Privacy Notice

Who we are

Velantio is a nutrition and training tracker operated by Ajla Ćivić, Kidriceva cesta 17, 3320 Velenje, Slovenia. Contact: hello@velantio.com.

What we collect

Account identity through our sign-in provider, Clerk (email address, name if given, profile picture if the account has one, and the identifier of the Google or Apple account when that sign-in option is used). What you enter: your profile and goal, your calorie and macro targets, the food you log, your saved meals, your weigh-ins, your training routines and workout logs, and any AI Coach setup answers and plan drafts you choose to create. If you enable notifications, we keep notification preferences and a push token for this app installation. If you subscribe, we keep your plan, subscription status, renewal period and store/provider references, but not your full payment-card details. If you ask to be notified when an iPhone or Android app launches, we keep the email address and the platform you selected without creating a Velantio account. We also keep ordinary security and server request logs.

Health data

Weight, what you eat, the targets you set, and your workout history are health and fitness data — a special category under the GDPR. We process it because you asked us to and explicitly agreed to it. You can withdraw that consent by deleting your account.

Who else sees it

• Clerk (sign-in; your email address and the account details above).
• Open Food Facts and USDA FoodData Central (food lookups; only the search term or the barcode — never your account, your log or anything identifying you).
• Anthropic (meal-photo recognition and AI Coach plan generation; only the photo or structured training setup you choose to send, with no account details attached — see the next two sections).
• Google (Google sign-in when selected, Google Play distribution, and Google Play Billing for Android subscriptions).
• Apple (Sign in with Apple when selected, App Store distribution, and Apple in-app purchases for iOS subscriptions).
• RevenueCat (mobile subscription status, store transaction references and the Velantio account identifier used to keep paid access in sync).
• Expo (app updates and, when you enable notifications, push-token registration and delivery).
• Our hosting provider (the database and server that run Velantio).
• PostHog EU, when marketing analytics is enabled (landing-page versions and button-click events on the public website). It is not initialized on authenticated app or admin pages. Submitted launch-notification email addresses are not included in these analytics events.

No advertisers. Nothing sold, nothing shared for anyone else's marketing.

Notifications

Notifications are optional and off until you grant permission. If enabled, Velantio sends an app-installation identifier and push token through Expo's notification service. You can disable categories in Velantio, revoke notification permission in device settings, or sign out. Invalid device tokens are revoked automatically.

Subscriptions

iOS purchases are completed through Apple's App Store, and Android purchases are completed through Google Play. Both are synchronized through RevenueCat. Velantio receives the product, entitlement, transaction status and renewal dates needed to provide access and prevent duplicate subscriptions. Apple, Google and RevenueCat handle payment information under their own terms; Velantio does not receive your full card number.

Meal photos

When you use photo recognition, the photo is sent to Anthropic to be recognised. Velantio does not store it; Anthropic handles it under their API terms. What Velantio keeps is the date, how many items were recognised and which model answered. The result is an estimate that you review before anything is saved to your day.

AI Coach plans

When you ask AI Coach to create a plan, Velantio sends Anthropic your selected goal, experience level, weekly schedule, session length, equipment choices and the approved exercise catalogue. We do not attach your identity, workout history, photos, food log, weigh-ins or other health records. Velantio stores your setup, the generated draft, the model used and whether you accepted it. Nothing becomes a routine until you review and accept the draft.

How we use and protect it

We use this data to provide the tracker, synchronize your account, calculate the summaries you request, process subscriptions, prevent abuse, support you, and keep the service secure. Data is sent over encrypted HTTPS connections. Access to production systems is restricted to the people and processors who need it to operate Velantio. We do not sell personal or health data and do not use it for advertising.

Cookies

Account and display cookies include the sign-in cookie set by Clerk and velantio-appearance, which remembers whether you chose light, dark or your device's setting. On the marketing homepage, lp_variantremembers the landing-page version assigned to your browser for up to 30 days. Its value is a variant letter, not an email, account identifier, or health record.

Optional public-site analytics starts only after you choose Allow analytics. You can decline or withdraw permission using Analytics preferences in the website footer. Your choice is saved in local browser storage under velantio-marketing-analytics-v1. PostHog uses memory-only storage. It does not enable persistent PostHog cookies, session recording, or automatic form capture. The current setup respects Do Not Track and Global Privacy Control signals for analytics capture. No advertising cookies are set.

How long we keep it

For as long as the account exists. Deleting the account deletes the account's data from the database immediately; backups held by the hosting provider may take longer to age out. A launch-notification email is kept until we send that one release message or you ask us to remove it; it is not added to a general newsletter.

Your rights

Access, correction, deletion, a portable copy, objection, and a complaint to your national data protection authority. Settings → Your data gives you the copy and the deletion straight away. You can also start deletion from our account-deletion page; anything else, email hello@velantio.com.

Children

Velantio is for people aged 18 and over.

Changes

When this notice changes materially we will ask you to agree again in the app.