1. What this notice is
This Consumer Health Data Privacy Notice applies to "consumer health data" as defined by the Washington My Health My Data Act (RCW 19.373) and similar state laws. It is a standalone notice and supplements our general Privacy Policy. If anything here conflicts with the general policy for consumer health data, this notice controls.
VELU is operated by HUNG DUONG (individual), Hanoi, Vietnam. Contact: privacy@velu.health.
2. Consumer health data we collect
- Daily check-ins you enter: sleep hours and quality, energy, mood, stress, exercise, alcohol units, caffeine, water, and any free-text notes you add.
- Recovery events you log: the event type, intensity, time, and any free-text note — plus the recovery signals VELU derives from them (your recovery score, readiness state, and trend).
- Your health profile: age range, height and weight, activity level and exercise habits, sleep schedule, diet type and food preferences, allergies, supplements, smoking status, alcohol and caffeine frequency, habitual stress, and your goals.
3. Where it comes from
Directly and only from you, when you log data or fill in your profile inside the app. We do not buy, scrape, or infer consumer health data from anywhere else.
4. Why we collect and use it
To compute your recovery score, generate your personalized daily plan, and show you your own history and trends. That's it. We do not use consumer health data for advertising, and we do not sell it or share it with advertisers or data brokers.
5. Who can access it
Our staff, only as needed to run and support the service. Beyond that, category-level: service providers that host our systems and provide cloud/AI processing used to generate your plan, each bound by contract to process your data only on our instructions. We may disclose data if the law genuinely requires it. No third parties or affiliates receive consumer health data for their own purposes.
6. Where it's processed and how long we keep it
Your data is stored and processed in the United States. It is kept while your account is active. When you delete your account, your data is removed from production systems immediately, with encrypted backups expiring on their normal cycle.
7. Your rights
- Access & export — see and take a copy of your consumer health data.
- Withdraw consent — stop future collection at any time by deleting your account.
- Delete — delete your consumer health data, including from backups on their expiry cycle, with deletion requests passed to our service providers. Use Delete account inside the app, or email privacy@velu.health.
We respond within 30 days and never discriminate against you for exercising your rights.
8. Appeals
If we deny a request, reply to our decision or email privacy@velu.health with "Appeal" in the subject and we will re-review it. Washington residents who are unsatisfied with the outcome of an appeal may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
9. Changes
If this notice changes, we'll post the update here with a new effective date. Effective date: 25 July 2026.