Privacy Policy

Velo reads the health data you allow through Apple Health and Android Health Connect. The raw data never leaves your device: score calculation, the personal baseline and all health processing happen on your phone.

The data types we read:

• Steps and active calories
• Sleep duration and sleep stages
• Heart rate and resting heart rate
• Heart rate variability (HRV)
• Respiratory rate and blood oxygen (SpO2)

Health data is never used for advertising, never sold and never shared for marketing. Apple HealthKit and Health Connect rules require this, and we follow them.

Velo's own server (velo-api) only sees:

• Your account identity: user id and session token
• The messages you write to the coach and the coach replies
• Product analytics events: a fixed catalog such as screen views, workout started and paywall shown (health values are never logged)
• Subscription and entitlement state
• What you share for the community, leaderboard and friend challenges

Syncing your derived scores (recovery, sleep, strain, energy) to the server requires a separate consent. If you decline it, your scores stay on the device and the app keeps working.

While you record a workout, we read your location to produce your route, distance and pace. Location is requested only during a workout and your workout records are stored on your device.

When you ask the coach a question, your question and a summary of that day's scores go through our server to a large language model provider and the answer comes back to you. The summary contains scores and the text you wrote; raw heart rate, HRV and sleep records are not sent.

Coach answers are informational and are not medical advice.

Velo uses these third-party services:

• Apple HealthKit and Android Health Connect: health read and write permissions, data is processed on the device
• Sign in with Apple: if you make your account permanent, it provides your name and email (you can hide your email through Apple)
• RevenueCat: subscription and entitlement management, purchase records
• Google AdMob and UMP: rewarded video ads and the consent form only
• velo-api: the MotiveX Intelligence server for the coach, quota, account and community

Velo has no banner or interstitial ads. Ads appear only as rewarded video in two places you choose to use: unlocking an extra coach message and unlocking a trend.

The ad SDK is not initialised until the first rewarded request. In the EEA, the UK and Switzerland the Google UMP consent form is shown; on iOS the tracking permission is also requested. If you decline, ads are not personalised. Velo Pro users are shown no ads at all and the ad SDK is never started.

Your health data is not used for ad targeting.

Velo Pro is purchased through the App Store and Google Play. We never see your card details. RevenueCat processes the store receipt and your app user id to verify purchase state.

Our server is hosted in Europe. Some services we use (Apple, Google, RevenueCat) may process data on servers outside Türkiye. We keep your data only as long as it is needed to provide the service.

On-device data is held in an encrypted local database with the key in the device secure store. If you enable the app lock, Velo asks for Face ID or your fingerprint on launch.

Velo is not directed at children under 13. We do not knowingly collect a child's data. If you notice such a case, write to us and we will delete the record.

Under KVKK and GDPR you have the right to access, correct and delete your data and to object to processing. You can export your data and delete your account from inside the app.

You can also send your request to [email protected].

For privacy questions, write to [email protected]. MotiveX Intelligence Anonim Şirketi, Muradiye Mah. MCBU Kampüsü Teknokent No:22 Ofis Z-27, Manisa 45140, Türkiye.