Privacy Policy

Last updated: September 13, 2026

Local-first tracking data

Optional AI processing

Vera, Meal Scan, and Voice Meal are optional. Nothing is sent to OpenAI until you explicitly agree to AI processing and choose to use an AI feature.

AI requests travel through Velum's secure service at api.velumtracker.com, which is hosted using Cloudflare infrastructure, and are forwarded to OpenAI only to provide the feature you requested. Velum's proxy is designed to forward these requests and does not intentionally persist AI request bodies in Velum application storage.

OpenAI does not use API inputs or outputs to train its models by default unless the API customer explicitly opts in to data sharing. For standard API use, OpenAI may retain API inputs and outputs for up to 30 days for service operation and abuse monitoring, unless a different endpoint-specific retention rule applies or longer retention is legally required. Velum does not claim that its OpenAI account has Zero Data Retention.

Subscriptions and RevenueCat

Velum uses Apple StoreKit and RevenueCat to offer and manage Velum+ subscriptions. RevenueCat receives purchase and subscription information needed to validate transactions, determine entitlement status, restore purchases, and provide subscription analytics.

Velum does not require a user account and does not provide RevenueCat with a custom account identifier. RevenueCat therefore uses an anonymous App User ID generated by its SDK for this app installation. Velum does not receive or store your payment card or bank account details; payment information is handled by Apple.

Crash and performance diagnostics

Velum uses Sentry in production to receive crash reports, performance traces, and related technical diagnostic information so we can identify defects and improve reliability. Velum does not intentionally include medication, dose, symptom, meal, weight, or other health values in diagnostic events sent to Sentry.

Service providers and protection

Velum uses service providers only for the functions described above, including Cloudflare for secure request infrastructure, OpenAI for optional AI processing, RevenueCat for subscription management, and Sentry for crash and performance diagnostics. These providers process data under their applicable privacy, security, and contractual obligations.

Retention

What we do not do

Your choices

Contact: [email protected]