Updated October 4, 2026 · AuraByte Studios
Which version this notice describes
The detailed features, file-protection commitments, data controls, and StoreKit subscription description below apply to the native Swift iOS 1.0.3 update once it is available. The currently distributed iOS 1.0.2 stores cycle records on the device and its inspected source contains no developer health-data upload, advertising, analytics, crash-reporting, or purchase SDK. Do not assume that 1.0.2 has the new update's backup exclusion, complete file protection, Premium features, or identical export and deletion controls. Optional email support is handled as described below for either version.
Not medical advice
Vellum provides calendar-based cycle estimates for personal awareness. It is not medical advice, does not diagnose or treat a condition, does not confirm ovulation, and must not be used to prevent or achieve pregnancy. Consult a qualified healthcare professional before making medical or contraceptive decisions.
What we collect
Vellum has no accounts, sign-in, developer-operated health-data cloud sync, advertising SDK, general app-usage analytics SDK, crash-reporting service, or server-side health telemetry. User-entered cycle information, symptoms, notes, report contents, advertising identifiers, app-usage events, and StoreKit transaction state are not sent to AuraByte Studios.
Apple processes App Store purchases and makes signed subscription transaction status available to StoreKit on your device. Vellum uses that local status to unlock Premium. Vellum does not operate a purchase server, integrate a third-party subscription SDK, or receive your Apple Account credentials or payment-card details. Apple's processing is governed by Apple's privacy policy and App Store terms.
What stays on your device
Everything you log — cycles, day-by-day flow level, symptoms, mood (1–5), energy (1–5), sleep hours, sexual activity type, discharge type, basal body temperature, medications, and notes — is stored in a SQLite database file (vellum.db) inside the app's sandbox on your device. Your profile row (average cycle length, period length, goal) is stored in that database. App preferences, including temperature unit, language, App Lock, discreet mode, and reminders, are stored separately in iOS UserDefaults inside the app's sandbox. Uninstalling the app removes this app-owned local data.
Vellum does not add app-managed encryption to the SQLite database. iOS provides the operating-system sandbox and file protection described below. Optional App Lock gates the interface using operating-system authentication; it does not encrypt the database, and Vellum never receives biometric templates or the device passcode.
The health database, associated SQLite files, and their containing directory are marked as excluded from automatic operating-system cloud or device backup. Vellum verifies that exclusion before opening the database and fails closed if it cannot apply it. On physical iOS devices, Vellum configures these files with complete file protection; iOS controls access while the device is locked. This does not cover copies you deliberately export to Files, a cloud drive, email, or another app.
Ordinary app preferences may still be included in operating-system backups. Keep a manual JSON backup if you want to recover your health records after losing your device or uninstalling Vellum. Vellum cannot recover records that you have deleted or lost without a usable backup.
Apple Health
Not used. Vellum does not read from or write to Apple Health. There is no HealthKit entitlement and no HealthKit usage description in the app.
Permissions we request
Face ID / Touch ID / device passcode: to lock the app so your cycle data isn't visible if someone else picks up your device. Authentication is handled entirely by iOS; Vellum receives only a success/failure result and never receives your face, fingerprint template, or device passcode.
Notifications: requested only if you turn on a reminder. Period, estimated higher-fertility-window, estimated ovulation, and daily-check-in reminders are scheduled locally on your device. There is no push server and no push token registered.
Vellum does not ask for your camera, microphone, photos, contacts, calendar, location, Apple Health, motion data, or Bluetooth.
Network usage
Vellum does not upload cycle entries, symptoms, notes, generated reports, app-usage events, advertising identifiers, or subscription transaction state to AuraByte Studios. Apple's StoreKit framework connects to the App Store to load products, process a purchase, restore purchases, and verify signed transactions on the device. Apple handles that connection under its own privacy policy and App Store terms.
The app also contains predefined links to this policy, terms, and medical sources. When you choose one, the operating system opens the public URL; Vellum does not append user-entered health data to it. The destination receives ordinary web-request information under its own privacy policy.
This website
Opening this page sends ordinary request information, including your IP address, to the website hosting provider, Vercel. This Vellum page serves its fonts and icons locally and does not include advertising, analytics, or session-replay scripts. Other websites linked from this page have their own policies.
App Store privacy disclosure
Vellum and the code embedded in the app do not collect data from the app. StoreKit payment details are entered and processed by Apple outside Vellum, and AuraByte Studios does not receive them. Apple may separately process App Store account, purchase, device, and diagnostic information under Apple's privacy policy.
Support correspondence
If you choose to email support, AuraByte Studios receives your email address and the subject, message, attachments, and technical details you choose to include. We use that information only to answer the request, investigate the reported issue, protect the service, and meet applicable legal obligations. Support email is separate from Vellum: the app does not automatically attach or transmit your cycle records, notes, reports, purchase state, device logs, or identifiers.
The published support address is a Gmail mailbox. Google processes email routing and mailbox data under its own terms and privacy policy. Support correspondence is separate from the app’s local health records. Retention depends on the time needed to handle your request and any justified follow-up, security, or legal purposes. You can contact us to request deletion; we will explain any information we need to retain.
Please do not email a full health backup or unredacted report. Start with your app version, iOS version, and a description of the problem. If a screenshot helps, hide names and sensitive entries first. Do not send passwords, payment-card details, or Apple Account credentials.
Use the support address below to request access, correction, or deletion of your support correspondence, or to make a privacy complaint. Identify the message or issue without sending your health history again. We may ask for proportionate information to verify that the correspondence belongs to you. Any applicable legal rights, response deadlines, and right to contact your local privacy authority remain unchanged.
Export, import, and delete
JSON export contains your cycle profile, cycle records, and daily entries. CSV export contains daily log rows. A PDF report contains only the date range and details you select. Preferences and subscription state are not included. Exports are written to temporary protected storage, shown in the system share sheet, and Vellum removes its temporary copy after the share flow. Import validates a selected Vellum JSON backup before replacing the local cycle profile, cycles, and daily entries; preferences and subscription state remain unchanged. Delete All removes the local profile, cycles, daily logs, settings, scheduled Vellum reminders, temporary exports, and app-created secure-storage material. The empty database container may remain so the app can continue running. Delete All cannot remove copies you previously exported to Files, a cloud drive, email, or another app.
JSON, CSV, and PDF exports are not password-protected or separately encrypted by Vellum. Anyone who can access an exported file may be able to read it. Choose a destination you trust and review a PDF before sharing: detailed entries can contain sexual activity, discharge, sleep, temperature, and medications; private notes are selected separately. Delete All cannot remove copies stored elsewhere or guarantee forensic erasure of previously stored data.
Premium subscriptions
Premium purchase availability depends on your installed version. For the native 1.0.3 update, Apple handles App Store billing and shows the selected localized price, billing period, and any eligible offer before confirmation. Weekly has no introductory trial; Monthly and Yearly have a 14-day introductory offer only where configured and where you are eligible. Subscriptions renew unless you cancel. Deleting Vellum or its records does not cancel a subscription. See Vellum subscription information, Apple cancellation instructions, and Apple refund-request instructions. Applicable consumer rights remain unchanged.
Law-enforcement requests
Because Vellum stores your cycle data only on your device and AuraByte Studios does not receive it, AuraByte Studios has no copy of your health records to disclose. Apple controls App Store purchase records under its own policies. If you email support, the correspondence is information AuraByte Studios receives and may disclose when legally required.
Children
Vellum is a cycle-tracking app intended for people who menstruate and is not directed at children under 13. The app does not automatically send personal or health data to AuraByte Studios. If a child contacts support by email, that voluntary message may contain personal information; a parent or guardian can request its deletion using the address below.
Contact
Questions, privacy requests, or support-correspondence deletion requests: af6323611@gmail.com. The full policy is also published at this page.