Account
Your phone number or email — used as your login identifier and to send you a one-time sign-in code — and a display name if you choose to set one.
Vea Health
Privacy Policy.
How Vea collects, uses, and protects the information you share with the app. Written in plain English so you can read it once and know what to expect.
Vea is a fitness and nutrition app. It is not a HIPAA-covered service in this version; other applicable privacy and consumer-protection laws still apply.
What Vea is & what this covers
Vea Health is a premium fitness and nutrition app operated by Vea Health Inc., a Delaware company. When this policy says “we” or “Vea”, it means Vea Health Inc.
This policy covers the Vea iOS app, this website (vea.veahealth.co), and Vea AI. For the wellness app described here, Vea is not acting as a HIPAA-covered entity, and the commitments below do not limit rights under applicable privacy law. If you separately choose to pursue prescription care, that care is delivered by our partner medical group under federal health-privacy law (HIPAA) and is governed by the Telehealth Consent.
Your use of Vea is also governed by our Terms of Use. Questions: support@veahealth.co.
What we collect
Three buckets, mapped one-to-one to the App Privacy labels you see on the App Store listing.
Health & performance
The Apple Health metrics you grant access to (weight, sleep, workouts, activity), the meals, workouts, and weight you log directly, and any photos or voice notes you attach to a log.
Vea AI interactions
Your chat transcripts with Vea AI and Vea AI memory — short summaries Vea AI saves to keep replies relevant. Only stored if you have AI features turned on.
How we use it
We use what you share to deliver the product you signed up for.
Personalize Vea AI replies to your training and nutrition.
Generate today's training recommendation and adjust as your week unfolds.
Surface weekly and monthly trends and recaps.
Send a one-time sign-in code by text, or a sign-in link by email.
We do not profile you for advertising. We do not sell your data. Your health data never leaves Vea’s vendors for marketing purposes.
AI providers
Vea AI is powered by Anthropic Claude. We name the provider explicitly because you should know who reads your message before you send it.
What we send to Anthropic: the message you type, a short summary of your recent profile and health context relevant to your request, selected photos, and transcripts of supported voice input. This context can include your display name, saved goals, logs and health summaries.
We do not automatically send payment-card information or your complete Apple Health database. Health summaries and personal details you include in messages may be sent with your request.
Anthropic’s API terms state that customer inputs and outputs are not used to train models by default. Its standard API retention is up to 30 days, with exceptions for safety, legal requirements, certain services and contractual arrangements. This is separate from chats and logs stored in your Vea account. Anthropic’s retention policy: privacy.claude.com.
Supported server-side voice transcription uses OpenAI or Deepgram when configured; the transcript is then processed by Anthropic to prepare your entry. Voice may be unavailable if transcription is not configured. Provider retention differs by service and agreement; a single seven-day deletion promise does not apply to all processing.
With your AI permission for this provider scope, Vea may send your current request and a limited recent conversation through OpenRouter to TypeSafe’s Jev model. Jev helps choose an app action or model; it does not independently authorize changes to your records. The conversation can include health details or other information you put in messages. This routing request does not automatically include raw Apple Health history, payment information, photos or audio files. An earlier acceptance covering only the existing AI service is not treated as acceptance of this additional provider scope.
Vea AI memory is the short context Vea AI saves between conversations. You can review or delete it in Settings → Privacy → Vea AI memory.
You can turn AI off entirely in Settings → Privacy → Vea AI. The app keeps working — Vea AI surfaces become read-only.
Who we share with
The short list of vendors that help us run the product. One line per vendor, named.
Supabase
Authentication and the database that stores your account, logs, and Vea AI transcripts.
Twilio
Sends the one-time sign-in code to your phone by text. Twilio receives your phone number and the code for that purpose only.
Anthropic
The Vea AI model. See the AI section above for what is sent and what is not.
OpenRouter and TypeSafe
Route and evaluate limited conversation context to help select an app action or model, as described above.
Resend
Transactional email for sign-in links and receipts. Where Resend is unavailable, Vea falls back to Supabase’s built-in email.
Apple APNs
Apple Push Notification service — delivers the push notifications you opt into.
Apple App Store
Subscription payments are handled entirely by Apple via in-app purchase. Vea never sees your card.
RevenueCat
Subscription state — keeps track of whether your subscription is active across devices.
Vercel
Hosting for vea.veahealth.co and the Vea backend.
Yolanda (only if you use a Vea scale)
The software that lets your phone talk to a Vea body-composition scale over Bluetooth is made by Yolanda, who also make the scale. It contacts Yolanda to check its license, and identifies your phone with an identifier that is specific to this phone and to Vea, and cannot be used to recognize you in any other app. It carries no advertising identifier and no analytics. Your readings are stored by Vea. If you do not own a Vea scale, none of this software runs on your phone at all.
No advertising SDKs. No analytics SDKs that share with data brokers. We will share information when legally required — for example, in response to a valid court order — or to protect someone’s safety in a genuine emergency.
Your rights & controls
Every control below lives in the app. Email us if any of them fails for you and we will run it manually.
Export — Settings → Your Data → Export. A JSON envelope of your account, logs, and Vea AI memory, available to download from Settings. The file identifies categories exceeding the download limit; contact privacy@veahealth.co for additional records.
Delete — Settings → Your Data → Delete. Your account and linked app records are deleted. Support messages, security audits, and account-deletion safeguards may remain. Separately held medical-provider and payment records are not erased by this control. Contact privacy@veahealth.co for help with remaining records. Deleting your account does not cancel subscriptions.
Vea AI memory — Settings → Privacy → Vea AI memory. Delete individual entries, delete all, or turn the feature off.
AI off-switch — Settings → Privacy → Vea AI → off. Vea AI surfaces become read-only; everything else keeps working.
Apple Health per-category — iOS Settings → Health → Vea. Toggle each metric on or off independently of the app.
Contact — support@veahealth.co. Any of the above, by email, if the in-app control is not enough.
California, Colorado, Virginia, and other state residents have additional rights under their state privacy laws. Email support@veahealth.co with the request and a way for us to verify your identity.
Children
Vea is 16 and up. We do not knowingly collect information from anyone under 16. If you believe a minor has signed up, write to support@veahealth.co and we will remove the record.
International users
Vea launches in the United States. If you sign up from elsewhere and we expand to your region later, we will update this policy and notify you in the app before the change applies to you.
Security
The baseline we hold ourselves to.
Encryption in transit (TLS 1.2 or higher) and at rest.
Least-privilege access — Vea team members see only what their role requires, and access is logged.
An audit log for every data-access event in our health and Vea AI surfaces.
Breach notification within 72 hours of confirming an incident affects you.
Changes & contact
Material changes — new categories of data, new vendors, new uses — get an in-app notice and a 7-day grace period to review before they apply to you. Minor changes get a new date in the footer below.
Email — support@veahealth.co
Last updated: 2026-10-05