Permissions Explained
Vael is designed around the principle of minimal permission. We only request what we absolutely need to deliver core features. Below is a full accounting of every permission the App may request, on both platforms.
Android Permissions
| Permission | Why Needed | Data Stored by Vael? | If Denied |
|---|---|---|---|
ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION | Calculates your geo-feed radius and assigns a coarse location to your thoughts | Coarse GeoPoint only (±1–2km). Precise coordinates discarded immediately. | Cannot post thoughts or see local feed. Worldwide feed still accessible. |
ACCESS_BACKGROUND_LOCATION | Not requested. Vael does not access location in the background. | N/A | N/A |
CAMERA | Take a photo to send as a view-once image in anonymous chat | View-once images stored for up to 7 days (moderation window) then deleted | Cannot take in-chat photos. Uploading from gallery still works. |
READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE | Select an existing image from gallery to send as a view-once chat image | Same as Camera — 7-day max | Cannot send existing photos in chat. |
RECORD_AUDIO | Record a voice note to send in anonymous chat | Voice notes stored until thread expires or is deleted | Cannot send voice notes. Text chat still works. |
USE_BIOMETRIC / USE_FINGERPRINT | Optional App Lock: fingerprint authentication processed by Android TEE | Never received by Foundry26. Processed device-side only. | App Lock unavailable. App still opens normally. |
POST_NOTIFICATIONS | Push notifications for chat messages, reactions, and moderation alerts | FCM push token stored (until session refresh or account deletion) | No push notifications. App functions fully. |
INTERNET | Required for all network communication | Standard network usage logs | App cannot function without internet access. |
VIBRATE | Haptic feedback for reactions and interactions | No data stored | No haptic feedback. All features work. |
WAKE_LOCK | Prevents phone sleeping during image/voice upload | No data stored | Upload may fail if device sleeps mid-send. |
RECEIVE_BOOT_COMPLETED | Re-register FCM push token after device restart | FCM token only | Push notifications may stop working after restart until app is reopened. |
iOS Permissions
| Permission (NSUsageDescription key) | Why Needed | Data Stored by Vael? | If Denied |
|---|---|---|---|
NSLocationWhenInUseUsageDescription | Calculates geo-feed radius and assigns coarse location to thoughts while App is open | Coarse GeoPoint only (±1–2km). Precise coordinates discarded. | Cannot post or see local feed. Worldwide feed accessible. |
NSCameraUsageDescription | Take a photo to send as a view-once image in anonymous chat | Up to 7 days (moderation window) then deleted | Cannot take in-chat photos. Gallery upload still works. |
NSPhotoLibraryUsageDescription | Choose an image from your photo library for view-once chat | Same as Camera — 7-day max | Cannot send photos from library in chat. |
NSMicrophoneUsageDescription | Record a voice note for anonymous chat | Voice notes stored until thread expires or is deleted | Cannot send voice notes. Text chat works. |
NSFaceIDUsageDescription | Optional App Lock via Face ID (Apple Secure Enclave only) | Never received by Foundry26. Processed by Apple Secure Enclave only. | App Lock unavailable. App opens normally. |
Permission Changes
If Vael adds a new feature that requires a new permission, this page and the App Store / Play Store listings will be updated before the feature ships. You will be prompted in-app to grant any new permission.
Note on recent features. The Echoed (Save), Polls, Mosaic Reactions, Block, and Report flows do not require any new device permissions. They reuse standard INTERNET access only and store their per-user records in your existing Vael account.
Revoking Permissions
You can revoke any permission at any time in your device's Settings. Revoking a permission disables only the associated feature; the App and all other features continue to function.
Foundry26 · [email protected] · myvael.app · Effective: April 19, 2026