Privacy Policy

1. Data we collect

None on our servers. Vellum has no user accounts, no sign-up, no email, and no analytics. We never receive any of your tracked information.

All of the following lives only on your device:

• Period start and end dates, optional flow intensity, optional notes.
• Daily logs: symptom selections, mood (1–5), energy (1–5), free-text notes.
• Settings (cycle length override, notification preferences).

2. Where data is stored

• A local SQLite database on your device.
• The notes and symptom fields are encrypted at rest with AES-GCM, using a 256-bit key generated on first launch and stored in the operating system's hardware-backed secure store (iOS Keychain / Android Keystore).
• The encryption key never leaves your device.

3. Network calls — exhaustive list

Vellum makes network requests only when you actively interact with paid features:

• RevenueCat — when you tap “Unlock Vellum” or “Restore purchase”. RevenueCat receives an anonymous installation ID and the purchase receipt. It does not receive any cycle data. No RevenueCat call is made on app launch.

That is the complete list. Vellum does not contain any analytics, telemetry, crash reporting, advertising, fingerprinting, attribution, or marketing SDKs.

4. Permissions we request

• Notifications (optional) — for local reminders only. Notifications are scheduled by the OS; no push server is involved.

We do not request access to the camera, contacts, location, microphone, photo library, Apple Health, or Google Health.

5. Data export and deletion

• Export — Settings → Export. Vellum can produce an encrypted JSON file or (with the lifetime unlock) a printable PDF. You choose where the file goes via the OS share sheet. Vellum itself never uploads the file anywhere.
• Delete all data — Settings → Delete all data (two-tap confirmation). This wipes the local database and deletes the encryption key from the secure store. There is no recovery — by design.

6. Children

Vellum is not directed at children under 13. We do not knowingly collect any information from anyone of any age — see section 1.

7. Predictions disclaimer

Vellum's predictions are estimates based on your tracked history. They are not a contraceptive method, not a fertility treatment, and not a medical diagnosis. Cycles vary. If you are tracking for conception, contraception, or a health condition, please consult a clinician.