Effective Date: July 23, 2026  Last Updated: July 23, 2026

This Privacy Policy explains how Vea Health, Inc. ("Vea," "we," "us," or "our") collects, uses, and protects the information you share with the Vea app (the "App"), written in plain English. For the wellness App described here, Vea is not acting as a HIPAA-covered entity, and the commitments below are what we voluntarily hold ourselves to. If you separately pursue prescription care, that care is delivered by our partner medical group under federal health-privacy law (HIPAA) and is covered by our Privacy Policy for those services, not this one. Your use of the App is also governed by our App Terms of Use.

What we collect

Three buckets, mapped to the App Privacy labels on the App Store listing.

Account

Your phone number or email, used as your login identifier and to send you a one-time sign-in code, and a display name if you choose to set one.

Health & performance

The Apple Health metrics you grant access to (weight, sleep, workouts, activity), the meals, workouts, and weight you log directly, and any photos or voice notes you attach to a log.

Coach interactions

Your chat transcripts with the Vea coach and Coach Memory, short summaries the coach saves to keep replies relevant. Only stored if you have AI features turned on.

How we use it

We use what you share to deliver the product you signed up for.

• Personalize coach replies to your training and nutrition.
• Generate today's training recommendation and adjust as your week unfolds.
• Surface weekly and monthly trends and recaps.
• Send a one-time sign-in code by text, or a sign-in link by email.

We do not profile you for advertising. We do not sell your data. Your health data never leaves Vea's vendors for marketing purposes.

AI and our AI provider

The Vea coach and photo-based meal analysis are powered by Anthropic Claude. We name the provider explicitly because you should know who processes your message before you send it. What we send: the message you type, a short summary of your recent training and nutrition context, and any photo or voice note you attach. What we do not send: your raw Apple Health history, payment information, or your name. Anthropic's API terms state that inputs and outputs are not used to train models and are retained for up to 7 days for trust-and-safety review, then deleted. You can review or delete Coach Memory, or turn AI off entirely, in the App's Settings; the App keeps working and coach surfaces become read-only.

Who we share with

The short list of vendors that help us run the App, one line per vendor.

• Supabase - authentication and the database that stores your account, logs, and coach transcripts.
• Twilio - sends the one-time sign-in code to your phone by text.
• Anthropic - the coach AI model. See the AI section above for what is sent and what is not.
• Apple - the App Store handles subscription payments; Apple Push Notification service delivers push notifications you opt into. Vea never sees your card.
• RevenueCat - keeps track of whether your subscription is active across devices.
• Vercel - hosting for the Vea backend.

No advertising SDKs. No analytics SDKs that share with data brokers. We will share information when legally required, or to protect someone's safety in a genuine emergency.

Your rights and controls

Every control below lives in the App. Email us if any of them fails and we will run it manually.

• Export - Settings, Your Data, Export. A copy of your account, logs, and Coach Memory, emailed to you within 30 days.
• Delete - Settings, Your Data, Delete. Hard delete within 30 days.
• Coach Memory - Settings, Privacy, Coach Memory. Delete individual entries, delete all, or turn the feature off.
• AI off-switch - Settings, Privacy, Vea AI, off.
• Apple Health per-category - iOS Settings, Health, Vea. Toggle each metric independently.

California, Colorado, Virginia, and other state residents have additional rights under their state privacy laws. Email privacy@veahealth.co with the request and a way for us to verify your identity.

Children

The App is for people 16 and up. We do not knowingly collect information from anyone under 16. If you believe a minor has signed up, write to privacy@veahealth.co and we will remove the record.

Security

• Encryption in transit (TLS 1.2 or higher) and at rest.
• Least-privilege access, with access logged.
• An audit log for data-access events in our health and coach surfaces.
• Breach notification within 72 hours of confirming an incident affects you.

Changes and contact

Material changes get an in-app notice before they apply to you. Minor changes get a new date at the top. Contact: privacy@veahealth.co (privacy) or team@veahealth.co (general).