Privacy policy
Vera works with your training data and, with your explicit consent, some health data. This page explains exactly what we hold, where it lives, and how you get rid of it. Last updated 1 August 2026.
1. Who is responsible
The data controller is [COMPANY], [COMPANY ADDRESS], company registration [COMPANY REG NO], reachable at [COMPANY EMAIL]. We are established in the European Union and the GDPR applies to everything we do.
2. The short version
- All your data is stored in the European Union.
- Voice notes are transcribed on our own servers in Europe — never sent to third-party transcription services — and the audio is deleted after 30 days.
- Health data (body weight, measurements, injuries) is collected only with your explicit, separate consent and stored encrypted.
- We do not sell data, show ads, or use your data to train models.
- You can export everything or delete your account by asking Vera in the chat. Deletion is complete within 30 days, backups included.
- This website sets no cookies and runs no analytics.
3. What we collect, and why
Account data
Your phone number (that is your account — there is no password), the name on your WhatsApp profile, your language, and your timezone. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
Training data
Your program, sessions, logged sets, weights, and equipment. This is the product; without it there is no coaching. Legal basis: performance of contract (Art. 6(1)(b)).
Health data — special category
Body weight, body measurements, and injury notes are health data under GDPR Article 9. We process them only with your explicit consent(Art. 9(2)(a)), which Vera asks for separately and plainly during onboarding. You can decline and still use Vera — she simply won’t track those things. You can withdraw consent at any time in the chat, and the data is then deleted. This data is stored encrypted, in the EU.
Messages and voice notes
The messages you exchange with Vera are stored so she has context and so your log exists. Voice notes are transcribed into text on transcription servers we operate ourselves in Europe. Audio files are stored encrypted and deleted automatically after 30 days; the transcript remains part of your message history. You can ask for a voice note to be deleted immediately.
Age
We ask for your year of birth solely to confirm you are 18 or older. Vera does not accept minors.
4. What we deliberately do not collect
- No calorie, macro, or diet tracking exists in the product.
- No location tracking. If you name your gym, that is a text field you chose to fill.
- No advertising identifiers, no tracking pixels, no analytics cookies — on this site or in the service.
5. Where your data lives
Everything is hosted in the European Union: application servers and database in Germany (Hetzner Online GmbH), language-model processing in AWS’s Frankfurt region (eu-central-1). Model providers are contractually barred from using your content for training. Data at rest is encrypted.
6. Who processes data on our behalf
| Processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting, storage, self-hosted transcription | Germany |
| 360dialog GmbH | WhatsApp message routing | Germany |
| Amazon Web Services EMEA | Language-model processing | Frankfurt, Germany |
| Stripe | Payments (we never see card details) | EU entity |
One honest caveat: Vera runs on WhatsApp, so message delivery passes through Meta’s WhatsApp infrastructure under WhatsApp’s own terms, exactly as with any other WhatsApp conversation. Messages are end-to-end encrypted in transit between your phone and our WhatsApp business endpoint.
7. How long we keep things
| Data | Retention |
|---|---|
| Voice note audio | 30 days, then deleted automatically |
| Message content (incl. transcripts) | 24 months |
| Training logs | Life of the account + 30 days |
| Consent records | Life of the account + 3 years (legal evidence) |
| Deleted accounts | Hard-deleted within 30 days, including from backups |
8. Your rights
Under the GDPR you can, at any time and free of charge:
- Access and export — ask Vera for an export and receive your full history as JSON or CSV.
- Correct — tell Vera a logged value is wrong and she fixes it.
- Delete — ask Vera to delete your account. Everything is gone within 30 days, backups included.
- Withdraw consent — for health data or proactive messages, separately, without losing the rest of the service.
- Object and restrict — per Art. 18 and 21.
- Complain — to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or your local supervisory authority.
The fastest route for all of these is simply asking Vera in the chat. You can also email [COMPANY EMAIL].
9. Vera is an AI, and says so
Vera identifies herself as an AI coach in her first message and whenever asked, in line with Article 50 of the EU AI Act. Automated processing is used to parse your messages and generate replies; your training weights follow deterministic rules, and no decision with legal or similarly significant effect is made about you by automated means.
10. This website
This marketing site sets no cookies, runs no analytics, and collects no personal data. The only outbound action is the wa.me link that opens WhatsApp with a prefilled message — nothing is sent anywhere until you press send in WhatsApp.
11. Changes
If this policy changes materially, Vera tells you in the chat before the change takes effect, and the date at the top of this page is updated. Questions: [COMPANY EMAIL].