Privacy and GDPR
Most health apps ask you to hand over your data before they will hold it for you. Velto does not, because there is no account to hand it to. Your medication history, weight, symptoms, photos and notes are stored on your device. This page explains exactly what that means, including the parts that are less convenient to say.
You do not create a Velto account, and you never give us a name or an email address in order to track. Velto is not an account-based service.
There is no credential database to breach. It also means that if you ask us to delete your tracking data, we generally cannot identify it — which is why the privacy policy tells you to delete it yourself on your device.
Medication, treatment dates, dosage, weight, progress photos, symptoms, mood, notes and nutrition are stored locally and protected by Apple's device data protection.
If you turn on sync, it runs through your own iCloud account using Apple CloudKit. That is your Apple account under your iCloud settings, not a Velto server holding a copy.
Velto is made by MoneyCoach, whose registered contact address is in Berlin, Germany. GDPR applies to this processing directly rather than by extension.
You can exercise your rights by emailing us, and you can lodge a complaint with a German data-protection supervisory authority if you are not satisfied with the response.
The distinction that matters is not what we promise but what is architecturally possible. Health records and product analytics are handled completely differently.
| Data | Where it lives | Can Velto see it? |
|---|---|---|
| Medication, doses, treatment dates | Your device, optionally your iCloud | No |
| Weight, progress photos, body measurements | Your device, optionally your iCloud | No |
| Symptoms, mood, appetite, journal notes | Your device, optionally your iCloud | No |
| Apple Health data (weight, steps, water, nutrition) | Apple Health, only with your permission | No, and you can revoke access any time |
| Subscription status and purchase receipts | Apple and RevenueCat | Yes, as an anonymous app identifier |
| App events such as viewing a paywall | RevenueCat, Meta App Events, Apple attribution | Yes, without health content |
| Website visits and page views | Vercel Web Analytics, self-hosted Umami | Yes, in aggregate |
| Newsletter email address | Mailchimp, only if you subscribe | Yes, until you unsubscribe |
Being honest about this is more useful than a privacy badge. Velto is not a zero-telemetry app, and here is the full list of what goes out.
Several of those providers are US companies, so some of that data is processed outside Germany and the European Economic Area. Where that happens we rely on an applicable transfer mechanism such as an adequacy decision or standard contractual clauses. We would rather write that plainly than imply everything stays inside Europe, because it does not. What does stay on your device is the part that matters most: the health record itself.
Depending on where you live and which law applies, you can ask us to do each of the following.
Email info@veltoglp.com to exercise any of these. We may need information from you to verify the request. Because Velto has no accounts, tracking data stored on your device or in your private iCloud generally has to be deleted by you, through the app, your device settings, Apple Health or iCloud.
The controller responsible for the processing described here is MoneyCoach. Privacy questions and requests go to info@veltoglp.com.
MoneyCoachc/o Volkssolidarität e. V.Alte Schönhauser Straße 1610119 Berlin, Germanyinfo@veltoglp.comWhether or not you choose Velto, these are the questions that separate a genuine privacy position from a marketing one. Ask them of any app you are considering.
Velto is currently an iPhone app. This page describes the iOS app and veltoglp.com, and reflects the privacy policy last updated 19 July 2026.
No account, no email, and a health record that stays on your iPhone. Read the full policy first if you would rather check the detail yourself.