Terms of Use

1. Application and parties

These draft terms apply to the free Velora Android application, package com.app.VeloraNet, for Android 8.0 and later. The technical basis is version 2.2.1 (version code 8), according to developer information dated November 4, 2026. Name entered when creating the application in Google Play: Velora: Network Diagnostics.

Application provider: Coalescence OÜ; legal status and registration details: an Estonian OÜ company; registration number: [COMPANY_REGISTRATION_NUMBER]; country and address: Estonia; Coalescence OÜ, Tornimäe tn 5, Tallinn 10145, Estonia (EE). Effective date specified by the owner: November 4, 2026; version: 1.0. Registration details and the fields identified below remain to be completed; the published text retains draft status until they are filled in.

This document covers the software, importing, VPN connections, diagnostics, local statistics, and supporting functions. It does not automatically include iOS, the website, Telegram Mini App, or a contract for server-side VPN access. The operator's relationship to the server service: Coalescence OÜ also owns the Velora website and provides its own VPN service. The free Android application can import configurations from both Velora and third-party providers; the server-access contract and its data processing are governed separately. Installing the free client does not itself subscribe to or pay for the server service.

2. Free software and separate services

The current Android client is free, with no advertising, in-app purchases, or paid features. It has no client account, built-in card checkout, automatic charges, or Google Play paid subscription management. These terms do not authorize charging the user.

You may need a configuration for your own server or a selected provider. That access and carrier connectivity may be paid services under separate terms. A free application does not mean free servers, unlimited traffic, or inclusion of any external contract. Uninstalling the application or deleting a profile does not cancel an external subscription, account, or obligation to a provider.

3. Presentation, acceptance, and audience

Presentation and acceptance: the terms are available on the Velora website. Starting or continuing to use the application after an opportunity to review the terms expresses acceptance to the extent permitted by applicable law. Where mandatory rules require separate confirmation, mere use of the application does not replace it. The current VPN disclosure and Android system prompt authorize VPN operation; they do not themselves constitute separate contract acceptance or universal consent to data processing. A separate Terms acceptance checkbox is not implemented in the described version.

Distribution territories: all countries available for distribution through Google Play, including the United Kingdom and Russia, subject to local restrictions and actual store availability. Intended audience and justified minimum age: users aged 13 and older. Where applicable law requires a higher age, permission from a legal representative, or other conditions, those requirements apply. The application is not intended for children under 13. Users must have the capacity required by applicable law or obtain appropriate permission.

4. Software rights and licenses

Rights to components distributed under open-source licenses are determined by those licenses and are not canceled by these terms. The application codebase declares GPL-3.0-or-later; sing-box/libbox 1.14.4 uses GPL-3.0-or-later; ZXing Android Embedded and AndroidX use Apache-2.0; Onest uses the SIL Open Font License. Applicable notices and license texts must accompany distribution.

Within the rights granted by the applicable licenses, you may use, study, modify, and redistribute the covered code subject to those licenses. These terms contain no general prohibition on copying, investigation, modification, or redistribution that conflicts with those rights. Terms for a particular network service do not restrict independently granted software rights.

The operator plans to publish the complete Corresponding Source and build instructions on GitHub. A repository address has not yet been provided: [CORRESPONDING_SOURCE_ACCESS]. This is a plan, not a statement that source access is already available. An upstream link does not replace the complete source corresponding to the delivered build. The GPL does not itself grant trademark or brand rights. Rights to the name and artwork must be established separately without claiming ownership of others' rights.

5. Configurations and connection controls

You obtain configurations from a provider or your own server and must be entitled to use them. The client supports certain variants of VLESS/Reality, VMess, Trojan, Shadowsocks, Hysteria2, WireGuard, and sing-box JSON. Import options include HTTPS links, URI/JSON, files, and QR codes. Support for every format, every Happ export, Clash YAML, or every service is not guaranteed.

Importing does not certify a server's security, ownership, or legality and does not validate every third-party JSON rule. Protect subscription tokens, UUIDs, passwords, keys, and exported files. Do not publish another person's configuration without permission. Manual subscription updates may replace local server settings.

Connections use Android VpnService, a foreground service, and sing-box/libbox after your action and system permission. You select a profile, connect or disconnect, and manage excluded applications and permissions. The five-step guide does not create an account or connect automatically. A suitable configuration, network, and necessary permissions are required.

6. Acceptable use

Use the software in accordance with applicable law, others' rights, and the access rules for your selected infrastructure. Do not use it for unauthorized access, attacks, malware distribution, or abuse of network resources. Address and port checks are intended for authorized diagnostics.

These terms do not promise to bypass every network restriction or claim that VPN use is lawful in every country. Users must consider requirements applicable to them. The client has no server account that the operator can suspend under invented account rules; a separate provider applies its own rules to its infrastructure.

7. Features and technical limitations

Speed, availability, authentication, and compatibility depend on the network, Android, device, configuration, and provider. Errors and interruptions may occur. Limited reconnection after network changes does not guarantee continuous service.

Application exclusions, direct rules, and custom JSON can route some traffic directly and change DNS. There is no built-in kill switch. Android always-on VPN and blocking connections without VPN are separate system functions. Absolute anonymity, the absence of all leaks, or guaranteed encryption of every packet in every imported configuration is not promised. The client does not intercept TLS or decrypt HTTPS.

A TCP test shows port reachability, not internet speed, successful VPN authentication, or UDP profile functionality. Subscription-Userinfo usage, allowance, and expiration are supplied by the provider, may be missing or outdated, and do not create a new service entitlement. Android system counters, session counters, and provider billing may differ.

DNS/TLS/HTTP/IPv6 results describe a particular check and do not guarantee a website's future security. Reports may contain full URLs, query parameters, IPs, certificates, and redirects. Review files before sharing; complete automatic anonymization is not claimed.

8. Data, permissions, and external recipients

See the separate Privacy Policy for details. VPN permission, Usage Access, the camera, and selected files support specific functions and do not substitute for one another. Usage Access and the camera are not required for every feature, while a permission needed for a selected function may be necessary.

The client contacts your selected provider, system DNS, Cloudflare, Google, Quad9, and tested addresses; the relevant diagnostic uses Google's connectivity endpoint. Android Sharesheet passes exports to the recipient you choose. The website and Telegram open separately and have their own rules.

These recipients are not automatically the operator's contracted processors, and the operator's ability to delete their records is not guaranteed. If the operator also supplies server services, its role and processing must be disclosed separately rather than describing its own service as an independent third party.

9. Support and stopping use

Support is available on Telegram at https://t.me/velorvpn_support. These terms do not promise 24/7 operation or a fixed response time. Do not send passwords, CVCs, one-time codes, or secret subscription links. Review reports and screenshots before sending them.

You can disconnect VPN, delete profiles, history, and separately baselines, revoke permissions, clear cache/data, or uninstall. This does not delete exported copies, correspondence, OS statistics, or provider records. No separate application account is created. Stopping use does not revoke rights already granted to code you received under open-source licenses.

10. Updates and changes to terms

Updates may fix defects or change features and compatibility. Indefinite support for every version and configuration is not promised. Material changes require appropriate notice and, where required, acceptance under applicable law; they do not apply arbitrarily to past conduct.

Publication of changes: the current version is published on the Velora website with its version number and effective date. Users can check this page themselves. Material changes are published before they apply; where applicable law requires separate notice or consent, website publication and continued use alone are insufficient. The Russian and English versions must preserve the same obligations; translation corrections do not limit mandatory user rights.

11. Warranties, liability, and disputes

The software is provided with the technical limitations described here. Applicable open-source license warranty and liability provisions operate to the extent permitted by law. These terms do not exclude liability that cannot lawfully be excluded or restrict mandatory consumer rights or other remedies.

The client's being free does not itself create a zero monetary liability cap. These terms do not impose an absolute liability waiver, mandatory arbitration, a class-action waiver, or an obligation to reimburse any and all costs without a separate lawful basis.

Applicable law and dispute procedures, considering distribution territories: the governing law is determined under applicable conflict-of-laws rules. Mandatory protections and rights under legislation applicable to the user remain unaffected. Requests may be sent to the operator through the stated contact; the parties seek to resolve disagreements through discussion. This does not restrict access to a competent court or authority and does not impose mandatory arbitration. Mandatory rights and legally available remedies are preserved.

12. Contacts and related documents

Operator and legal contact: Coalescence OÜ, Telegram: https://t.me/velorvpn_support. Confirmed support channel: https://t.me/velorvpn_support; news channel: https://t.me/VpnVelor. Android privacy policy: /android/en/privacy/. Paid website and server-service documents: https://velor.technology/offer/; they do not replace the free client's terms.

Policy references checked November 4, 2026: Google Play User Data · VpnService · Data safety · GNU GPLv3.