Vera – Privacy Policy

Effective Date: March 18, 2026  |  Version 1.0

1. Who We Are

Vera ("Vera", "we", "us") is a women's health companion application developed by iColeect Apps. You can contact us at support@icoleectapps.com or via our website at icoleectapps.com.

2. Information We Collect

2.1 Account Information

• Email address and display name (via Firebase Authentication)
• Preferred name and language preference
• Life stage selection (e.g., reproductive, perimenopause, postmenopause)

2.2 Health & Wellness Logs

When you manually log your daily wellness, we store in our cloud database (Firestore):

• Mood, energy level, stress level, sleep hours
• Symptoms you choose to record
• Cycle start dates and cycle length
• AI-generated insights linked to your logs

2.3 Apple HealthKit Data

Vera may request access to Apple HealthKit data including: resting heart rate, HRV, oxygen saturation, respiratory rate, VO₂ Max, active calories, exercise minutes, steps, sleep analysis, body temperature, and blood pressure.

HealthKit data is NEVER stored in our cloud database. It is read on your device, used only in a temporary (ephemeral) AI request when you explicitly request an AI health sync, and is never transmitted to third-party servers for storage.

2.4 Subscription Information

Subscription purchases are processed by Apple and managed by RevenueCat. We receive only your subscription status (active, expired, trial). We never receive your payment card details.

2.5 Technical Data

• Device OS version and app version (for crash diagnostics)
• Firebase session tokens (authentication only)

3. How We Use Your Information

• Personalized insights – AI-powered health analysis based on your logs and (when you request it) HealthKit data
• Cycle tracking – Phase calculation and personalized phase-based guidance
• App functionality – Authentication, data sync across your devices, push notifications (optional)
• Service improvement – Aggregate, anonymized usage patterns to improve the app. We never use individual health data for this purpose.

4. Artificial Intelligence Processing

When you request an AI Daily Sync, Vera sends the following data to Google Cloud Functions (running in us-central1):

• Your manually entered wellness log for that day
• Your HealthKit snapshot for that day (on-device read, not stored)
• Your life stage and cycle day (calculated locally)

The AI call is processed via Google Gemini (2.5 Flash Lite). The prompt and response are not retained by the AI model provider for training purposes under our usage agreement. The resulting insight text is stored in your Firestore document.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third party. We share data only with the following service providers, solely to operate the app:

• Google Firebase – Authentication, cloud database, cloud functions (Google Privacy Policy applies)
• RevenueCat – Subscription management (RevenueCat Privacy Policy applies)
• Google Gemini – AI insight generation (ephemeral, not stored by Google for training)

6. Data Retention

Your account data and logs are retained as long as your account is active. You may delete your account and all associated data at any time from the Profile screen in the app ("Delete Account"). Deletion is permanent and irreversible. Anonymized aggregate analytics (if any) may be retained.

7. Your Rights

• Access – Request a copy of the data we hold about you
• Correction – Correct inaccurate data via the app or by contacting us
• Deletion – Delete your account and all data in-app or by emailing us
• Portability – Request an export of your data
• HealthKit revocation – Revoke HealthKit permissions at any time in iOS Settings → Privacy → Health
• EU/UK users (GDPR) – You have the right to object to processing and lodge a complaint with your national supervisory authority
• California users (CCPA) – You have the right to know, delete, and opt out of sale (we do not sell data)

8. Children's Privacy

Vera is not directed to children under 18. We do not knowingly collect personal information from users under 18. If you believe a minor has provided us data, please contact us and we will delete it promptly.

9. Data Security

We use industry-standard security measures including Firebase security rules, encrypted transit (TLS 1.3), and authentication tokens. No system is 100% secure; we encourage you to use a strong password and keep your device locked.

10. International Transfers

Your data is processed on Google Cloud servers primarily in the United States (us-central1). By using Vera, you consent to this transfer. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy. When we do, we will update the Effective Date above and notify you via the app. Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions or data requests:
support@icoleectapps.com
iColeect Apps · icoleectapps.com