Privacy Policy

The short version

• We collect only what VELU needs to work: your account, the logs you enter, and the profile you choose to share.
• Your data is encrypted in transit and at rest.
• We never sell your data. There are no ads, no advertising SDKs and no social features in VELU.
• You can delete your account — and everything in it — from inside the app, anytime.

1. Who we are

VELU ("VELU", "we", "us") operates the VELU mobile app and the website velu.health. VELU is a wellness recovery tracker for men. The data controller is HUNG DUONG (individual), Hanoi, Vietnam. For anything in this policy, contact us at privacy@velu.health.

2. What we collect

Account

• Email address and a password (stored only as a secure hash), or your sign-in provider identifier if you use a supported sign-in service.

Wellness logs you enter

• Releases you log: type, time, intensity and an optional note.
• Plan items you mark as done.

Profile you choose to share

• Optional persona details such as age range, activity level, work schedule, stress level, sleep habits, diet preferences, goals, and height/weight. Every field is optional — VELU works without them; they only make your plan more accurate.

App & device basics

• Timezone and locale (so your day rolls over at your midnight and your plan arrives at 6am your time), push token if you enable notifications, app version and device model for diagnostics.

Subscription status

• If you subscribe to VELU Pro, payment is processed directly by Apple's App Store or Google Play; we receive your entitlement status (product, expiry) from the store. We never see or store your card number.

3. How we use it

• To run the engine. Your logs and profile power your Recovery Score, readiness state, forecast and history.
• To build your daily plan. Plan inputs are processed by our AI provider solely to generate your plan; they are not used to train the provider's models.
• To message you — only if you opt in. Notifications like your morning plan or a window opening. You control these in Settings.
• To keep VELU secure and working. Authentication, abuse prevention and crash diagnostics.

We do not sell or rent your data, show ads, use third-party advertising or tracking SDKs, or run any social feed.

4. Where your data lives

Data is encrypted in transit (TLS) and at rest on our servers. Access is restricted to what's necessary to operate the service. Sensitive content you log is treated as confidential and is never used for marketing.

5. Who we share with

Only service providers who help us run VELU — hosting and AI plan generation — each bound by contract to process your data only on our instructions. Subscription payments are handled directly by Apple's App Store / Google Play under their own terms. We may disclose data if the law genuinely requires it. Never to data brokers, never to advertisers.

6. Retention & deletion

We keep your data while your account is active. Delete your account in Profile → Delete Account and your account and logs are removed from production systems within 30 days, with encrypted backups expiring on their normal cycle. You can also email privacy@velu.health and we'll do it for you.

7. Your rights

Depending on where you live (including under GDPR and CCPA), you may have rights to access, export, correct or delete your personal data, and to object to or restrict certain processing. Exercise any of them from inside the app or by emailing privacy@velu.health. We don't discriminate against you for using your rights.

For consumer health data, our standalone Consumer Health Data Privacy Notice applies, including for Washington residents under the My Health My Data Act.

8. Age

VELU is rated 17+ and is not intended for anyone under 17. We don't knowingly collect data from minors; if we learn we have, we delete it.

9. Not medical data processing

10. Changes

If this policy changes in a way that matters, we'll tell you in the app before it takes effect. The date at the top always reflects the current version.

11. Contact

privacy@velu.health — we read everything.