Privacy Policy

Effective: 1 June 2026 · Last updated: 1 June 2026

Vela is built privacy-first. Your health data stays on your device. We have no servers, no accounts, and no ability to read your symptoms — even if we wanted to.

1. What Vela Collects

Symptom & Daily Logs (On-Device Only)

When you log symptoms, mood, energy, triggers, cycle information, and notes, that data is stored exclusively in your device's local SwiftData database. It does not leave your device except as described in Section 3 (iCloud Backup).

Data stored locally:

Symptom types and severity ratings you log
Mood and energy scores
Trigger check-ins (alcohol, stress, sleep, diet)
Cycle / menstrual flow notes
Free-text journal entries
App preferences and reminder settings

Apple HealthKit (Read-Only, On-Device Only)

If you grant permission, Vela reads two categories of data from Apple Health:

Sleep Analysis — to pre-fill your nightly sleep entry
Menstrual Flow — to surface cycle context in your logs

  HealthKit data is read directly on your device. Vela never writes to Apple Health and never transmits HealthKit data off your device — not to iCloud, not to any server, not anywhere.

You can revoke HealthKit access at any time in Settings → Privacy & Security → Health → Vela.

2. What Vela Does NOT Collect

No account, email address, or personal identifier
No advertising identifiers (IDFA or equivalent)
No analytics or crash-reporting SDKs that transmit health data
No behavioural or usage analytics sent to any third party
No location data
No biometric data beyond what HealthKit provides (read-only)

3. iCloud Backup (Optional)

Vela can optionally sync your logs to your personal iCloud private database using Apple's CloudKit. This backup is:

Encrypted end-to-end by Apple and accessible only by you
Governed by Apple's iCloud Privacy Policy, not ours
Controlled entirely by you — disable it in Vela → Settings → iCloud Backup

We have no ability to access data stored in your private CloudKit container.

Note: iCloud Backup is being removed in a future Vela release. When it is removed, your data will remain on-device only.

4. Subscription & Purchases (RevenueCat)

Vela uses RevenueCat to manage in-app subscriptions. RevenueCat receives:

A pseudonymous device identifier (RevenueCat's own generated ID, not your Apple ID)
Transaction metadata from App Store (purchase date, product ID, renewal status)
App version and device platform

RevenueCat does not receive any symptom logs, HealthKit data, or identifiable personal information. RevenueCat's privacy policy is available at revenuecat.com/privacy.

All billing is processed by Apple. Vela never sees your payment card details.

5. Data Deletion

To delete all your Vela data:

Open Vela → Settings
Tap Delete All Data
Confirm the deletion

This permanently removes all logs and preferences from your device. If iCloud Backup is enabled, the CloudKit data is also deleted. This action cannot be undone.

Deleting the app from your device also removes all local data. If iCloud Backup was enabled, you may also need to delete the CloudKit data via Settings → [your name] → iCloud → Manage Storage.

6. Children's Privacy

Vela is intended for adults (18+). We do not knowingly collect any information from children under 13. If you believe a child has used the app, please delete the app data as described above.

7. GDPR / CCPA Rights

Because Vela stores all data locally on your device and does not transmit personal data to our servers, standard data subject requests (access, portability, erasure) are handled entirely by you through the app's built-in controls described above.

For questions about RevenueCat's data handling under GDPR or CCPA, please refer to RevenueCat's privacy policy or contact them directly.

8. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the "Last updated" date above and may notify you via an in-app message. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

Privacy questions: canacar192@icloud.com