Back to Veil
Privacy Policy
We don't know who you are. This page lists everything the app sends, everything our servers keep, and everything they never see.
1. Who we are
Veil is made by BLACK LAYERS CORP. (blacklayers.ca), an independent software company in Alberta, Canada. No parent company, no outside data partners, no advertising business. This policy is the full description of how the Veil iOS app and our servers handle information.
2. There is no account
You never give us an email, a name, a phone number or a password. On first launch the app generates a cryptographic key pair on your iPhone. The public half of that key is your identity to our servers; the private half never leaves your device. Registration proves possession of that key with a challenge; nothing else is asked.
3. What the app sends
• Your device public key, and the app version. • Your plan (free or Veil+), as a signed App Store receipt that we verify. • The location you choose to connect to, and your Shield settings (which of trackers, ads and malware to block). • Three numbers a day: how many tracker, ad and malware domains Shield stopped. These are counts only. That is the complete list. The app contains no analytics, advertising or crash-reporting SDKs of any kind.
4. What our servers keep
Durably: your public key and your plan (a tier, an expiry date, and Apple's transaction identifier). That is the whole record, and it is stored on Google Cloud Firestore in Canada. While you are connected: a peer entry on the server you chose (your public key and the private tunnel address assigned to you) and today's three Shield counts. These live in memory only. When you disconnect, when the lease expires, or when the server restarts, they are gone. Nothing is written to disk.
5. What we never see or keep
• The websites, apps or services you use through the tunnel. • The domains your device looks up. Shield's filtering resolver records only that a request was blocked and to which of the three categories it belonged, never the name that was asked for. • Your IP address. Our API never reads or logs the client address, and request logging is switched off on it. Exit servers keep no connection logs and are configured so that system logs live only in memory. • Timestamps of when you connected, from where, or for how long.
6. Service providers
• Google Cloud (Cloud Run and Firestore, Canada): runs the API and stores the public key and plan described in section 4. • No content delivery or edge network sits in front of the API. Your app talks to Google Cloud directly. To pick a nearby server the app sends a two-letter country it works out from your device's time zone; it is used for that one choice and never stored. • OVHcloud (Beauharnois, Canada): the exit servers are rented virtual machines that we configure ourselves. The provider can see that traffic flows to and from its machine, not what is inside the encrypted tunnel. Other providers may be added as locations grow, and this list will say so. • Apple: subscriptions are handled by the App Store. Apple processes the payment; we only learn whether a subscription is active. We never see your payment details. We do not sell, share, rent or use your data for any purpose other than running the VPN, and we commit to that in this policy as required by App Store guideline 5.4.
7. Shield and its limits
Shield blocks tracker, ad and malware domains at the DNS level inside the tunnel, for every app on your phone. It cannot block advertising served from a site's own domain or by apps that use their own encrypted DNS. The counts shown in the app are honest but approximate.
8. Legal requests and transparency
We publish every legal request we receive and what we were able to provide at https://www.blacklayers.ca/veil/transparency. Because we hold no logs, no accounts and no personal information, the answer to a request for a person's activity is: nothing.
9. Deleting your data
Choose "Reset identity" in Settings. The app generates a new key; the old public key and plan remain on our servers only until their record expires and is then removed. Deleting the app has the same effect on your device. Your subscription is managed by Apple and can be cancelled in your Apple Account settings.
10. Children
Veil is rated 4+ and collects no personal information from anyone, including children.
11. Changes to this policy
If the app ever changes what it sends or what our servers keep, this page changes first and the app's disclosure screen will match it. The effective date above is updated whenever this page is updated.
12. Contact
Email: info@blacklayers.ca Website: blacklayers.ca BLACK LAYERS CORP. · 5 Mitchell Rd NW, Calgary, AB T3R 2G3, Canada
BLACK LAYERS CORP. · 5 Mitchell Rd NW, Calgary, AB T3R 2G3, Canada · info@blacklayers.ca