What we collect
Velora stores your email address, password-derived local credential record, age confirmation, settings, drafts, private messages, RideCoin balance, receipts and transaction history on your device. Email addresses and passwords are never sent to Common-Post.
Public profile details, public posts, comments, likes and voice-room information are sent to the Velora service so other riders can see and interact with them. The service uses a stable opaque account identifier that is derived independently of your password.
Camera and microphone
Camera and microphone access is requested only when you start a video call, take or select media, or unmute in a voice room. Velora does not access either sensor in the background. A video call preview remains on your device unless a supported live call service is connected.
Photos and files
Media you choose to publish is uploaded only after your action. Private object links are short lived. Seed article images are fetched from public image providers and do not contain your personal information.
Private messages
Direct messages and conversations are device-local and isolated per signed-in account. Blocking is directional and suppresses messages and unread state from the blocked account without replay after unblocking.
Purchases
RideCoin purchases are initiated through the platform store. Velora credits a balance only after a successful native purchase callback includes receipt data and a previously unused transaction identifier. Payment card details are handled by the store and are not available to Velora.
Permissions and location
Velora asks for permissions at the moment a related feature is used. The app does not request precise location; your city is selected manually and route text is supplied by you.
Safety, moderation and retention
Reports, moderation decisions and appeals are kept separate from personal block lists. Public content may be retained as needed to investigate reports, enforce rules, prevent abuse or meet legal obligations. Account deletion takes effect immediately: the local credential is revoked and the account cannot sign in again on that device. There is no cooling-off period.
Your choices
You can edit public profile details, delete your posts, block or unblock ordinary accounts, change permissions in system settings and request account deletion from the app. Fixed review and administrator accounts cannot be blocked.
Children
Velora is for adults aged 18 or older. The age gate is stored on the device and must be completed before authentication.
Contact
For privacy questions or deletion requests, contact maycandixon@icloud.com.