VELOCT

01 / About VELOCT

VELOCT is a running companion app developed by Core Tattva. It provides GPS run tracking, on-device AI coaching, running form analysis, structured training plans, voice coaching, heart rate monitor pairing, watch companion support, route intelligence, race pacing, mental coaching, and detailed analytics. The app is designed to work fully offline.

02 / Data We Collect

Veloct Pro subscription purchases are processed by Apple's App Store (iOS) or Google Play (Android) and verified by RevenueCat. The only data associated with you in those systems is: a pseudonymous user ID generated by Veloct (not your name, email, or profile), subscription transaction details (product purchased, purchase and expiry dates, transaction ID), your platform, app version, and country code derived from your store account. Beyond that single subscription flow, we collect no personal information, usage data, analytics, crash reports, or device identifiers. All run records, GPS routes, health metrics, coach conversations, training plans, and preferences are stored locally on your device only — they never reach our servers or any third party.

03 / Account & Login

VELOCT requires no account, login, or sign-up of any kind. You can download and use the app immediately without providing any personal information.

04 / GPS & Location Data

VELOCT uses fine and background location permissions to track your runs in real time. All GPS data is processed and stored exclusively on your device. GPS coordinates are never transmitted to any server, cloud service, or third party. Location data is used solely for mapping your run route, computing distance and pace, and powering route intelligence features.

05 / Camera & Form Analysis

The Form Lab feature uses your device camera to record video for running form analysis via MediaPipe BlazePose. All pose detection and gait analysis runs entirely on your device. Video frames and pose landmark data are never transmitted, uploaded, or shared. You can also pick existing videos from your photo library for analysis.

06 / Heart Rate & Health Data

VELOCT pairs with BLE heart rate monitors (scanning only UUID 0x180D — Heart Rate Service) and integrates with Apple HealthKit (iOS) and Health Connect (Android 14+) or Google Fit (older Android). Health data — including heart rate, HRV, sleep, and steps — is read and written locally. No health data is ever transmitted to any server or third party.

07 / Bluetooth Permissions

Bluetooth Low Energy (BLE) is used exclusively for pairing with heart rate chest straps. VELOCT scans only for devices advertising the standard Heart Rate Service (UUID 0x180D). No other Bluetooth scanning or data exchange occurs.

08 / Motion & Sensors

Accelerometer and motion data are used on-device for cadence detection during runs and for cheat detection (identifying non-running activity). This sensor data is processed in real time and never stored beyond the current session or transmitted anywhere.

09 / Network Calls

VELOCT makes only three optional network calls: 1. Weather API — Your approximate location (lat/lng) is sent to api.open-meteo.com to fetch weather forecasts. No API key is used, no tracking occurs, and the call fails gracefully if offline. 2. LLM Model Download — A one-time download of AI model files from Hugging Face. No user data is sent. Downloads are SHA-256 verified and resumable. 3. Subscription Purchases (Veloct Pro) — If and only if you initiate a Pro subscription purchase, your transaction is processed through Apple's StoreKit (iOS) or Google Play Billing (Android). Entitlement status (whether you currently have an active Pro subscription) is then verified via RevenueCat (revenuecat.com). RevenueCat receives a pseudonymous user ID, transaction details (product ID, transaction ID, purchase and expiry dates), platform (iOS or Android), app version, and country code from your App Store / Google Play account. No name, email, run data, health data, or app-usage data is ever sent. The free tier of Veloct does not make this call.

10 / AI & On-Device Inference

The AI Running Coach uses a rule-based engine that runs instantly on-device, with an optional on-device LLM powered by llama.cpp. All AI inference — coaching advice, weekly recaps, form analysis results, and training plan generation — runs entirely on your device. No data is sent to any external AI service, cloud API, or machine learning platform.

11 / Watch Companion

The optional Apple Watch and Wear OS companion modules sync live run metrics via the platform Data Layer API (Wear OS) or WatchKit (Apple Watch). This communication happens entirely between your phone and watch over a local connection. No data is sent to any external server. You can opt out of the watch companion in Settings.

12 / Menstrual Cycle Tracking

Cycle tracking is entirely opt-in. If enabled, period data, cycle length, and contraceptive method are stored locally on your device. Phase-aware training adaptations are computed on-device. Optional HealthKit sync occurs only between your device and the Health app. No cycle data is transmitted to any server or third party.

13 / Local Data Storage

All data you enter into VELOCT — including run records, GPS routes, training plans, coach conversations, shoe inventory, daily check-ins, race goals, and preferences — is stored exclusively on your device using local storage. This data is never synced, backed up to our servers, or transmitted anywhere. If you uninstall the app, this data will be permanently deleted.

14 / Subscriptions (Veloct Pro)

Veloct Pro is an optional subscription that unlocks advanced coaching features (AI Coach, Form Lab outdoor analysis, SpeedCast, Workout Builder, and others). Payments are processed by Apple's App Store (iOS) or Google Play (Android) under their respective terms; Veloct never sees your payment method, card number, or billing address. Subscription entitlement is managed by RevenueCat using a pseudonymous user ID that we generate locally on your device. This ID is not linked to your real identity, email, or any personal profile. RevenueCat receives only the data described in Section 09 #3 above. You can cancel your subscription at any time in your Apple ID Subscriptions (iOS Settings → your name → Subscriptions) or Google Play (Play Store → Profile → Payments & subscriptions). Cancellation takes effect at the end of your current billing period. Veloct itself does not store any payment information.

15 / Data Export & Deletion

You can export all your data as JSON from the Privacy Dashboard at any time. You can also export individual runs as GPX 1.1 files via the OS share sheet. To delete all data, use the "Clear local database" option in the Privacy Dashboard. Uninstalling the app also removes all data permanently.

16 / Third-Party Services

17 / Notifications

VELOCT uses local notifications for workout reminders, post-run summaries, recovery alerts, and optional menstrual cycle phase transitions. All notifications are scheduled and triggered locally on your device. No push notification service or remote server is involved.

18 / Advertising

VELOCT contains no advertising of any kind. There are no ads, no ad SDKs, no sponsorships, and no ad-related data collection — ever.

19 / Children's Privacy

VELOCT is suitable for users of all ages. We do not knowingly collect any information from children under 13 (or the applicable age of digital consent in your jurisdiction). The subscription purchase flow inherits Apple's and Google's age-of-consent and parental-consent rules; we do not solicit subscriptions from children.

20 / Changes to This Policy

If we ever update this privacy policy, we will post the revised version here with an updated date. Any future version of VELOCT that does collect data will clearly disclose what is collected and why, prior to any data being gathered.

21 / Contact

Questions about this privacy policy? Reach out at dev@coretattva.com.