Privacy Policy

Local-first tracking data

• Primary Velum tracking records are stored locally on your device. These can include medication and dose information, weight, nutrition and hydration, activity, appetite and food noise, mood, sleep, symptoms, notes, and progress photos.
• If you explicitly connect Apple Health in Settings, Velum requests read-only access to steps, weight, and sleep. Velum does not write to Apple Health.

Optional AI processing

Nothing is sent to OpenAI until you explicitly agree to AI processing and choose to use an AI feature.

• Vera: local evidence questions work on your device. If you choose optional AI question matching, Velum sends your question and locally calculated summaries of the selected record. These may include medication context, appetite, food noise, energy, symptoms, meal-entry counts, and dates. This feature does not send progress photos or your full conversation history.
• Meal Scan: Velum sends the meal photo you choose or capture.
• Voice Meal: Velum sends the meal transcript.

AI requests travel through Velum's secure service at api.velumtracker.com, which is hosted using Cloudflare infrastructure, and are forwarded to OpenAI only to provide the feature you requested. Cloudflare and OpenAI act as service processors and are required to protect personal data consistently with applicable privacy and security obligations.

OpenAI API data is not used to train OpenAI models by default. OpenAI may retain API data according to its currently applicable API terms and abuse-monitoring policies. Velum does not claim that its OpenAI account has Zero Data Retention or promise immediate deletion by OpenAI.

What we do not do

• Sell your health data
• Provide medical advice, diagnosis, or prescribing

Purchases and diagnostics

• RevenueCat processes subscription identifiers, transactions, and entitlement status to provide purchases and restoration.
• Production builds with crash reporting configured send technical crash diagnostics to Sentry. Performance tracing is disabled; the client error filter excludes free-text messages, request data, breadcrumbs, user identity and local-variable values.
• App interaction analytics are stored locally. If configured for the release, PostHog receives interaction events and a pseudonymous installation identifier. Only recognized event names and approved property values are accepted by the analytics client.

Your choices

• AI features are optional. Withdraw AI permission under Settings > Data & Privacy; the next AI use will ask again.
• Delete local Velum data without cancelling your App Store subscription.
• Apple Health, notifications, camera, photo, and microphone permissions remain under your control in iOS Settings. Velum cannot revoke Apple Health permission for you.
• Manage or cancel an App Store subscription separately in the App Store.

Contact: privacy@velumtracker.com