Privacy policy

What you choose to share

Vennelo is for adults 18 and older. You can create a guest profile without providing an email address. We store your display name, username, optional bio, profile and cover photos, and the recovery phrase information needed to restore your profile. Keep your recovery phrase private.

People in a room can see the messages, photos, profile details, and optional camera or screen share you make available there. Your microphone and camera are off until you choose to use them. Other participants may capture what they see or hear on their own devices.

Rooms, photos, and safety reports

City-room messages and images normally expire after two hours. You can delete your own messages, and a host can remove messages from their room. A view-once photo can be opened once by each eligible recipient; unreported photo bytes are cleaned up within two hours. Cached copies may take longer to clear.

When someone reports a message or photo, we may keep its text, caption, and attached photo privately for operator review for up to 30 days after the report, even if ordinary chat expires or the message is deleted. We use reports and moderation records to investigate abuse and enforce our community rules.

Mafia game tables

Mafia tables keep game state, chat, role assignments, actions, and investigation results so a match can continue and players can reconnect. Hidden information is shared according to the game rules. Closed table records normally become eligible for deletion after seven days; they can remain longer while required voice-access cleanup is unresolved. Your win and match statistics remain linked to your profile until you delete it.

We retain technical voice-access records to revoke old game connections safely. Confirmed records are eligible for cleanup after 90 days once the game is closed or removed; unresolved cleanup records remain until they can be handled safely. These records do not contain recordings of your voice.

Connection and usage information

For safety, we keep keyed fingerprints of networks used by a profile, including first and last seen times, while that profile exists. Report-related network fingerprints can remain for up to 30 days. Encrypted IP addresses and approximate city, region, and country inferred from an IP may be held for up to seven days. An operator must provide a reason and re-enter their key to view this evidence; access is audited. Network fingerprints are moderation evidence and do not block access by themselves.

Signed browser and app identifiers help apply safety restrictions. An app identifier can remain on the device across sign-out, recovery, or profile deletion; it is not an account login credential. Unbanned server-side browser/app associations are normally removed after 90 days without activity, while active safety restrictions can remain. Signup checks also consider limited signals such as timezone consistency, network reputation, and recent registration activity.

We keep room connection metadata and account activity events, such as profile creation, recovery use, and room entry or exit, for up to 90 days. Account creation and earliest/latest observed activity dates stay with a retained guest profile. These events measure use of Vennelo, including time spent listening; they are not recordings of your conversations.

On the website, PostHog measures public page visits, referrals, device/browser information, profile creation, and room entry using a session-scoped pseudonymous identifier. We disable session recording and do not send conversation content, profile names, room passwords, recovery phrases, or private room identifiers to PostHog. These analytics events are retained for one year, and we respect Do Not Track and Global Privacy Control.

Services used to provide Vennelo

LiveKit relays room audio and optional video or screen sharing. Vennelo does not store ordinary room audio or camera video. If you choose to use Spark or a dedicated AI room, the content you submit or the audio you explicitly allow Spark to hear can be processed by the AI service to answer you. Ordinary rooms are not silently sent to conversational AI.

Vennelo uses YouTube API Services to search public videos and playlists, retrieve public video titles and playlist items, and check whether a video can be embedded. Manual search text and a selected video's public ID, title or artist credits may be sent to YouTube. We do not send room names, participant identities, ordinary chat or room audio in those requests. Public search and related results are cached for up to seven days; video metadata and playlist items are cached for shorter periods. Choosing Listen loads YouTube's embedded player on your device, which connects directly to YouTube. Review the Google Privacy Policy and YouTube Terms of Service.

Your choices and deletion

Use Profile in the app or website to update your profile, manage a recovery phrase, or delete the profile. Deletion removes the guest profile and its recovery access. Recent room content, reported evidence, activity records, and historical network flags may remain for the limited periods or safety purposes described above. See the account-deletion instructions for steps and details.

YouTube search caches contain public video and playlist data, not your YouTube account data. Vennelo does not request access to your Google or YouTube account. If you want to review or revoke access granted to other apps, visit Google's security settings. For questions about Vennelo's YouTube data use or deletion, contact us below.

For privacy questions or help with a deletion request, email support@vennelo.com. Never send your recovery phrase by email.