Privacy policy
Last updated: September 10, 2026
1. Controller
Gojambel GmbH
Undinestr. 3
81927 Munich, Germany
hello@vellra.app
2. Privacy by design
Vellra is designed to work without an account. We do not operate Vellra user accounts or maintain a Vellra server for your forecast data. Information shown in the app is processed on your device.
3. Location data
If you allow location access, Vellra uses your device location to retrieve UV forecast information for your current area, based on the consent you give through the iOS permission prompt. Location search and place names use Apple's MapKit framework, which is governed by Apple's own privacy practices. You can deny or revoke location permission at any time in your device settings and use a saved location instead. We do not receive or store your precise location on our servers.
4. Forecast data and providers
Vellra uses forecast estimates supplied by currentuvindex.com and, when that service is unavailable, uvindexapi.com. Those providers may source or derive their forecast outputs from NOAA and other meteorological, model, or data sources; the providers and underlying sources may change over time. Requests to a provider may include technical information necessary to deliver a forecast, such as an IP address and the location or place data required for your request. A provider's processing is governed by its own privacy information. Where a provider processes personal data outside the European Economic Area, we use appropriate safeguards where required by applicable law.
5. Analytics
We use OpenPanel, a product analytics tool, to understand use of Vellra’s website and improve it. OpenPanel is self-hosted on our own infrastructure and, on the website, served from our own domain. On this website, analytics is activated only if you choose “Allow analytics” in the privacy notice. You can change that choice at any time through the “Privacy choices” link in the footer. If enabled, analytics processes usage events such as page views and outbound-link clicks, browser information, page URL, and referrer. Browser analytics events pass through a first-party Vellra relay that does not forward your IP address or common IP forwarding headers to OpenPanel. Our hosting provider may nevertheless process your IP address to deliver and secure the website, as described in the website-data section below. We use a first-party preference cookie named vellra_analytics_consent to remember your choice for up to one year. Analytics processing is based on your consent under Art. 6(1)(a) GDPR. Storing your choice is necessary to respect it. Analytics is pseudonymous, not anonymous: event and device/session identifiers may still be capable of distinguishing a browser session. Usage data is not shared with a third-party analytics company and is retained only as long as needed to understand usage trends, then deleted or aggregated.
6. Waitlist
If you sign up for early access on our website, we store the email address you provide in a database on our own infrastructure, to send you a TestFlight invite and, if applicable, a notification when Vellra launches on the App Store. We do not send any other email to this address. This processing is based on your consent under Art. 6(1)(a) GDPR. We keep your email address until Vellra launches, until you ask us to remove it, or for a maximum of 24 months, whichever comes first. You can ask to be removed at any time by emailinghello@vellra.app.
7. Purchases
Optional purchases are processed by Apple through the App Store. We do not receive your payment-card details. Apple's processing of purchase information is governed by Apple's privacy policy.
8. Website data
When you visit this website, your browser necessarily transmits technical data such as your IP address, browser type, and access time to the hosting provider. This processing is necessary to deliver and secure the website. This is based on our legitimate interest in operating and securing the website under Art. 6(1)(f) GDPR. We do not use this data to identify you personally. This is separate from the analytics described above.
9. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), or object to (Art. 21) the processing of your personal data, the right to data portability (Art. 20), and the right to withdraw consent at any time with effect for the future (Art. 7(3)). We keep personal data only for as long as necessary for the purposes described in this policy. To exercise your rights, contact us athello@vellra.app. You may also lodge a complaint with a supervisory authority, in particular the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), or the supervisory authority in your own country of residence.
10. Automated decisions
We do not use your personal data for solely automated decisions, including profiling, that produce legal effects or similarly significantly affect you.
11. Changes
We may update this policy to reflect changes to Vellra or applicable law. The current version is always available on this page.