Velto Privacy Policy

This Privacy Policy explains how MoneyCoach ("MoneyCoach", "we", "us", or "our") handles information when you use the Velto GLP-1 Tracker app ("Velto" or the "App"), visit veltoglp.com (the "Website"), contact us, or subscribe to our newsletter.

Velto is a GLP-1 tracking companion for iPhone. It is not an account-based service, and you do not need to create a Velto account, provide your name, or provide your email address to use the App. Velto is not a digital meal planner. Optional nutrition logging is one of several tracking features within the App.

Controller and contact

The controller responsible for the processing described in this policy is:

MoneyCoach
c/o Volkssolidarität e. V.
Alte Schönhauser Straße 16
10119 Berlin
Germany

Email: info@veltoglp.com

Information handled by the App

Information you choose to record

Depending on how you use Velto, you may choose to record information such as:

  • medication, treatment dates, dosage, intervals, and reminders;
  • weight and body-progress information, including photos you choose to add;
  • symptoms, side effects, mood, appetite, progress notes, and other journal entries;
  • nutrition, water, and activity information; and
  • preferences and settings required to provide App features.

This information can be sensitive health-related information. It is used to provide the tracking, reminder, chart, insight, widget, and export features you request. We do not use the contents of your health records for advertising, and we do not sell your health data.

Local storage and optional iCloud sync

Your Velto records are stored locally on your device and are protected using Apple's device data-protection features.

Velto can also use Apple's CloudKit service to sync data through your personal iCloud account. iCloud sync is associated with your Apple account, not a Velto account, and is subject to your iCloud settings and Apple's terms and privacy practices. You can manage iCloud access in your device settings.

Apple Health

If you choose to grant permission, Velto can read from or write supported categories in Apple Health, such as weight, steps, water, and nutrition data. Apple Health access is optional and controlled through your device settings.

Velto uses Apple Health data only to provide health and tracking features that you request. We do not use Apple Health data for advertising, and we do not sell it. You can review or revoke Velto's permissions at any time in the Health app or iOS Settings.

Notifications

If you enable notifications, Velto uses Apple's notification services to deliver reminders you configure. You can change notification permissions in iOS Settings.

Purchases and subscriptions

Purchases and subscriptions are processed by Apple through the App Store. We do not receive your full payment-card details.

We use RevenueCat to manage subscription status, purchases, restorations, and related attribution. RevenueCat may process an app-specific identifier, transaction and receipt information, subscription status, device or technical information, and limited attribution metadata. This does not create a Velto account and is not intended to include the health records you enter in Velto.

App analytics and attribution

We process limited technical and usage information to understand whether the App works correctly, improve onboarding and features, measure subscription performance, and understand the effectiveness of marketing campaigns. This may include:

  • app events, such as completing an onboarding step or viewing a paywall;
  • app version, device and operating-system information, approximate region, and technical diagnostics;
  • an app-installation or vendor-generated identifier; and
  • subscription and advertising-attribution events.

Velto uses RevenueCat, Meta App Events, and Apple's privacy-preserving advertising-attribution technologies for these purposes. The analytics and attribution data we send is not intended to contain medication entries, symptoms, weight, photos, journal notes, Apple Health records, or other health-record content.

Your device and platform privacy settings may limit the identifiers available for attribution. You can manage relevant permissions and tracking choices in iOS Settings.

Information handled through the Website

Website delivery, security, and logs

When you visit the Website, our hosting and infrastructure providers may process technical information needed to deliver and secure it. This can include IP address, date and time, requested URL, referring page, browser, operating system, device information, and server or error logs.

We process this information to operate the Website, maintain security, diagnose problems, prevent abuse, and understand aggregate traffic.

Website analytics

We use Vercel Web Analytics and a self-hosted Umami Analytics service to understand page views, referrers, device and browser categories, approximate country or region, and interactions such as App Store download clicks. These tools are configured as privacy-focused analytics and are not intended to build health profiles or track users across unrelated websites.

Free Website tools

When you use an interactive tool on the Website, we process the information you submit to generate the requested plan, scorecard, image, or document. Do not enter information that you do not want processed for that purpose. Tool inputs are not used to make medical decisions and are not used for advertising based on health information.

Contact requests

If you contact us through the Website or by email, we process the information you provide, such as your name, email address, message, and related correspondence, so we can respond and provide support. Website contact messages are delivered using Twilio SendGrid.

Newsletter

If you subscribe to our newsletter, we process your email address and subscription status to send the communications you requested. We use Mailchimp, an Intuit service, to manage subscriptions and mailings. Subscription uses a confirmation process where enabled. You can withdraw your consent at any time by using the unsubscribe link in an email or contacting us.

We may retain limited subscription records when reasonably necessary to document consent, honor an unsubscribe request, or comply with legal obligations.

Where the General Data Protection Regulation (GDPR) or similar law applies, we process personal data only when we have a legal basis. Depending on the activity, these bases include:

  • Performance of a contract or steps at your request: to provide App and Website features, process support requests, and manage purchases or subscriptions.
  • Consent: for optional Apple Health access, newsletter communications, and other processing where consent is requested by the App, Website, or operating system. You may withdraw consent at any time for future processing.
  • Legitimate interests: to operate, secure, troubleshoot, and improve Velto and the Website; understand aggregate usage; prevent fraud or abuse; and measure product and campaign performance, where those interests are not overridden by your rights.
  • Legal obligations: to maintain records or disclose information when required by applicable law.

Service providers and other recipients

We disclose information only as needed for the purposes described in this policy, including to:

  • Apple: App Store purchases, iCloud/CloudKit sync, Apple Health, notifications, and privacy-preserving attribution;
  • RevenueCat: subscription management and related attribution;
  • Meta: limited app-event and campaign-attribution measurement;
  • Vercel: Website hosting and privacy-focused web analytics;
  • Umami: self-hosted Website analytics;
  • Twilio SendGrid: contact and transactional email delivery; and
  • Intuit Mailchimp: newsletter subscription and delivery.

These providers process information under their own terms and privacy notices or on our behalf under applicable data-processing terms. We may also disclose information when required by law, to protect rights or safety, or in connection with a business reorganization where permitted by law.

We do not sell your personal health information or share it with third parties for their own health-based advertising.

International transfers

Some service providers may process information outside Germany or the European Economic Area. Where required, we rely on an applicable legal transfer mechanism, such as an adequacy decision or standard contractual clauses, together with additional safeguards where appropriate.

Retention and deletion

  • App records stored locally remain on your device until you delete them, reset the App's data, or remove the App and its data.
  • Data synced through iCloud remains subject to your iCloud settings, deletions, and Apple's retention practices.
  • Apple Health data is managed through Apple Health and your device settings.
  • Subscription and transaction records are retained as needed to provide purchases, restore entitlements, prevent fraud, and meet legal or accounting requirements.
  • Contact messages, newsletter records, Website logs, analytics data, and tool requests are retained only for as long as reasonably necessary for their stated purpose, security, support, unsubscribe handling, or legal obligations.

To request deletion of personal data held directly by us, contact info@veltoglp.com. Because Velto has no user accounts and we generally cannot identify locally stored or private iCloud records, some App data must be deleted by you through the App, your device, Apple Health, or iCloud settings.

Security

We use technical and organizational measures designed to protect information, including Apple's device data protection for local App data and encrypted HTTPS/TLS connections for data transmitted to our services and providers. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children

Velto is not directed to children under 16. We do not knowingly collect personal information directly from children under 16 through a Velto account because the App has no account registration. If you believe a child has provided personal information to us through the Website or a support request, contact us so we can review and delete it where appropriate.

Your privacy rights

Depending on your location and applicable law, you may have the right to:

  • request access to personal data we hold about you;
  • request correction or deletion;
  • request restriction of processing;
  • receive data you provided in a portable format where applicable;
  • object to processing based on legitimate interests or to direct marketing;
  • withdraw consent at any time for future processing; and
  • lodge a complaint with a competent data-protection supervisory authority.

To exercise a right, email info@veltoglp.com. We may need information from you to verify and respond to your request. Your rights may be limited where an exception under applicable law applies.

Third-party privacy information

You can learn more about relevant providers here:

Changes to this policy

We may update this Privacy Policy when Velto, the Website, our providers, or legal requirements change. We will publish the updated version here and change the effective date above. Material changes may also be communicated in the App or through another appropriate channel.

Contact

For privacy questions or requests, contact:

info@veltoglp.com