How we handle your data
No dark patterns, no fine print written to confuse you. vero. reads what you write so it can check what you understand — here's exactly what that means for your data, and what you can do about it yourself.
What we collect
Your account: your email address — that's how you sign in (magic link, no password). Your study data: the courses and topics you create or import (including the text of course manuals you upload), the checkpoint explanations you write, your answers to follow-up questions, the AI feedback you receive, and your mastery and streak numbers. The waitlist: if you joined it, your email plus any study frustrations and notes you chose to share. We don't ask for anything we don't need — no name, no student number, no phone.
Why we collect it — and the legal bit
We process your study data to run vero. for you (in GDPR terms: performance of a contract) — a checkpoint can't be evaluated without reading it. We keep daily usage counters and rate limits to stop abuse and keep the service affordable (legitimate interest). Anonymous product analytics run only if you opt in via the consent banner (consent — and "no" is a fine answer). We never sell your data, never use it for ads, and never profile you across the web.
The AI part, honestly
When you submit a checkpoint, answer a follow-up question, chat with vera, or import a course manual, that text is sent to our AI provider — Mistral AI, processed on servers in the EU — to generate your feedback. That's the whole purpose of the product, so it isn't optional, but it is bounded: your text is used to produce your feedback, not to train anyone's models, and nobody at vero. sits reading your submissions. Your answers are never shared with your university or other students.
Who touches your data
A short, complete list of processors: Supabase (database & sign-in, EU — Frankfurt), Mistral AI (AI evaluation, EU), Vercel (hosting), Resend (the emails you signed up for), Upstash (rate limiting), Sentry (error monitoring, EU — with your content and email scrubbed out before anything is stored), and PostHog (analytics, EU — only after you opt in). If this list changes, this page changes first.
How long we keep it
Until you delete it — there's no hidden retention clock. Your study data lives as long as your account does. Deleting your account (Settings → delete account) removes your courses, submissions, feedback, answers, and usage counters in one step, for real. The waitlist entry is removed when you ask or when the waitlist itself is retired.
Your rights — mostly self-service
You can export everything we hold about you (Settings → export your data — a JSON file, yours to keep) and delete your account yourself (Settings → delete account), no email required, no reason needed. Correction, objection, or anything the buttons don't cover: email support@verostudyapp.com and a real person handles it. You can also complain to the Dutch DPA (Autoriteit Persoonsgegevens) — though we'd rather you tell us first so we can fix it.
Cookies & tracking
The app uses sign-in session cookies only — the kind that keep you logged in, nothing more. No marketing cookies, no third-party trackers. Product analytics are off by default and only start after you explicitly say yes to the consent banner; declining changes nothing about how vero. works.
Data controller: vero., Utrecht, the Netherlands. Questions or requests? Email support@verostudyapp.com. · Last updated 2 July 2026.