Privacy Policy
Your privacy is critical to us. This policy explains how Elivaster collects, uses, and protects your information.
Effective Date: October 8, 2026
Our Commitment to Privacy
Elivaster is committed to protecting your privacy and ensuring the security of your personal information. As a company specializing in post-quantum cryptography and security solutions, we apply the same rigorous standards to safeguarding your data that we bring to our products.
Vetonet iPad App
Vetonet is a parental-control and device-supervision app operated by an adult account holder. It is installed on a child’s iPad that is signed in with the child’s Apple Account in the parent’s Family Sharing group, as Apple requires for Screen Time controls. App shielding and website-rule enforcement run on that iPad through Apple platform capabilities. Observed app and domain decisions shown in Activity are generated in the app’s protected shared container and are not routinely uploaded as raw browsing history. Vetonet does not collect page contents, full URL paths, search text, messages, photos, contacts, precise location, microphone recordings, or advertising identifiers for this service.
Elivaster is responsible for the processing described in this section. Apple separately controls information it processes for the App Store, StoreKit, Sign in with Apple, iCloud, App Attest, and other Apple platform services under Apple’s own policies.
Account and Authentication
We process the adult account holder’s email address, a server-generated account identifier, email-verification and recovery state, authentication method, active-session times, and linked device identifiers. A password crosses only the authenticated Eliv secure channel for verification and is stored by the service solely as an Argon2id encoded hash, never as plaintext. If you link Sign in with Apple, we process Apple’s verified account subject and the identity-token evidence needed to link and authenticate that identity. Face ID, Touch ID, and device-passcode matching are performed by iPadOS; Vetonet receives only a success or failure result, never biometric templates. If you choose to be remembered at sign-in, your email and password are saved in Apple’s Keychain on the device (and, if you use iCloud Keychain, by Apple), not on Elivaster servers; they are forgotten when the app is deleted. Your profile avatar is a preset icon and color you pick inside the app — Vetonet has no camera or photo-library access and never uploads an image — and your choice is saved only on the iPad and cleared when you delete the account or reset the device.
Device and Enrollment
We process an enrolled device ID and public-key identity; device name and type; hardware model; iPadOS, app version, build, bundle, time-zone and clock status; connection and last-seen state; App Attest and enrollment evidence; app authenticity and integrity results; filter and app-shield state and counts; and bounded diagnostic details. This is used to enroll the correct device, prevent identity substitution, deliver compatible updates, show device status, diagnose failures, and protect account and software integrity.
Protection Settings and On-Device Activity
Rules, allowed or blocked domains, category selections, schedules, app-shield selections, local activity events, website and app-domain observations, and tamper history are stored on the iPad so protection and the Activity view work. Where account policy coordination is used, the service may process the rule or protection setting and device status needed to apply it to the correct account. The device reports only aggregate counts to the service — for example how many websites were blocked or allowed in a period — never the list of websites or apps visited. This activity is never used to build an advertising profile. Local structured activity is bounded by record and file limits and ordinarily kept for up to 30 days; some smaller stores retain only their most recent bounded entries.
Subscriptions
Apple processes payment details and provides Vetonet with signed StoreKit transaction and renewal evidence. We process product and transaction identifiers, purchase and period dates, plan tier, billing period, renewal, grace and retry state, expiration, revocation, App Store environment, and signed transaction evidence in order to provide paid features, prevent entitlement fraud, restore purchases, and mirror the verified plan to linked devices. When you subscribe, the app gives Apple a random-looking account tag derived from your Vetonet account so the purchase can be tied to one Vetonet account at a time; it contains no email or name. Paid access is measured against the service’s clock. We never receive your complete card number.
Security, Tamper, and Diagnostic Data
When Vetonet observes that a protection, permission, filter, app-installation, or integrity state has changed, it may send the enrolled device ID, event type, severity, time, a bounded description, and the verified parent alert address so the event can be recorded and an enabled email alert delivered. If a device stops checking in for an extended period (for example because the app was removed), the service may email the account’s verified address. When a different Vetonet account signs in on a device for the first time, every account that previously used that device is emailed at its verified address. Verification, login, recovery, and sensitive-account actions create short-lived codes and security records. Apple MetricKit may deliver a crash diagnostic after a Vetonet crash; the app keeps at most the ten most recent local summaries and sends new summaries over the authenticated channel. A summary may include crash time, app build and OS version, exception type and code, signal, and termination reason. Other client errors may include a bounded category, detail, and operational context. This is used for reliability and security, never for advertising.
Purposes and Sharing
Vetonet uses this data to authenticate the account and enrolled devices, synchronize protection and subscription state, deliver requested security alerts, and provide support. Account data is tenant-bound to the authenticated account and device hierarchy. Vetonet does not sell this data, use it for advertising, or include third-party advertising or analytics SDKs.
Retention, Access, and Deletion
Account and enrolled-device records are retained while the account remains active and as needed for legal, fraud-prevention, and security obligations. The account holder can remove devices, cancel a subscription through Apple, and initiate account deletion from within Vetonet. Deletion requires the current password and a fresh emailed approval, then removes account credentials, Apple linkage, active sessions, the subscription mirror, rules, activity, diagnostics, alerts, and identifiable account associations from Elivaster systems, and erases the iPad’s local account data. It does not cancel an Apple subscription or erase Apple’s purchase records; manage those with Apple. Elivaster retains only anonymized audit outcomes and de-linked inactive device-identity tombstones — a device ID and public key, stripped of account, email, network, and device metadata — which exist solely to prevent a deleted device identity from silently resurrecting an account. Optional account-deletion feedback is stored without account, device, email, network, session, or subscription identifiers. For access, correction, or deletion assistance, contact support@elivaster.com.
Children
Vetonet is configured and controlled by an adult who owns or is authorized to supervise the device. On iPad it runs only on a device signed in with a child’s Apple Account in the adult’s Family Sharing group. It is not directed to children as the purchasing or account-holding user, does not create an advertising profile about the supervised person, and does not sell their data. The account holder is responsible for providing any notice or obtaining any consent that applicable law requires of other device users.
Vetonet macOS App
Vetonet is a parental-control and device-supervision app operated by an adult account holder. App blocking and website-rule enforcement run on the enrolled Mac through a macOS network-extension content filter and a Vetonet privileged helper. Observed app and domain decisions shown in Activity are generated in the app’s protected local storage and are not routinely uploaded as raw browsing history. Vetonet does not collect page contents, full URL paths, search text, messages, photos, contacts, precise location, microphone recordings, or advertising identifiers for this service.
Elivaster is responsible for the processing described in this section. Apple separately controls information it processes for the App Store, StoreKit, Sign in with Apple, iCloud, and other Apple platform services under Apple’s own policies.
Account and Authentication
We process the adult account holder’s email address, a server-generated account identifier, email-verification and recovery state, authentication method, active-session times, and linked device identifiers. A password crosses only the authenticated Eliv secure channel for verification and is stored by the service solely as an Argon2id encoded hash, never as plaintext. If you link Sign in with Apple, we process Apple’s verified account subject and the identity-token evidence needed to link and authenticate that identity. Touch ID (on supported Mac models) and login-password matching are performed by macOS; Vetonet receives only a success or failure result, never biometric templates. If you choose to be remembered at sign-in, your email and password are saved in the Mac’s Keychain (and, if you use iCloud Keychain, by Apple), not on Elivaster servers. Your profile avatar is a preset icon and color you pick inside the app — Vetonet has no camera or photo-library access and never uploads an image — and your choice is saved only on the Mac and cleared when you delete the account or reset the device.
Device and Enrollment
We process an enrolled device ID and public-key identity; device name and type; hardware model; macOS, app version, build, bundle, time-zone and clock status; connection and last-seen state; privileged-helper installation and enrollment evidence; app authenticity and integrity results; filter and app-blocking state and counts; and bounded diagnostic details. This is used to enroll the correct device, prevent identity substitution, deliver compatible updates, show device status, diagnose failures, and protect account and software integrity.
Protection Settings and On-Device Activity
Rules, allowed or blocked domains, category selections, schedules, app-block selections, local activity events, website and app-domain observations, and tamper history are stored on the Mac so protection and the Activity view work. Where account policy coordination is used, the service may process the rule or protection setting and device status needed to apply it to the correct account. The device reports only aggregate counts to the service — for example how many websites were blocked or allowed in a period — never the list of websites or apps visited. This activity is never used to build an advertising profile. Local structured activity is bounded by record and file limits and ordinarily kept for up to 30 days; some smaller stores retain only their most recent bounded entries.
Subscriptions
Apple processes payment details and provides Vetonet with signed StoreKit transaction and renewal evidence. We process product and transaction identifiers, purchase and period dates, plan tier, billing period, renewal, grace and retry state, expiration, revocation, App Store environment, and signed transaction evidence in order to provide paid features, prevent entitlement fraud, restore purchases, and mirror the verified plan to linked devices. When you subscribe, the app gives Apple a random-looking account tag derived from your Vetonet account so the purchase can be tied to one Vetonet account at a time; it contains no email or name. Paid access is measured against the service’s clock. We never receive your complete card number.
Security, Tamper, and Diagnostic Data
When Vetonet observes that a protection, permission, filter, helper-installation, or integrity state has changed, it may send the enrolled device ID, event type, severity, time, a bounded description, and the verified parent alert address so the event can be recorded and an enabled email alert delivered. If a device stops checking in for an extended period (for example because the app was removed), the service may email the account’s verified address. When a different Vetonet account signs in on a device for the first time, every account that previously used that device is emailed at its verified address. Verification, login, recovery, and sensitive-account actions create short-lived codes and security records. Apple MetricKit may deliver a crash diagnostic after a Vetonet crash; the app keeps at most the ten most recent local summaries and sends new summaries over the authenticated channel. A summary may include crash time, app build and OS version, exception type and code, signal, and termination reason. Other client errors may include a bounded category, detail, and operational context. This is used for reliability and security, never for advertising.
Purposes and Sharing
Vetonet uses this data to authenticate the account and enrolled devices, synchronize protection and subscription state, deliver requested security alerts, and provide support. Account data is tenant-bound to the authenticated account and device hierarchy. Vetonet does not sell this data, use it for advertising, or include third-party advertising or analytics SDKs.
Retention, Access, and Deletion
Account and enrolled-device records are retained while the account remains active and as needed for legal, fraud-prevention, and security obligations. The account holder can remove devices, cancel a subscription through Apple, and initiate account deletion from within Vetonet. Deletion requires the current password and a fresh emailed approval, then removes account credentials, Apple linkage, active sessions, the subscription mirror, rules, activity, diagnostics, alerts, and identifiable account associations from Elivaster systems, and erases the Mac’s local account data. It does not cancel an Apple subscription or erase Apple’s purchase records; manage those with Apple. Elivaster retains only anonymized audit outcomes and de-linked inactive device-identity tombstones — a device ID and public key, stripped of account, email, network, and device metadata — which exist solely to prevent a deleted device identity from silently resurrecting an account. Optional account-deletion feedback is stored without account, device, email, network, session, or subscription identifiers. For access, correction, or deletion assistance, contact support@elivaster.com.
Children
Vetonet is configured and controlled by an adult who owns or is authorized to supervise the device. It is not directed to children as the purchasing or account-holding user, does not create an advertising profile about the supervised person, and does not sell their data. The account holder is responsible for providing any notice or obtaining any consent that applicable law requires of other device users.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: