Privacy Policy

VERA is an AI endurance-coaching app operated by Samuel Boehm (VERA) ("VERA", "we", "us"), an individual developer based in Germany. We are the data controller for the personal data described here.

You can reach us about anything on this page — including any request about your data — at samuel.boehm2@gmail.com. Our postal address is in the Impressum.

We collect only what the coaching actually uses. In practice that falls into these groups:

• •Account details — your email address, and your name if your sign-in provider shares it. If you sign in with Apple and choose Hide My Email, we only ever see the relay address Apple gives us.
• •Your athlete profile — what you tell us during onboarding and in settings: age, sex, height, weight, city, your goal and race, training history, available training days, and how much you want to train.
• •Health and training data — workouts you log by hand, and workouts, heart rate, sleep, HRV and recovery data from any device or service you choose to connect. Nothing is pulled from a provider until you connect it, and disconnecting stops it.
• •Your conversations with Vera — the messages you send, Vera's replies, and voice input if you use the voice coach.
• •Documents you upload — a photo or PDF of a training plan, so Vera can build from it. If you choose to upload a medical certificate or a physiotherapist's note, Vera reads it and keeps a summary of the restrictions with your profile, so your training respects them. Uploading one is always your choice, and you can delete your account to remove it.
• •Check-ins — the short sleep, soreness, stress, illness and injury notes you enter, plus anything Vera records in her long-term notes about how to coach you well.
• •Basic technical data — the information any app or website receives in order to work, such as your device type and approximate region, plus error diagnostics.

We do not collect precise location, we do not use advertising trackers, and we do not build advertising profiles.

We use your data to run the service you asked for:

• •To coach you — building and adapting your training plan, answering you in chat, and producing your Journey and Analytics. Legal basis: performance of our contract with you.
• •To keep the service working — authentication, syncing connected devices, fixing faults, and preventing abuse. Legal basis: our legitimate interests in operating a secure, working product.
• •To handle health data specifically — heart rate, sleep, HRV, illness and injury notes are special-category data under GDPR Article 9. We process them on the basis of your explicit consent, given when you connect a device or enter the information. You can withdraw that consent at any time by disconnecting the device, deleting the entries, or deleting your account.
• •To meet legal obligations — where a law requires it.

We do not sell your personal data, and we do not share it with advertisers. We do not use your data to train third-party AI models.

We use a small number of processors that handle data strictly on our instructions:

• •Supabase — database, authentication and hosting for your account and training data.
• •Anthropic — the AI model behind Vera's coaching. The context needed to answer you is sent for that purpose. Anthropic does not use it to train their models.
• •ElevenLabs — used only if you use the voice coach, to turn speech into text and text into speech.
• •Netlify — serves the web app.
• •Device and service providers you connect yourself — such as Polar, Suunto, COROS, Whoop or Oura. Data flows from them to us only after you authorise it, and under their own privacy terms.
• •Google Calendar — only if you connect it: with your authorisation we write your planned training sessions into your own calendar and update them when your plan changes. We only ever read back or modify events VERA itself created, and disconnecting stops it.

Some of these providers operate outside the European Economic Area. Where data is transferred outside the EEA, it is done under the European Commission's Standard Contractual Clauses or an equivalent safeguard.

We keep your account and training data for as long as your account exists, because a coaching history is the thing that makes the coaching good. If you delete your account, we delete it.

Backups are retained for a short period and then overwritten in the normal course of operating the service.

Data is encrypted in transit. Access to your rows in our database is restricted to your own account by row-level security, not just by application code.

Access tokens for connected devices are encrypted at rest with AES-256-GCM, using a key held only in our server environment and never stored in the database — so a copy of the database on its own does not expose your Polar or Suunto account.

If you are in the EU or UK, you have the right to access your data, correct it, delete it, receive a portable copy, object to or restrict processing, and withdraw consent at any time.

You can delete your account and everything in it yourself, at any time, from Settings ▸ Delete account inside the app. It is immediate and permanent — profile, training plans, chat history, uploads and device connections. You can also download a copy of your data from Settings ▸ Download my data.

For anything else, email samuel.boehm2@gmail.com and we will respond within 30 days. You also have the right to complain to your national data protection authority.

If you turn on training reminders, they are scheduled and delivered by your phone itself. We do not operate a push server for them, and nothing about your plan leaves your device in order to send them.

VERA is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

VERA is a training tool, not a medical device or a healthcare provider. Nothing it says is medical advice or a diagnosis. If something hurts, or you are unsure whether you should be training, talk to a doctor or a physiotherapist.

If we change how we handle your data in a way that matters, we will update this page and, where the change is significant, tell you in the app before it takes effect.