Vellia Privacy Policy

Last Updated: September 10, 2026

Vellia is developed and operated by SIXSIDE MARKETING INC. (“Vellia,” “we,” “us,” or “our”).

Your privacy is important to us. Vellia is designed to minimize the collection and transmission of personal information, particularly information relating to your health and wellness.

This Privacy Policy explains what information Vellia collects or processes, how and why we use it, when information may be shared with service providers, how long information is retained, and the choices and rights available to you.

By using Vellia, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent, we will ask for that consent separately.

1. Information We Process

Vellia processes different categories of information depending on the features you choose to use.

1.1 Information Stored Locally on Your Device

The following information is designed to be stored locally on your device using Apple’s SwiftData framework:

• symptom logs, including symptom type, severity, date, and notes you choose to enter;
• menstrual-cycle and period information;
• onboarding information, including your first name, age range, self-reported cycle status, symptoms of interest, and wellness goals;
• your Ask Vellia conversation history.

Except as specifically described in the Ask Vellia section below, this information is not transmitted to Vellia’s servers or shared with third parties by Vellia.

Your locally stored information remains on your device unless you use a feature that specifically requires transmission.

Removing Vellia from your device is intended to remove information stored solely within the application’s local storage. However, device-level backups or operating-system functionality controlled by Apple may operate independently of Vellia. Vellia does not control Apple’s device backup processes.

Vellia does not use iCloud or CloudKit to synchronize your personal health and wellness information between devices.

2. Health and Wellness Information

Some information you choose to enter into Vellia may be considered sensitive personal information, including information about:

• menstrual cycles;
• symptoms;
• menopause or perimenopause experiences;
• sleep;
• mood;
• physical or emotional wellness; and
• other health-related information you voluntarily provide.

We treat this information as sensitive.

Vellia is designed to collect and process only the information reasonably necessary to provide the features you choose to use.

We do not sell health or wellness information.

We do not use health or wellness information for targeted advertising.

We do not use health or wellness information to build advertising profiles.

We do not provide health or wellness information to data brokers.

3. Ask Vellia and Artificial Intelligence

3.1 How Ask Vellia Works

Ask Vellia is an optional AI-powered wellness information feature.

When you voluntarily submit a question to Ask Vellia, Vellia may send:

• the text of your question; and
• a brief summary of up to 5 recent symptom logs from the past 14 days (symptom name, severity, and relative timing)

to our artificial intelligence service provider, Anthropic, for the purpose of generating a response.

We intend to send only information reasonably necessary to provide a relevant response.

Your complete Vellia health history is not intended to be transmitted unless it is necessary for the specific functionality you have requested.

Whenever reasonably possible, Vellia avoids including direct account identifiers such as your email address or Apple account information in requests sent to the AI provider.

3.2 Consent to AI Processing

Before your first question is sent to Ask Vellia, Vellia will show you a disclosure explaining that your question and a brief summary of your recently logged symptoms will be sent to Anthropic to generate a response. You must choose to continue before your message is sent.

You are not required to use Ask Vellia.

If you do not want your information transmitted to Anthropic, you should not use Ask Vellia.

Declining to use Ask Vellia does not prevent you from using other Vellia features that do not require AI processing.

3.3 AI Conversation Storage

Vellia does not store the contents of your Ask Vellia questions or AI-generated answers on Vellia’s servers.

Your Ask Vellia conversation history is stored locally on your device.

You may clear your locally stored Ask Vellia conversation history from within the app.

3.4 Anthropic Processing and Retention

Information transmitted through Ask Vellia is processed by Anthropic under Anthropic’s applicable commercial/API privacy and data-processing practices.

Vellia does not control Anthropic’s independent legal obligations or security-enforcement requirements.

4. Important Information About Ask Vellia

Ask Vellia provides general educational and wellness information.

Ask Vellia:

• is not a doctor;
• does not provide medical diagnoses;
• does not establish a doctor-patient relationship;
• is not a substitute for a licensed healthcare professional;
• should not be relied upon for emergencies or urgent medical decisions.

AI-generated information can be incomplete, inaccurate, outdated, or inappropriate for your specific circumstances.

You should consult an appropriately qualified healthcare professional regarding medical symptoms, diagnoses, medications, treatment decisions, or other medical concerns.

If Vellia detects certain language that appears to indicate an urgent medical or mental-health concern, the app may display safety information instead of sending the message to the AI service.

This detection process may not identify every emergency or urgent situation.

5. Community Feature

Vellia may offer an optional Community feature.

If you choose to create an account and participate in the Community, certain information may be stored on Vellia’s backend infrastructure through Google Firebase / Firestore.

This may include:

• Community posts you submit;
• your display name;
• an app-specific account identifier associated with Sign in with Apple;
• information needed to operate, secure, moderate, or administer the Community.

Approved Community posts may be visible to other signed-in Vellia users.

Pending, reported, restricted, removed, or otherwise moderated content may be visible only to you and authorized moderation or administrative systems as appropriate.

5.1 Information You Post Publicly

You should avoid posting information in the Community that you do not want other users to see.

Depending on the feature, Community content may include sensitive information that you voluntarily choose to disclose.

Vellia does not require you to disclose detailed health information publicly.

You are responsible for deciding what personal information you include in a Community post.

6. Sign in with Apple

Vellia uses Sign in with Apple for account functionality associated with the Community.

You are not required to create a Community account to use Vellia features that do not require an account.

When you use Sign in with Apple, Apple provides Vellia with an app-specific identifier that allows us to recognize your account.

Depending on the choices you make during Apple’s sign-in process, Apple may also provide an email address or private relay email address.

Vellia does not use your email address for advertising or marketing unless you separately and expressly consent to receive such communications.

Apple independently processes information associated with Sign in with Apple according to Apple’s own terms and privacy practices.

7. Technical and Operational Information

Vellia may process limited technical information necessary to operate, secure, troubleshoot, and maintain the service.

This may include information such as:

• request or response size;
• timestamps;
• error information;
• application version;
• device or operating-system information where technically necessary;
• security or abuse-prevention information.

We do not use this information to create advertising profiles.

Where technical information can reasonably be associated with an identifiable person, we treat it as personal information.

We aim to minimize the amount of technical information retained.

8. Information We Do Not Collect or Use

Unless this Privacy Policy is updated and users are provided any notice or consent required by law, Vellia does not:

• sell personal information;
• sell health information;
• use third-party advertising tracking SDKs;
• use personal health information for targeted advertising;
• access Apple Health or HealthKit data;
• use health information for advertising or marketing profiling;
• provide personal health information to data brokers;
• use Community information to determine eligibility for employment, insurance, credit, housing, or similar decisions.

9. Service Providers

Vellia relies on a limited number of service providers to operate certain features.

Anthropic

Purpose: Artificial intelligence processing for Ask Vellia and community post moderation.

When you use Ask Vellia, your question and a brief summary of up to 5 recent symptom logs from the past 14 days may be processed by Anthropic to generate a response. When you submit a Community post, the post text and topic category are sent to Anthropic to screen for guideline compliance before publishing. No name or account information is added by Vellia.

Google Firebase / Firestore

Purpose: Backend infrastructure supporting features such as Community accounts, Community content, security, moderation, and related functionality.

Apple

Purpose: Sign in with Apple and operating-system functionality associated with the Vellia iOS application.

We expect service providers that process personal information on our behalf to maintain protections appropriate to the nature and sensitivity of the information they process.

Service providers may process information according to their own legal obligations and applicable agreements with us.

10. International Processing of Information

Some of Vellia’s service providers operate infrastructure outside Canada, including in the United States and potentially other jurisdictions.

As a result, personal information processed by those providers may be transferred to, stored in, or accessed from jurisdictions outside your province or country.

Information located in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, regulators, or government authorities where permitted by applicable law.

We take reasonable steps to use service providers with privacy and security protections appropriate to the sensitivity of the information involved.

11. How We Use Information

Where applicable, we process personal information for purposes including:

• providing features you request;
• maintaining your Vellia experience;
• generating Ask Vellia responses;
• operating the Community;
• authenticating Community accounts;
• reviewing or moderating Community content;
• detecting fraud, abuse, security incidents, or violations of our rules;
• maintaining application reliability;
• troubleshooting technical problems;
• fulfilling legal obligations;
• protecting Vellia, our users, and others.

We will not use personal information for a materially different purpose without providing appropriate notice and obtaining additional consent where required by law.

12. Data Minimization

Vellia follows a data-minimization approach.

We aim to collect, transmit, and retain only information reasonably necessary for the applicable functionality.

In particular, Vellia is designed so that sensitive wellness information remains on your device whenever server-side processing is not reasonably necessary.

When Ask Vellia requires information about your recent symptoms, we aim to provide only relevant context rather than unnecessarily transmitting your entire history.

13. Data Retention

Different categories of information have different retention periods.

Local Device Information

Symptom logs, cycle information, onboarding information, and Ask Vellia conversation history stored locally remain on your device until you delete them through available app functionality or remove the application, subject to device-level backup functionality outside Vellia’s control.

Community Account Information

Community account information is retained while your Community account remains active and for a limited period afterward where reasonably necessary to complete deletion, protect against fraud or abuse, meet legal obligations, resolve disputes, or maintain security records.

Community Posts

Community posts are generally retained until:

• you delete them;
• you delete your Community account;
• Vellia removes them under its Community rules; or
• they are otherwise no longer reasonably necessary for the operation or protection of the Community.

Copies may temporarily remain in restricted backups or system logs until those records are overwritten or deleted through ordinary retention cycles.

AI Information

Vellia itself does not retain Ask Vellia question or answer content on its servers.

Anthropic may retain information transmitted through its API according to Anthropic’s own applicable retention practices.

Technical and Security Information

Limited technical, security, moderation, and operational information may be retained only for as long as reasonably necessary for security, service reliability, dispute resolution, fraud or abuse prevention, compliance, or legal obligations.

We periodically review information under our control and delete or de-identify information that is no longer reasonably necessary for its identified purpose, subject to applicable legal requirements.

14. Account and Data Deletion

You may delete your Community account through the account-deletion functionality available within Vellia.

Deleting your Community account is intended to remove or initiate deletion of:

• your Community account identifier;
• your Community profile information; and
• Community posts associated with your account,

subject to limited exceptions described in this Privacy Policy.

Information may be retained where reasonably necessary to:

• comply with applicable law;
• investigate fraud, abuse, or security incidents;
• establish, exercise, or defend legal claims;
• maintain legally required records;
• complete ordinary backup-deletion cycles.

Where retained for one of these purposes, access will be restricted as appropriate.

15. Your Privacy Choices and Rights

Depending on applicable law and the information we hold about you, you may have the right to:

• request access to personal information under our control;
• ask how personal information has been used or disclosed;
• request correction of inaccurate or incomplete personal information;
• request deletion of certain personal information;
• withdraw consent to certain processing, subject to legal or contractual restrictions and reasonable notice;
• challenge our compliance with applicable privacy requirements.

Because much of Vellia’s health and wellness information is stored exclusively on your device, Vellia may not have access to that information and therefore may be unable to retrieve it for you.

You may manage locally stored information using features available within the app.

You may stop the disclosure of information to Anthropic by discontinuing use of Ask Vellia.

You may delete your Community account using the functionality available within the app.

Privacy-related requests can also be sent to:

Privacy Officer
SIXSIDE MARKETING INC.
Email: contact@sixsidemarketing.com

We may need to verify your identity before completing certain privacy requests.

16. Withdrawing Consent

Where Vellia relies on your consent, you may withdraw that consent at any time, subject to applicable legal or contractual restrictions.

Withdrawal may affect our ability to provide a feature that requires the relevant information.

For example:

• you can stop AI processing by no longer using Ask Vellia;
• you may delete your Community account if you no longer want Community information maintained;
• you may remove locally stored information through available app controls.

We will explain any material consequences of withdrawing consent where required.

17. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized:

• access;
• use;
• disclosure;
• alteration;
• loss;
• theft;
• copying; or
• destruction.

Safeguards may include access controls, authentication mechanisms, server-side authorization rules, encryption provided by applicable platforms and service providers, restricted administrative access, secure development practices, monitoring, and other measures appropriate to the sensitivity of the information.

Community access controls are designed so that users can modify or delete only content they are authorized to manage.

No electronic transmission, device, application, or storage system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

18. Privacy and Security Incidents

If we become aware of a privacy or security incident involving personal information under our control, we will investigate and respond in accordance with applicable law.

Where required, we may notify:

• affected individuals;
• privacy regulators;
• service providers;
• law-enforcement or other authorities.

We maintain procedures intended to identify, assess, document, mitigate, and respond to relevant privacy and security incidents.

19. Children’s Privacy

Vellia is intended for individuals who are 17 years of age or older.

Vellia is not directed to children under 17.

We do not knowingly seek to collect personal information from individuals under 17 through the service.

If we learn that personal information has been collected from a person under the applicable minimum age contrary to our policies, we may take reasonable steps to delete or restrict that information.

Parents or legal guardians who believe a minor has provided personal information to Vellia may contact our Privacy Officer.

20. Community Safety and Moderation

Community content may be reviewed, restricted, rejected, removed, or otherwise moderated where we reasonably believe it:

• violates our Community rules or Terms of Use;
• threatens user safety;
• contains abusive, unlawful, fraudulent, or harmful material;
• infringes another person’s rights;
• creates security or operational risks.

Information associated with reported content may be temporarily retained where reasonably necessary to investigate reports, enforce our rules, prevent repeat abuse, or comply with legal obligations.

21. Legal Disclosures

We may disclose information where we reasonably believe disclosure is required or permitted by applicable law, including to:

• comply with a valid legal process;
• respond to a lawful government request;
• investigate fraud or security incidents;
• protect the rights, safety, or property of Vellia, our users, or others;
• establish, exercise, or defend legal claims.

Where legally permitted and reasonably appropriate, we will seek to limit disclosures to the information necessary for the relevant purpose.

22. Corporate Transactions

If SIXSIDE MARKETING INC., Vellia, or relevant assets are involved in a merger, acquisition, financing, restructuring, sale of assets, insolvency proceeding, or similar corporate transaction, personal information may be transferred as part of that transaction where permitted by law.

Any recipient will be required to handle personal information in accordance with applicable privacy requirements.

Where required by law, we will provide notice or obtain consent.

23. No Sale of Personal Information

Vellia does not sell your personal information.

We do not sell:

• symptom information;
• menstrual-cycle information;
• wellness information;
• AI conversations;
• Community profile information;
• Community posts;
• account identifiers.

If our practices materially change in the future, we will update this Privacy Policy and obtain any consent required by applicable law before implementing the new practice.

24. No Advertising Based on Health Information

Vellia does not use information about your menstrual cycle, symptoms, menopause, perimenopause, or other health or wellness information for targeted advertising.

We do not allow third-party advertisers to use this information to build advertising profiles.

25. Apple Health and HealthKit

Vellia does not currently access, collect, read, or write information through Apple Health or HealthKit.

If Vellia introduces Apple Health or HealthKit functionality in the future, this Privacy Policy will be updated before or when that functionality is introduced, and any permissions or consents required by Apple or applicable law will be obtained.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to Vellia;
• new features;
• changes to service providers;
• changes in our privacy or security practices;
• legal or regulatory developments.

When we update this policy, we will revise the Last Updated date.

If a change materially affects how we collect, use, or disclose sensitive personal information, we may provide additional notice within Vellia or through another appropriate method.

Where applicable law requires new consent for a materially different use or disclosure, we will seek that consent before implementing the change.

27. Accountability

SIXSIDE MARKETING INC. is responsible for personal information under its control.

We have designated a Privacy Officer responsible for overseeing our privacy practices and responding to privacy-related questions, concerns, and requests.

Questions or concerns regarding Vellia’s handling of personal information may be directed to:

Privacy Officer
SIXSIDE MARKETING INC.
Email: contact@sixsidemarketing.com

28. Questions and Complaints

If you have a question, concern, complaint, access request, correction request, or deletion request relating to this Privacy Policy or Vellia’s privacy practices, please contact:

Privacy Officer
SIXSIDE MARKETING INC.
Email: contact@sixsidemarketing.com

We will review privacy complaints and requests in accordance with applicable law and may contact you if additional information is required to verify your identity or understand your request.

If you are not satisfied with our response, you may also have the right to contact the privacy regulator responsible for your jurisdiction.

29. Contact Information

Vellia
Operated by SIXSIDE MARKETING INC.

Privacy inquiries:
contact@sixsidemarketing.com