Last updated: 2026-01-23
Version: 2026-01-23-v1

Introduction

Sentria (“Sentria”, “we”, “us”, or “our”) provides a cross-platform note application (“App”) that allows users to create, edit, and (optionally) sync notes across devices. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights available to you.

This policy applies when you: (a) download or use the App; (b) create an Account; (c) visit our website at https://velivane.sentrialabs.com; or (d) otherwise interact with our services (together, the “Service”).

Please also read our Terms of Service, which describe rules for using the Service.

Summary — the short version

  • You own your notes.
  • We store your notes locally by default. Cloud sync and backups are optional and available only when you create an Account and subscribe to a paid plan.
  • We collect account details, device & diagnostic data, usage analytics, and subscription/billing information necessary to provide and improve the Service.
  • We use third-party processors to host, store and process data; we disclose subprocessors to enterprise customers or in a DPA upon request.
  • You may access, correct, export, or request deletion of your data via the App or by contacting legal@sentrialabs.com.

Categories of information we collect

We collect the following categories of information:

  • Account data. Email address, username, profile metadata, hashed credentials (if applicable), and authentication provider identifiers (e.g., OAuth, Supabase user id).
  • User Content. Notes, attachments, and files you create or upload when you enable cloud sync. This is the primary content you store in the App.
  • Payment & subscription data. Subscription status, plan identifier, billing email, and payment processor tokens (we do not store full card numbers). Billing is processed by our Payment Provider.
  • Device & technical data. Device model, OS and version, app version, local timestamps, locale and region, and unique device identifiers used for analytics and troubleshooting.
  • Usage & analytics. Event telemetry (feature usage, crashes, performance metrics) used to improve the Service.
  • Diagnostics & logs. Crash logs, error reports, and logs generated when the app runs.
  • Support data. Information you provide in support requests (e.g., screenshots, log snippets) if you contact support.

Source of information

  • Data you provide directly (account creation, profile updates, files you upload).
  • Data created by your use of the Service (notes, edits, timestamps).
  • Automatically collected technical and usage data.
  • Payment processors and Revenue/Subscription systems to verify subscription state.

How we use your information

We process data for these primary purposes:

  • To provide the Service. Authenticate you, store and sync your notes (when enabled), enable backups and restore, and maintain your Account.
  • To bill and manage subscriptions. Provision entitlements and enforce quotas based on plan and billing state.
  • To operate, maintain, and improve the Service. Performance monitoring, bug fixes, A/B testing, and product analytics.
  • To provide support and communicate. Respond to requests, notify you about account or security events, and send transactional messages.
  • Legal and safety purposes. Prevent abuse, fraud, or illegal use and comply with legal obligations.

Where GDPR applies, we rely on the following legal bases:

  • Performance of a contract (to provide the Service and billing).
  • Consent (where an action requires opt-in).
  • Legitimate interests (improving the Service, fraud prevention) where we balance your rights.
  • Legal obligations (to comply with law or law enforcement).

Sharing and disclosure

We may share data with:

  • Service providers (processors) who perform services on our behalf (hosting, storage, sync, analytics, payments). They process data per our instructions and under contract.
  • Legal process & safety: if required by law or to protect Sentria, our users, or third parties.
  • Business transfers: in connection with company transactions (merger, acquisition, sale), with notice and contractual safeguards.

We do not sell your personal data.

Third-party processors (subprocessors)

We use third-party subprocessors to operate the Service (hosting, storage, synchronization, analytics, and payments). For privacy and security reasons we keep the public Terms generic. Enterprise customers and data protection officers may request a current list of subprocessors and a Data Processing Addendum (DPA) by contacting legal@sentrialabs.com.

Optional for public listing: If you prefer to list providers publicly, we can publish an up-to-date subprocessor list and DPA for transparency.

Retention and deletion

  • Account data: retained while your Account is active and for a limited period after account deletion to allow recovery and to satisfy legal obligations.
  • User Content: removed according to our deletion workflow when you request deletion; some backups or logs may persist for a limited time for resilience and compliance.
  • Log & analytics data: retained in aggregated or pseudonymized form for analytics; raw logs may be retained for a limited period (e.g., 30–90 days).
    Retention periods are documented in our internal retention policy and available on request.

Data export and deletion

You may:

  • Export your Content from the App using the provided export tools.
  • Request deletion of your Account and Content by contacting legal@sentrialabs.com or via the app settings. We will process verifiable requests and delete your data in accordance with applicable law and our retention rules.

Security

We apply commercially reasonable technical, administrative, and organizational safeguards (encryption in transit and at rest where supported, access controls, vulnerability management). While we strive to secure your information, no system is perfectly secure. If we become aware of a security incident affecting personal data, we will follow our incident response procedures and notify affected users and regulators as required by law.

International transfers

Your data may be transferred to and processed in countries other than your residence. Where necessary, we implement legal safeguards (e.g., standard contractual clauses) or rely on the processor’s compliance frameworks. Contact legal@sentrialabs.com for details or to request data localization options for enterprise customers.

Children

The Service is not directed to children under the minimum age in applicable jurisdictions. If you are under that age, do not create an account or use the Service. If you believe a child’s personal data has been collected, contact legal@sentrialabs.com and we will take appropriate steps.

Cookies and similar technologies

Our website uses cookies and similar technologies for analytics and to provide functionality. You can manage cookies via your browser settings. We document cookie usage in a cookie notice on the website.

Advertising & third-party links

We do not show third-party behavioral advertising in the App. The App may contain links to third-party websites or services; we are not responsible for their privacy practices.

Your rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data.
  • Rectify incorrect information.
  • Delete or restrict processing of your personal data.
  • Port your personal data to another provider (data portability).
  • Object to certain processing (e.g., direct marketing).
    To exercise rights, use the app controls or contact legal@sentrialabs.com. We will verify requests as required by law.

Data protection officer / contact

For privacy inquiries, data requests, or to request the subprocessor list/DPA, contact: legal@sentrialabs.com. For billing: billing@sentrialabs.com. For security issues: security@sentrialabs.com.

Changes to this policy

We may update this Privacy Policy. For material changes, we will provide notice (in-app or email) before the changes take effect. Continued use after notice constitutes acceptance of the updated policy.

Governing law

This Privacy Policy is governed by the law specified in our Terms of Service. If you are an EU resident, local data protection rights apply in addition to this policy.