Last updated 12 June 2026
The short version: your measurements live on your phone. We don't sell data, we don't run ad SDKs, your employer never sees your individual data, and you can delete everything from inside the app without asking us.
On your device. Temperature and motion series from the ring, your schedule, your phase estimates and any notes you write. This is the bulk of your data and it stays local unless you turn on backup.
On our servers. Your account email, subscription status, device serial for warranty, and crash reports. If you enable encrypted backup, your series too — encrypted with a key derived on your device.
Product analytics. Aggregate, event-level, no third-party SDK, and you can switch it off in Settings without losing any functionality.
When an employer buys Roster Engine, they see unit-level aggregates only — never an individual's phase, sleep or notes, and never anything that could be re-identified from a small team. Contracts prohibit using V3LA outputs for disciplinary or fitness-for-duty decisions. If you leave the organisation, your personal account and data go with you.
Full CSV and JSON export of everything, from Settings, no request needed.
One tap wipes local data and queues server deletion, completed within 30 days.
The product works fully with cloud backup disabled. Nothing is gated behind it.
Off by default. De-identified only, revocable, and never a condition of using V3LA.
Account records are kept while your account is active and for 30 days after deletion. Crash reports are discarded after 90 days. We use a small number of processors — cloud hosting, payment processing, transactional email — each under a data processing agreement, and we'll name them on request.
Depending on where you live you may have rights to access, correct, port or erase your data, and to object to processing. Write to us and we'll act on it; we don't require a formal legal request to do the right thing.
A real person answers. Security researchers should use the security page.
Contact us