Privacy
What Verlow stores, why, who handles it, and how to take it with you or delete it.
Who we are
Verlow is run by [TO CONFIRM: legal name], [TO CONFIRM: location]. For anything on this page, email christian@goverlow.com.
What you record
Everything below is stored only because you entered it or chose to connect it.
- Your account: your email address, used to sign you in with a one-time code.
- Meals: what you wrote, the meal label, the time, and any photo you added.
- Check-ins: your answers to the daily questions and any note.
- Bowel observations: your answers and any note, if you choose to record them.
- Training: sessions, sets, repetitions, weights, times, distances, effort ratings, notes, and exercises you create.
- Notes you add in Account: for your own reference.
What you can choose to connect
- Intervals.icu: If you connect it, Verlow receives read-only access to your completed activities: type, date, duration, distance and similar details. You sign in on Intervals.icu, not in Verlow, and Verlow is given a token that can only read activities. The token is stored encrypted on our server and never on your phone. You can withdraw it in Verlow or on Intervals.icu. Activities already brought in stay in your record until you delete your account.
- Health Connect (Android only): If you allow it, Verlow reads your daily step totals and sleep duration for the last two weeks, and keeps reading them when you open the app. It reads nothing else and never writes to Health Connect. You can change this in Android’s settings at any time.
What we do not collect
- Your location, contacts, microphone or other apps’ data.
- Your password for anything. Verlow has no passwords, and never sees your Intervals.icu login.
- Advertising identifiers. There are no advertising or tracking scripts on the site or in the app.
How it is used
- To show you your own records and your weekly account.
- To bring in activities and measurements from the services you connected.
- To reply to you about access, problems or questions.
- To find and fix faults. We look at counts and error reports, not at what you wrote, and never at your photos, unless you ask us to help with a specific entry.
In the private beta, your weekly account is worked out by fixed rules and nothing you record is sent to an AI service. Verlow is building an AI companion as the next stage. Before it is switched on, this page will name the service, what information is sent, why it is needed and the control you have over it.
Your records are not sold, not used for advertising, and not shared with anyone except the services below that run Verlow.
Services that handle your data
Verlow is small and relies on a few services to run. Each handles your data only to provide its part.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in and photo storage. Your records and photos live here. | [TO CONFIRM: Supabase region] |
| [TO CONFIRM: hosting provider] | Hosts this website and the browser version of the app. Sees standard request logs. | [TO CONFIRM: hosting region] |
| [TO CONFIRM: email provider] | Sends your sign-in codes. Sees your email address. | [TO CONFIRM: email provider region] |
| Intervals.icu | Only if you connect it. Sends your activities to Verlow. | Intervals.icu’s own terms apply |
Some of these services may store data outside [TO CONFIRM: country]. [TO CONFIRM: cross-border wording from the legal review]
Meal photos
Photos are stored in private storage that only your account can reach. The app shows them to you through links that expire after an hour. Deleting a meal deletes its photo.
Keeping it safe
Every record is tied to your account, and the database refuses to return one account’s records to another. Connection tokens are encrypted. The site sends security headers that stop other sites loading it or running scripts in it. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.
Your controls
- See it: everything you record is shown to you in the app.
- Correct it: change today’s check-in, and delete meals and activities you logged.
- Export it: Account, then Export my data. You get one file with everything in your account, except connection tokens, which are left out on purpose.
- Delete it: Account, then Delete my account. This removes your meals and photos, check-ins, bowel observations, training, imported activities and measurements, and your sign-in. It cannot be undone.
- Disconnect: Intervals.icu from Account; Health Connect from Android’s settings.
- Ask us: email christian@goverlow.com to ask what we hold about you, to correct it, or to delete it.
Deleted data can remain in our database provider’s backups for up to [TO CONFIRM: backup period in days] days before it is overwritten.
If you ask for access
If you email to ask for access, we keep your email only to reply and to set up your account. Ask and we will delete it.
Health information
Some of what you record is about your health. It is used only for the purposes on this page. Verlow is not a medical service and your record is not a medical record.
Age
Verlow is for people aged [TO CONFIRM: minimum age] and over.
Changes and complaints
When this page changes, the date at the top changes, and testers are told by email if the change matters. If you are unhappy with how we have handled your information, tell us first at christian@goverlow.com. You can also complain to the Office of the Privacy Commissioner in New Zealand, or to the data protection authority where you live. [TO CONFIRM: complaints wording from the legal review]