Privacy policy
Vera works with your training data and, with your explicit consent, some health data. This page explains exactly what we hold, where it lives, and how you get rid of it. Last updated 4 September 2026.
1. Who is responsible
The data controller is [COMPANY], [COMPANY ADDRESS], company registration [COMPANY REG NO], reachable at [COMPANY EMAIL]. We are established in the European Union and the GDPR applies to everything we do.
2. The short version
- All your data is stored in the European Union.
- One exception on processing, stated plainly because it matters: the text of your messages is sent to Anthropic in the United Statesto understand what you wrote and to write Vera’s replies. Details in section 5.
- Voice notes are transcribed on our own servers in Europe — never sent to third-party transcription services — and the audio is never written to disk at all.
- Health data (body weight, measurements, injuries) is collected only with your explicit, separate consent and stored encrypted.
- We do not sell data, show ads, or use your data to train models.
- You can delete your account by asking Vera in the chat. Deletion is complete within 30 days, backups included. Export is currently handled by hand on request, within the same 30 days.
- This website sets no cookies and runs no analytics.
3. What we collect, and why
Account data
The chat identifier Telegram gives us (that is your account — there is no password, and Telegram does not pass us your phone number), the name on your Telegram profile, your language, and your timezone. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
Training data
Your program, sessions, logged sets, weights, and equipment. This is the product; without it there is no coaching. Legal basis: performance of contract (Art. 6(1)(b)).
Health data — special category
Body weight, body measurements, and injury notes are health data under GDPR Article 9. We process them only with your explicit consent(Art. 9(2)(a)), which Vera asks for separately and plainly during onboarding. You can decline and still use Vera — she simply won’t track those things. You can withdraw consent at any time in the chat, and the data is then deleted. This data is stored encrypted, in the EU.
Messages and voice notes
The messages you exchange with Vera are stored so she has context and so your log exists. Voice notes are transcribed into text on transcription servers we operate ourselves in Europe; the audio is held in memory only for as long as that takes and is never written to disk, so there is no audio file to delete or to leak. Only the transcript is kept, as part of your message history.
Age
We ask for your year of birth solely to confirm you are 18 or older. Vera does not accept minors.
4. What we deliberately do not collect
- No calorie, macro, or diet tracking exists in the product.
- No location tracking. If you name your gym, that is a text field you chose to fill.
- No advertising identifiers, no tracking pixels, no analytics cookies — on this site or in the service.
5. Where your data lives, and the one place it travels
Everything we store is hosted in the European Union: application servers, database, backups, and the transcription service all run in Germany (Hetzner Online GmbH). Data at rest is encrypted, and backups are additionally encrypted before they leave the server.
Language-model processing is the exception, and we would rather be blunt about it than bury it.To understand what you write and to compose Vera’s replies, the text of your messages is sent to Anthropic’s API, which processes it on servers in the United States. If you have told Vera about an injury or your body weight, that text goes with it. This is an international transfer of special-category data, and it rests on Anthropic’s data processing agreement together with the European Commission’s Standard Contractual Clauses. Anthropic is contractually barred from using your content to train models, and does not retain it beyond what is needed to serve the request.
We are not comfortable leaving it there permanently. Moving this processing to EU-hosted infrastructure is planned work; when it lands, this page and the table below change and Vera tells you in the chat first. Note that what decides your training weights is ordinary deterministic code running in Germany — the model reads and writes language, it does not choose your loads.
6. Who processes data on our behalf
| Processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting, storage, backups, self-hosted transcription | Germany |
| Anthropic PBC | Language-model processing of message text (transfer under SCCs — see section 5) | United States |
There is no payment processor on this list because Vera does not take payments yet. One will be added here, and you will be told, before any billing exists.
One honest caveat: Vera runs on Telegram, so message delivery passes through Telegram’s infrastructure under Telegram’s own privacy policy, exactly as with any other Telegram conversation. Chats with a bot are not end-to-end encrypted — Telegram can see them — so treat the chat as you would any other cloud chat. Messages are encrypted in transit between Telegram and our servers. When WhatsApp support launches, its message router (360dialog GmbH, Germany) is added to the table above before the channel goes live.
7. How long we keep things
| Data | Retention |
|---|---|
| Voice note audio | Not retained — transcribed in memory, never written to disk |
| Message content (incl. transcripts) | 24 months |
| Training logs | Life of the account + 30 days |
| Consent records | Life of the account + 3 years (legal evidence) |
| Deleted accounts | Hard-deleted within 30 days, including from backups |
8. Your rights
Under the GDPR you can, at any time and free of charge:
- Access and export — ask Vera, or email us, and we send your full history. Today this is assembled by hand and reaches you within 30 days; a self-serve export arrives with the web dashboard. Vera tells you the same thing if you ask her in the chat.
- Correct — tell Vera a logged value is wrong and she fixes it.
- Delete — ask Vera to delete your account. Everything is gone within 30 days, backups included.
- Withdraw consent — for health data or proactive messages, separately, without losing the rest of the service.
- Object and restrict — per Art. 18 and 21.
- Complain — to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or your local supervisory authority.
The fastest route for all of these is simply asking Vera in the chat. You can also email [COMPANY EMAIL].
9. Vera is an AI, and says so
Vera identifies herself as an AI coach in her first message and whenever asked, in line with Article 50 of the EU AI Act. Automated processing is used to parse your messages and generate replies; your training weights follow deterministic rules, and no decision with legal or similarly significant effect is made about you by automated means.
10. This website
This marketing site sets no cookies, runs no analytics, and collects no personal data. The only outbound action is the t.me link that opens Telegram at Vera’s chat — nothing is sent anywhere until you press send in Telegram.
11. Changes
If this policy changes materially, Vera tells you in the chat before the change takes effect, and the date at the top of this page is updated. Questions: [COMPANY EMAIL].