed in the “Third-Party Services and Data Sharing” section of this policy (including AI analysis, internet search, fact-checking, and text-to-speech services). These third-party services may operate globally, and the data shared with them (such as the content you provide for analysis or text for speech synthesis) may be transferred to, stored, and processed in countries outside of your country of residence, including the United States or other jurisdictions where their servers are located. These countries may have data protection laws that are different from the laws of your country.

By using the Verity app, you acknowledge and consent to:

1. The transfer of your personal information (specifically your login email address and operational query timestamps) to our servers in the United States, if you are using the App from outside the United States.
2. The transfer of the content you share for analysis to these third-party services, which may involve processing this data in various countries globally as determined by those service providers.

We select reputable third-party service providers and encourage you to review their privacy policies (linked in the “Third-Party Services and Data Sharing” section) to understand their data handling practices, including how they manage international data transfers and the safeguards they apply. While we take steps to ensure data is handled securely during transmission to these services, the subsequent processing and storage by these third parties are governed by their respective policies.

Children’s Privacy

Verity is not intended for use by children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at verityapp@protonmail.com.