Privacy Policy

Devello Inc ("Devello," "we," "us," or "our") operates the following products and services:

• Devello Studios (devellostudios.com) — AI-powered creative tools platform
• Sygil — iOS education app for multi-lens learning
• Osmo AI — iOS AI assistant for productivity and daily tasks
• Devello Inc (develloinc.com) — software development and consulting services

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our products, websites, or services (collectively, the "Services"). Please read this policy carefully. By using our Services, you consent to the practices described herein.

1.1 Information You Provide

• Account information: name, email address, and profile photo when you create an account or sign in via Google OAuth
• Payment information: billing details processed securely by Stripe — we never store your full credit card number
• User content: images you upload for AI processing, text prompts, project specifications, and feedback
• Communications: messages you send to our support team or through contact forms
• Subscription preferences: plan selections, feature preferences, and notification settings

1.2 Information Collected Automatically

• Device information: device type, operating system, browser type, and screen resolution
• Usage data: pages visited, features used, session duration, and interaction patterns
• Log data: IP address, access times, referring URLs, and error logs
• Cookies and similar technologies: session cookies, preference cookies, and analytics identifiers

1.3 Information from Third-Party Services

• Google OAuth: when you sign in with Google, we receive your name, email address, and profile picture. We do not access your Google Drive, Gmail, contacts, or any other Google services beyond basic profile information needed for authentication.
• Apple Sign-In: when you sign in with Apple on our iOS apps, we receive your name and email (or a private relay address if you choose to hide your email)
• Stripe: payment confirmation status and subscription details — we do not receive or store your full payment card information

We use the information we collect for the following purposes:

• Provide Services: process your images with AI, deliver app features, manage your account and subscriptions
• Authentication: verify your identity and manage sign-in sessions across our platforms
• Payments: process transactions, manage billing, and send receipts
• Communication: respond to support requests, send service updates, and deliver transactional emails
• Improvement: analyze usage patterns to improve our products, fix bugs, and develop new features
• Security: detect fraud, prevent abuse, and protect the integrity of our Services
• Legal compliance: comply with applicable laws, regulations, and legal processes

When you authenticate with Google, we access only:

• Your Google account email address
• Your name
• Your profile picture

We use this data exclusively to:

• Create and maintain your user account
• Display your name and avatar within our Services
• Send transactional emails related to your account

We do not:

• Transfer Google user data to third parties except as necessary to provide our Services (e.g., Supabase for authentication)
• Use Google user data for advertising or marketing purposes
• Use Google user data to train AI models
• Allow humans to read your Google user data unless you provide explicit consent, it is necessary for security purposes, or it is required by law

You can revoke our access to your Google data at any time by removing Devello Studios from your Google Account permissions.

When you use our AI-powered tools on Devello Studios:

• Images are sent to third-party AI providers (Replicate, Google Gemini) for processing
• Processed images are stored temporarily in our cloud storage (Supabase) for delivery
• We do not use your uploaded images to train any AI models
• You retain full ownership of your original and processed images
• You can request deletion of your stored images at any time by contacting us

For Sygil and Osmo AI (iOS apps):

• AI processing is performed via secure API calls to our AI providers
• Conversation data may be stored locally on your device
• We do not access or store your conversations on our servers unless you explicitly share feedback

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

• Service providers: Supabase (authentication and storage), Stripe (payments), Replicate and Google (AI processing), Vercel (hosting) — only as needed to deliver our Services
• Legal requirements: when required by law, subpoena, court order, or to protect our rights and safety
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate protections for your data
• With your consent: when you explicitly authorize sharing with a specific third party

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Database encryption at rest via Supabase (PostgreSQL)
• API rate limiting and request validation
• PII masking in server logs
• Helmet.js security headers
• CORS allowlisting for authorized domains only
• Regular security audits and dependency updates

While we use commercially reasonable efforts to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

• Essential cookies: authentication tokens, session management — required for the Service to function
• Preference cookies: theme settings, tool preferences — to remember your choices
• Analytics: anonymous usage analytics to improve our Services — no personally identifiable tracking

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features.

• Account data: retained until you delete your account
• Processed images: deleted after delivery; temporary cache cleared within 24 hours
• Usage analytics: aggregated and anonymized data retained for service improvement
• Payment records: retained as required by financial regulations
• Support communications: retained for up to 2 years for service quality

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data and account
• Portability: request your data in a machine-readable format
• Restriction: request we restrict processing of your data
• Objection: object to processing of your data for certain purposes
• Withdraw consent: withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@develloinc.com or info@develloinc.com. We will respond within 30 days.

Devello Studios is not intended for children under 13. We do not knowingly collect personal information from children under 13 on our web platform.

Sygil includes a Kids Mode designed for younger learners. When Kids Mode is active, Sygil operates with enhanced privacy protections. No personal data is collected from children. Parents and guardians should supervise use of the app. Sygil complies with applicable children's privacy regulations including COPPA.

If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete such information.

Our Services are hosted in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Services, you consent to such transfer. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

California residents have the right to:

• Know what personal information is collected and how it is used
• Request deletion of personal information
• Opt out of the sale of personal information — we do not sell personal information
• Non-discrimination for exercising privacy rights

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices:

• Email: info@develloinc.com
• Privacy inquiries: privacy@develloinc.com
• Website: devellostudios.com/contact