Privacy Policy

1. Scope and Responsibility

Virelo Application Systems LLC is responsible for personal information under its control. This Policy applies to information processed through the Services. It does not govern the independent privacy practices of Apple, Base44, Stripe, or other third parties whose services you choose to use.

Virelo is a consumer planning and lifestyle application. It is not a healthcare provider, health plan, medical device, emergency service, or substitute for professional medical or mental health care. Information stored in Virelo may not be protected by the Health Insurance Portability and Accountability Act ("HIPAA") unless a separate legal relationship expressly provides otherwise.

2. Information We Collect

Account and contact information

We collect information you provide when creating or managing an account, such as your name, email address, login credentials or authentication identifiers, communication preferences, and support correspondence.

Content you create

We collect content you choose to enter into Virelo, including tasks, habits, routines, meals, grocery items, workouts, goals, milestones, plans, notes, journal entries, priorities, completion records, and other information used to organize your workspace.

Private wellness and Flow information

If you use Flow or related features, we collect the private self-check information you choose to provide, which may include mood, stress, rest, productivity, reflections, and activity within Flow. These entries may be sensitive personal information. They are used to provide and adapt private guidance and are not medical diagnoses.

Information used for Virelo Signals

If you use Virelo Signals, we process connection invitations, accepted connections, the progress summary you deliberately select, an optional note, the date and time of sharing, and responses such as Cheer, Celebrate, or Encourage. Sharing is never automatic. Additional details appear in Section 4.

Usage, device, and website information

We and our service providers may collect information needed to operate, secure, and understand the Services, such as IP address, device and browser type, operating system, app version, timestamps, session and interaction metadata, crash information, diagnostic logs, referral information, and approximate location inferred from an IP address. We may use cookies or similar technologies for essential functionality, security, preferences, and permitted analytics.

Payment and subscription information

Subscription and payment transactions may be processed by Apple, Stripe, or another payment provider. We may receive transaction identifiers, subscription status, renewal or cancellation information, and limited billing details. We do not store full payment card numbers.

3. Apple Health and HealthKit

As of the date of this Policy, Virelo does not access data from the Apple Health app or HealthKit. If an Apple Health integration becomes available, it will be optional. Before enabling the integration, we will update this Policy to identify the specific Apple Health data types Virelo requests and will provide a clear explanation at the point of permission.

When available, Virelo will request access only after you choose to connect Apple Health and only for the individual data types shown in Apple's authorization interface. You may approve or deny each supported data type. You may later change or revoke access through the Health app or iOS privacy settings. Revoking access stops future access but may not automatically delete information previously imported into Virelo; you may request deletion as described in Section 13.

Authorized Apple Health data will be used only to provide the health, fitness, activity, planning, trend, or user-requested functionality described when permission is requested. Depending on how the future feature is designed, selected data may be processed on your device or transmitted to Virelo's service infrastructure. We will explain that processing before the integration is enabled.

We will not use Apple Health or HealthKit data for advertising, marketing, sale, use-based data mining, or profiling unrelated to the health, fitness, activity, or planning feature you requested. We will not sell Apple Health data or disclose it to data brokers. We will disclose it only at your direction or to service providers strictly necessary to deliver the requested feature, where permitted by Apple's requirements and applicable law.

Apple Health data will never become a Virelo Signal automatically. If a future feature allows a safe health or activity summary to be shared, you will separately select the summary, review what the connection will see, and confirm the disclosure before it is sent.

4. Virelo Signals and User-Directed Sharing

Virelo Signals is a private, invitation-based accountability feature. Connections must be invited and mutually accepted. There is no public directory, public feed, follower count, ranking, hashtag system, or unsolicited discovery.

You decide whether to share a Signal. Before sending it, you select the accomplishment or progress summary, review what will be visible, may add a short note, and confirm. Depending on the available feature options, a Signal may summarize selected goal movement, a milestone, habit or routine consistency, a completed workout or workout consistency, completion of intended tasks for the day, or another expressly selected progress summary.

A connection receives only the summary you confirmed. Virelo does not give that connection access to the underlying private task, habit, routine, goal, workout, note, Flow entry, analytics, email address, or full completion history merely because a Signal was shared.

Removing or blocking a connection revokes that person's access through Virelo going forward. It cannot retrieve information the recipient already viewed, copied, exported, photographed, or captured in a screenshot. Share only information you are comfortable disclosing to the selected person, and avoid placing sensitive medical or emergency information in an optional note.

5. Derived Indicators and Personalized Guidance

Virelo may use information you record to calculate or organize private features such as analytics signals, consistency patterns, recent activity, approaching or overdue work, workload concentration, priority-weighted task load, Focus Horizon, Flow guidance, or Improvement Queues used by the Virelo Assistant.

These features interpret recorded activity and user-provided information; they do not interpret your worth, character, health, or effort. Focus Horizon projects recorded workload and does not predict your future. Flow check-ins are private self-reports and are not diagnoses. Assistant guidance is optional, and you decide whether to accept, modify, postpone, or dismiss it.

Virelo does not use these features to make decisions that produce legal or similarly significant effects concerning you.

6. How We Use Information

We may use personal information to:

• create, authenticate, maintain, and secure your account;
• provide, personalize, and improve the Services and your workspace;
• process user-directed actions, including Virelo Signals;
• calculate private indicators and present user-controlled guidance;
• manage subscriptions, free trials, billing status, and transactions;
• send account, security, service, support, and transactional communications;
• send marketing communications where permitted and honor opt-out requests;
• investigate errors, prevent fraud or abuse, and protect the Services;
• analyze performance and aggregate usage patterns; and
• comply with law and enforce our agreements.

We may create aggregated or de-identified information that is not reasonably capable of identifying you and use it for research, service improvement, reporting, and business operations. We will not attempt to re-identify information maintained as de-identified except as permitted by law to test our de-identification methods.

7. How We Disclose Information

We may disclose personal information in the following circumstances:

• At your direction. This includes a Virelo Signal you deliberately send to an accepted connection or another export or integration you request.
• Service providers. We may use providers for hosting, Base44 infrastructure, authentication, payment processing, email delivery, customer support, analytics, security, diagnostics, and related operational services. They may process information only for the services they provide to us and subject to applicable contractual and legal obligations.
• Legal and safety purposes. We may disclose information when we reasonably believe it is required by law, legal process, or a valid government request, or when necessary to protect rights, safety, security, or the integrity of the Services.
• Business transactions. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law and appropriate notice or consent where required.

8. No Sale of Personal or Health Information

We do not sell personal information, Apple Health data, consumer health data, or private Virelo content to data brokers or other third parties. We do not use health, fitness, mood, stress, rest, productivity, or other sensitive wellness information for targeted or behavioral advertising.

If our practices materially change, we will update this Policy and obtain any consent or authorization required by law before applying a new use to previously collected sensitive information.

9. Data Storage and Infrastructure

Virelo uses Base44 and other service providers for cloud infrastructure, authentication, storage, and backend services. Information may be processed in the United States, Canada, or other locations in which we or our providers operate. Those locations may have privacy laws different from the laws where you live. Where required, we use appropriate measures for cross-border processing and transfers.

Our use of a service provider does not give that provider permission to use your personal information for its own unrelated purposes. Providers remain subject to their own independent terms and privacy obligations.

10. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, fulfill the purposes described in this Policy, resolve disputes, enforce agreements, meet security and fraud-prevention needs, and comply with legal, tax, accounting, or regulatory obligations.

Retention periods vary according to the type and sensitivity of the information, the reason it was collected, and applicable requirements. When information is no longer needed, we take reasonable steps to delete, de-identify, or securely dispose of it. Deletion from backups may occur over a limited period through normal backup rotation, unless longer retention is legally required.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information in light of its sensitivity. These measures may include access controls, authentication protections, service-provider review, monitoring, and encryption where appropriate.

No method of transmission, storage, or security is completely reliable, and we cannot guarantee absolute security. You are responsible for using a strong password, protecting access to your device and account, and notifying us if you suspect unauthorized access.

12. Your Choices

• Account information. You may update certain profile and account details through the App.
• Apple Health permissions. If the integration becomes available, you may manage individual permissions in the Health app or iOS settings.
• Virelo Signals. You control whether to share, what safe summary to disclose, which accepted connection receives it, and whether to remove or block a connection.
• Marketing email. You may unsubscribe from marketing messages using the link in an email. You will continue receiving necessary account, billing, security, and service communications.
• Cookies. Browser settings may allow you to control cookies. Disabling essential technologies may affect the website.

13. Privacy Rights and Requests

Depending on where you live and subject to legal exceptions, you may have the right to request access to personal information we hold about you; learn how it was collected, used, or disclosed; receive a portable copy; correct inaccurate information; withdraw consent; delete information; restrict or object to certain processing; or appeal a decision concerning a privacy request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

Account deletion is available in the App's account settings where supported. You may also submit a request by emailing info@vireloapps.com. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct verification with you.

Deleting your account or a Virelo Signal does not delete copies or screenshots previously made by a recipient, information you directed us to disclose outside Virelo, or records we must retain for legal, security, transaction, or dispute-resolution purposes.

You may have the right to complain to the privacy or data-protection authority where you live. We encourage you to contact us first so we can address your concern directly.

14. Children’s Privacy

The Services are not directed to people under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to Virelo, contact us so we can review and take appropriate action.

15. Third-Party Services and Links

The Services may link to or integrate with third-party services. Those services operate under their own terms and privacy policies. Review their practices before providing information or enabling an integration. Apple independently controls the Health app and HealthKit permission interface; Stripe and Apple independently process payments where applicable; and Base44 provides Virelo's underlying application infrastructure.

16. Changes to This Policy

We may update this Privacy Policy as Virelo changes or as required by law. We will revise the "Last updated" date and provide additional notice in the App, on the website, or by email when a change is material. Where required, we will request consent before using sensitive information for a materially different purpose.

Before Virelo enables Apple Health access, this Policy will be updated to list the specific Apple Health data types requested and the final processing and retention practices for that integration.

17. Contact and Privacy Questions

Contact us with questions, privacy requests, complaints, or concerns about this Policy or Virelo's handling of personal information.