Series A · circadian performance systems V3LA One — clinical validation underway
Legal

Privacy

Last updated 12 June 2026

The short version: your measurements live on your phone. We don't sell data, we don't run ad SDKs, your employer never sees your individual data, and you can delete everything from inside the app without asking us.

What we collect

On your device. Temperature and motion series from the ring, your schedule, your phase estimates and any notes you write. This is the bulk of your data and it stays local unless you turn on backup.

On our servers. Your account email, subscription status, device serial for warranty, and crash reports. If you enable encrypted backup, your series too — encrypted with a key derived on your device.

Product analytics. Aggregate, event-level, no third-party SDK, and you can switch it off in Settings without losing any functionality.

What we never do

Sell, rent or broker your data — to anyone, in any form.
Show your individual data to an employer, including in enterprise deployments.
Embed advertising or attribution SDKs in the app.
Use your data to train models shared across users without explicit, separate opt-in.
Share data with insurers or credit providers.

Enterprise deployments

When an employer buys Roster Engine, they see unit-level aggregates only — never an individual's phase, sleep or notes, and never anything that could be re-identified from a small team. Contracts prohibit using V3LA outputs for disciplinary or fitness-for-duty decisions. If you leave the organisation, your personal account and data go with you.

Your controls

Export

Full CSV and JSON export of everything, from Settings, no request needed.

Delete

One tap wipes local data and queues server deletion, completed within 30 days.

Backup off

The product works fully with cloud backup disabled. Nothing is gated behind it.

Research opt-in

Off by default. De-identified only, revocable, and never a condition of using V3LA.

Retention, processors and rights

Account records are kept while your account is active and for 30 days after deletion. Crash reports are discarded after 90 days. We use a small number of processors — cloud hosting, payment processing, transactional email — each under a data processing agreement, and we'll name them on request.

Depending on where you live you may have rights to access, correct, port or erase your data, and to object to processing. Write to us and we'll act on it; we don't require a formal legal request to do the right thing.

Privacy questions

A real person answers. Security researchers should use the security page.

Contact us