Privacy Policy — VELOCT

Last updated: April 2026 · Applies to iOS & Android

The short version

VELOCT does not collect, store, transmit, or share any personal data — ever. No account required. No cloud sync. No analytics. No ads. All your runs, GPS routes, health data, coach conversations, and training plans stay entirely on your device. The only two optional network calls (weather forecast and LLM model download) send no user data.

01 / About VELOCT

VELOCT is a running companion app developed by Core Tattva. It provides GPS run tracking, on-device AI coaching, running form analysis, structured training plans, voice coaching, heart rate monitor pairing, watch companion support, route intelligence, race pacing, mental coaching, and detailed analytics. The app is designed to work fully offline.

02 / Data We Collect

We collect no data whatsoever. VELOCT does not collect, process, or transmit any personal information, usage data, analytics, crash reports, device identifiers, or any other information from you or your device. All run records, GPS routes, health metrics, coach conversations, training plans, and preferences are stored locally on your device only.

03 / Account & Login

VELOCT requires no account, login, or sign-up of any kind. You can download and use the app immediately without providing any personal information.

04 / GPS & Location Data

VELOCT uses fine and background location permissions to track your runs in real time. All GPS data is processed and stored exclusively on your device. GPS coordinates are never transmitted to any server, cloud service, or third party. Location data is used solely for mapping your run route, computing distance and pace, and powering route intelligence features.

05 / Camera & Form Analysis

The Form Lab feature uses your device camera to record video for running form analysis via MediaPipe BlazePose. All pose detection and gait analysis runs entirely on your device. Video frames and pose landmark data are never transmitted, uploaded, or shared. You can also pick existing videos from your photo library for analysis.

06 / Heart Rate & Health Data

VELOCT pairs with BLE heart rate monitors (scanning only UUID 0x180D — Heart Rate Service) and integrates with Apple HealthKit (iOS) and Health Connect (Android 14+) or Google Fit (older Android). Health data — including heart rate, HRV, sleep, and steps — is read and written locally. No health data is ever transmitted to any server or third party.

07 / Bluetooth Permissions

Bluetooth Low Energy (BLE) is used exclusively for pairing with heart rate chest straps. VELOCT scans only for devices advertising the standard Heart Rate Service (UUID 0x180D). No other Bluetooth scanning or data exchange occurs.

08 / Motion & Sensors

Accelerometer and motion data are used on-device for cadence detection during runs and for cheat detection (identifying non-running activity). This sensor data is processed in real time and never stored beyond the current session or transmitted anywhere.

09 / Network Calls

VELOCT makes only two optional network calls, neither of which sends any user data: 1. Weather API — Your approximate location (lat/lng) is sent to api.open-meteo.com to fetch weather forecasts. No API key is used, no tracking occurs, and the call fails gracefully if offline. 2. LLM Model Download — A one-time download of AI model files from Hugging Face. No user data is sent. Downloads are SHA-256 verified and resumable.

10 / AI & On-Device Inference

The AI Running Coach uses a rule-based engine that runs instantly on-device, with an optional on-device LLM powered by llama.cpp. All AI inference — coaching advice, weekly recaps, form analysis results, and training plan generation — runs entirely on your device. No data is sent to any external AI service, cloud API, or machine learning platform.

11 / Watch Companion

The optional Apple Watch and Wear OS companion modules sync live run metrics via the platform Data Layer API (Wear OS) or WatchKit (Apple Watch). This communication happens entirely between your phone and watch over a local connection. No data is sent to any external server. You can opt out of the watch companion in Settings.

12 / Menstrual Cycle Tracking

Cycle tracking is entirely opt-in. If enabled, period data, cycle length, and contraceptive method are stored locally on your device. Phase-aware training adaptations are computed on-device. Optional HealthKit sync occurs only between your device and the Health app. No cycle data is transmitted to any server or third party.

13 / Local Data Storage

All data you enter into VELOCT — including run records, GPS routes, training plans, coach conversations, shoe inventory, daily check-ins, race goals, and preferences — is stored exclusively on your device using local storage. This data is never synced, backed up to our servers, or transmitted anywhere. If you uninstall the app, this data will be permanently deleted.

14 / Data Export & Deletion

You can export all your data as JSON from the Privacy Dashboard at any time. You can also export individual runs as GPX 1.1 files via the OS share sheet. To delete all data, use the "Clear local database" option in the Privacy Dashboard. Uninstalling the app also removes all data permanently.

15 / Third-Party Services

VELOCT does not integrate any third-party analytics SDKs, advertising networks, crash-reporting services, social login providers, or telemetry tools. The only external services used are Open-Meteo (weather, no API key, no tracking) and Hugging Face (model download, no user data sent). There are no third parties who receive any personal data from this app.

16 / Notifications

VELOCT uses local notifications for workout reminders, post-run summaries, recovery alerts, and optional menstrual cycle phase transitions. All notifications are scheduled and triggered locally on your device. No push notification service or remote server is involved.

17 / Advertising

VELOCT contains no advertising of any kind. There are no ads, no ad SDKs, no sponsorships, and no ad-related data collection — ever.

18 / Children's Privacy

Because we collect no data from any users, VELOCT is safe for users of all ages. We do not knowingly collect any information from children under 13 (or the applicable age of digital consent in your jurisdiction).

19 / Changes to This Policy

If we ever update this privacy policy, we will post the revised version here with an updated date. Any future version of VELOCT that does collect data will clearly disclose what is collected and why, prior to any data being gathered.

20 / Contact

Questions about this privacy policy? Reach out at dev@coretattva.com.