Scope
This policy explains how Velda handles information in the mobile app and on veldaapp.com. “Velda,” “we,” and “us” refer to the Velda app and service.
What we process
- Account information: email address, authentication identifiers, display name if supplied, and account status.
- Fitness and wellness information: workouts, programs, routines, exercise sets, body-weight entries, nutrition logs, goals, recipes, grocery lists, and optional cycle information.
- AI requests: the text, photos, nutrition labels, written recipes, grocery lists, program preferences, or progress data you choose to submit to an AI feature, plus the result and task status.
- Purchase information: subscription product, entitlement, renewal state, and store transaction identifiers. Apple or Google processes payment-card details; Velda does not receive them.
- Operational information: app version, platform, request timing, quota usage, error codes, moderation reports, and security signals needed to operate and protect the service.
Velda does not require profile photos, recipe images, or community images. V4 product and community content is text-first. A compressed Smart Add review thumbnail can remain only on your device until you review or discard it, reset the feature, or clear the account. Legacy media from earlier versions may remain during the compatibility transition and is scheduled for a separately verified permanent purge before V4 closeout.
How we use information
- Provide, synchronize, and restore the features you use.
- Calculate trends, progress, nutrition totals, and workout recommendations.
- Run AI features only when you request them and enforce the applicable usage allowance.
- Process subscriptions, restore purchases, prevent abuse, secure accounts, and diagnose failures.
- Respond to support requests and comply with legal obligations.
We do not use your personal information for cross-app tracking or targeted advertising.
Service providers
We disclose only the information needed for these providers to perform services for Velda:
- Supabase for authentication, database hosting, server functions, and secure synchronization.
- OpenAI for user-requested AI analysis and generation.
- RevenueCat, Apple, and Google for subscription and entitlement processing.
- Cloudflare for website hosting and network protection.
- Expo, Apple, and Google for optional push notifications. Velda stores a device push token while notifications are enabled and removes it when you disable notifications or delete the account.
- Supabase for account email, and Resend for service-operations alert email.
Cloudflare may process IP address, browser or device information, requested URL, timing, and security/network logs when you visit this website. Providers may process information in countries other than your own under their contractual and legal safeguards.
AI features
AI features are optional. Before first use, Velda explains that the request is sent to a third-party model provider. Velda uses the OpenAI Responses API with stored background jobs. Under OpenAI’s default API controls, the Responses API has a 30-day application-state retention period and response data is stored for at least 30 days. Abuse-monitoring logs are retained for up to 30 days by default unless longer retention is required by law or reasonably necessary to protect OpenAI’s services or a third party. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. See OpenAI's current data controls.
Velda keeps monthly and lifetime usage counters to enforce the Training AI, Recipe AI, Nutrition AI, and Progress Review allowances. Free trial pools use lifetime counters; Velda Pro pools reset on the subscription billing date. A Progress Review never runs automatically. Failed or released tasks do not consume an allowance. Reinstalling the app, restoring purchases, or resetting app data does not restore used monthly or lifetime AI allowances. Current allowance details appear in the Terms of Service.
Cycle information is excluded from AI progress analysis unless you explicitly opt in. AI output can be incomplete or wrong and should be reviewed before you save or rely on it. Velda is not a medical service.
Retention and control
Account records are kept while your account is active and as needed for security, billing, legal compliance, and reliable synchronization. Completed or failed AI task records are normally retained for up to 90 days; AI audit records for up to 180 days; account-deletion anti-abuse records for up to 90 days; and blocked-import security records for up to 24 hours. Subscription and transaction records may be kept as required for billing, fraud prevention, and legal compliance.
Velda keeps a device-protected session record and account-bound local caches so a previously signed-in account can reopen supported saved data without a connection. Supported pending changes remain local until they synchronize or reach their feature-specific discard or expiry rule. Sign-out, security-session retirement, account cleanup, and account deletion clear or retire the applicable local access. Velda rechecks the server session after reconnection.
Temporary local drafts and captures use bounded caches. A Smart Add thumbnail may remain on the device until review, discard, reset, or account cleanup. Other captures are cleared after delivery, expiry, cancellation, or cleanup according to the feature.
You can export available data, remove supported modules, or delete your account from Profile. Account deletion is permanent after the final confirmation, and the same email address cannot be used to create another Velda account for 48 hours. Public Community and Roadmap text may remain in de-identified form after account deletion so public discussions are not silently broken; contact us if you need a specific public submission reviewed for removal. Limited anti-abuse, transaction, audit, or legal records may remain for the periods above or where required or permitted by law.
Security
Velda uses encrypted network transport, provider-managed encryption at rest, row-level access controls, server-side authorization, and least-privilege service boundaries. Offline access does not create a local password or replace server authorization. While disconnected, Velda uses only the account state previously verified on that device; session revocation, account changes, entitlement changes, and server-backed authorization take effect after reconnection. No system can guarantee absolute security; contact us if you believe your account is at risk.
Your choices
- Decline camera or notification permission and continue using features that do not require it.
- Keep optional cycle data out of AI analysis, or revoke that permission later.
- Review and correct profile and logged information in the app.
- Export available data or permanently delete your account in the app or through the web deletion-request path.
- Manage or cancel subscriptions in the Apple App Store or Google Play.
Depending on where you live, you may have additional rights to access, correct, delete, restrict, or receive a copy of personal information. Email us to make a request.
Changes
We may update this policy as Velda changes. We will post the revised date here and provide additional notice when a change materially affects how information is handled.
Contact
Questions or privacy requests: VeldaApp@proton.me.