Privacy

Last updated 8 October 2026. Velvet is run by NexusLayer (hello@nexuslayer.eu).

End-to-end encrypted

Your diary entries and your profile (gender, nickname, partners' names, your own labels) are encrypted on your device with AES-256 before they are sent. The key is created on your device and is only stored on your devices and inside your private link (after the # sign, which browsers never send to servers). We never receive it, so we cannot read your diary, and neither could anyone who broke into our server.

What our server stores

• A random account ID (no email, no name, no phone number).
• Encrypted entries and profile, which we cannot decrypt, and when they were last changed.
• If you buy Pro: a payment reference from Stripe or Google Play, and the email address Stripe gives us.

Photos

Photos never leave your device. They are stored encrypted inside the Android app, or in your browser's storage on the web.

No ads, no tracking

No advertising, no analytics, no selling data. The Android app blocks screenshots and can lock with your fingerprint or PIN.

Deleting

In You, choose Erase my diary to delete every entry, or Delete my account to remove everything. Deletion is immediate.