Privacy Policy
Biovelq is built privacy-first. We try to keep this short, plain, and honest. This policy explains what data the app collects, how it is collected, what we do with it, and every third party we share it with.
What stays on your device
- Your profile (age, sex, height, weight, goals).
- Your protocols, vials, dose log, journal entries, biomarker readings.
- Your progress photos. Photos are encrypted at rest in the app sandbox via Apple Data Protection. They are never uploaded to our servers without your explicit action (a Save / Share tap).
None of the above is transmitted off-device unless you explicitly use the AI Assistant (described below).
Data we collect and share with third-party AI providers
What we collect: Text messages you type into the in-app AI Assistant. This may include any personal or health-related information you choose to include in those messages (for example, peptide names, doses, body measurements, goals, or symptoms — only if you type them).
How we collect it: Only when you open the AI tab and send a message after explicitly granting consent on the first-run AI disclosure screen. No background or implicit collection occurs. You can revoke consent at any time in Settings → AI Assistant.
Who we share it with, and why: Your messages are routed through our hosted proxy (operated on Vercel) to Vercel AI Gateway, which forwards them to the model provider you are using:
- Anthropic, PBC — when the active model is Claude Haiku 4.5 or Claude Sonnet 4.6. Anthropic's privacy policy: anthropic.com/legal/privacy.
- Google LLC — when the active model is Gemini 2.5 Flash. Google's API privacy practices: ai.google.dev/gemini-api/terms.
Both Anthropic and Google contractually commit (via their API terms and the Vercel AI Gateway agreement) not to use API-submitted content to train their foundation models, and provide privacy protections comparable to those described in this policy.
What we do to minimize what is sent:
- Our proxy strips phone numbers, email addresses, and 16-digit number sequences from your messages before forwarding.
- We do not store or log message bodies.
- AI requests are not associated with your Apple ID, Sign in with Apple identifier, name, email, or any persistent user identifier.
- Only messages explicitly typed into the AI tab are sent. Your dose log, vials, photos, biomarkers, and HealthKit data are never sent to the AI provider unless you copy them into a message yourself.
HealthKit
If you grant HealthKit access, we read weight, sleep, HRV, resting heart rate, VO₂ max, and body fat percentage to populate your Biomarkers tab. HealthKit data is processed entirely on-device and is never transmitted to our servers or to any third party — including the AI providers above.
Subscriptions
Subscriptions are processed by Apple via StoreKit. Biovelq never sees your payment information. Cancel anytime in Settings → Apple ID → Subscriptions.
Crash reports
Crash reports are anonymous and contain stack traces only — no PII, no log message bodies, no AI conversation content.
Your rights
- Revoke AI consent at any time from Settings → AI Assistant. After revocation, no further messages are sent.
- Export everything from Settings → Privacy → Export Data (JSON file).
- Delete everything from Settings → Privacy → Delete All Data.
- Email privacy@biovelq.app with any question or to request deletion of your data.
Children
Biovelq is not directed to children under 18 and we do not knowingly collect data from anyone under 18. The AI Assistant refuses interaction with users who identify as minors.
Disclaimers
Biovelq is for research and educational use only. It is not a medical app and is not a medical device. It does not provide medical advice, diagnosis, or treatment. Always consult a licensed physician before using any peptide.
Changes to this policy
If we change this policy materially, we will update the "Last updated" date above and, where appropriate, prompt for renewed consent inside the app.