Privacy Policy

Effective October 14, 2026 · Vetta is made by Samet Birlik, an individual developer in New Jersey, USA · Legal name and postal address available on request: support@joinvetta.app

1. What we collect

Account

• Sign in with Apple: the name and email address Apple shares with us. If you choose "Hide My Email", Apple gives us a relay address instead of your real one.
• Email sign-in: your email address. We send a one-time code to it. We never see or store a password.

Profile

• Your name, your @handle, and a profile photo: a selfie taken with Vetta's camera. Vetta never reads your photo library.
• Your birth year, to confirm you are 13 or older, to decide whether your chat messages are screened (they are if you are under 16; see section 6) and whether your socials can be shown (both people must be 15 or older).
• The social accounts you choose to add to your card (Instagram, TikTok, Snapchat, X, LinkedIn or Strava), up to four. Optional.
• The sports you play, and your device's time zone so your league's days and weeks fall on the right dates.

Workouts you log

• Nothing is typed: a workout is its photo and the day. Its sport reads "Workout", unless Apple Health saw a workout that day, which fills in its sport, minutes and distance (one tap on the review drops it).
• Proof (required): a photo taken with Vetta's in-app camera for every workout, including the second one on a Double day (location data is not saved). The same tap can also take a photo of your face; you can leave it out. A linked Apple Health workout fills in the details and can add a Health badge. Photos from your library cannot be used.
• Whether you allowed the Judge to see your photo in a case (the one-time "Fair play check" at your first post).

Apple Health (only if you turn it on)

• Read-only: your workouts and your daily step count. Nothing else is requested.
• Raw numbers are stored so we can score your week and are readable only by you, except the time and distance of a workout you post while Show my numbers is on. Details in section 5.
• League-mates see your points, including the Steps bonus. With Share my steps on, they also see your step milestones and get one notification a day when you pass the first one (5,000).

League activity

• Leagues you create or join, seasons, standings, streaks, quests, pokes and reactions.
• Your coins: every coin you earn, spend or win, as a ledger. Coins are a virtual currency with no cash value.
• Cases: when a league-mate contests a check-in, the questions the Judge asks, the answers given and the verdict.

Messages

• League chat messages (up to 280 characters), reactions and read receipts.

Reports and blocks

• Who you reported or blocked, the reason you picked and any note you wrote, and which photos you flagged for another look.

Device and usage

• A push notification token, only if you allow notifications.
• Usage events such as "league created", "check-in logged" or "screen opened", with coarse details, your app version and your device model and iOS version. Never health numbers, photos, handles or message text. Details in section 7.
• Crash and performance reports: device model, iOS version, app version, what the app was doing when it crashed, and how fast screens load.

Purchases

• Vetta currently sells nothing: no coin packs and no subscription, so we hold no payment data. Vetta Plus is on for every member during our founding season, at no charge, with at least 14 days’ notice in the app before that ends.
• Purchases may come later. If they do, we will update this policy first and tell you in the app. Apple would handle the payment, and we would receive a receipt with the product and a transaction ID, never your card number.

We do not collect your precise location, your contacts, or anything from your photo library.

2. How we use it

• To run your leagues: score the workouts you prove with a photo, and your steps where your league plays Steps, by the same rules for every member; build the standings, close the week on Sunday and crown a champion.
• To show your check-ins, photos and messages to the members of your leagues, and only to them.
• To add a Verified badge to a check-in when an Apple Health workout backs it up.
• To judge contested check-ins and to screen the chat messages of members under 16 for abuse (and, only while it is on, the narrower check for older members in section 6).
• To send the notifications you asked for: standings, pokes, league-mates' posts, cases, chat mentions, reminders and, if a league-mate shares them, step milestones.
• To act on reports, enforce the community rules and keep the game fair.
• To keep coins honest and to fix bugs and crashes.
• To understand which features are used, so we can improve Vetta.

We do not sell your data and we do not use it for advertising. Vetta contains no ad networks.

3. What your league sees

Only people in the same league see any of this. Vetta has no public profiles and no public feed. If you block someone, neither of you sees the other's content, in every league you share.

Your profile photo is shown to your league-mates. It is stored at a web address that is not listed or searchable anywhere, but anyone who has that exact link can open it.

4. Who we share it with

We share data only with the services Vetta runs on, and only what each one needs. Each of them is bound by its terms with us to protect your data at least as well as this policy does, and none of them may use it for its own purposes.

Vetta sells nothing today, so no payment service receives your data. If that changes, this list changes first.

We may also disclose data if the law requires it, or to protect the safety of a member. If Vetta is ever sold or merged, your data moves with it under this policy.

5. Apple Health

• Vetta reads workouts and step count from Apple Health, and only if you turn it on. It never writes to Apple Health.
• This data is used only for your own game: a Health workout fills in the workout you log (the photo is still needed) and can add the Health badge; steps count toward the Steps quest.
• Your league-mates see points (Steps included) and, if you turn them on, the Health badge and your step milestones. They never see your exact step count.
• Show my numbers is off until you answer it. Vetta asks once, on the review of your first post that Apple Health filled in ("Show time and distance on your posts?", Share or Keep private, nothing pre-selected), and the switch in You › Privacy changes it any time. On, your league-mates see the time and distance Apple Health measured for the workouts you post. Off, they never see a workout's minutes or distance.
• Apple Health data is never sold, never used for advertising or marketing, never used to decide anything about you outside the game, and never shared with any outside AI, analytics or crash-reporting service. When a check-in is contested, the Judge is told only whether a matching Apple Health workout exists: yes or no.
• You can turn Vetta's access off at any time in iOS Settings › Health › Data Access & Devices › Vetta. Vetta keeps working: you log workouts with a photo; steps stop counting.

6. The outside AI

Vetta uses an outside AI, provided by Anthropic (Claude models), for two jobs. We never send it your email, your Health numbers, your coins or your standings. It does not check your photos when you post them.

• Cases. When a league-mate contests a check-in, the Judge receives the facts of the check-in (sport, day, when it was logged), whether an Apple Health workout matched (yes or no, never the minutes or distance), the questions and answers in the case thread, and the accused member's first name for the greeting. The photo is included only if the accused member allowed it: Vetta asks once, at your first post (Fair enough or Not now), and the "Photo checks in cases" switch changes it any time. With Not now your posts look the same and a case on one is judged without the picture. The Judge asks up to three questions in the league thread and rules Cleared, Struck or Not proven. A question left unanswered for 24 hours closes the case as Struck. Verdicts only affect points and the season's strike count. If the AI cannot be read, the case closes as Not proven and nobody loses points.
• Chat screening, for members under 16. Each league chat message from a member under 16 (or who may still be 15, or whose birth year we don't have) is sent as text to decide whether it breaks the community rules. A message that does is hidden and replaced by "Hidden by the Judge". If the AI fails or is unsure, the message stays. Messages from members 16 and older are not sent to the AI and are not screened, unless we turn on a narrower check for them: sexual content, hate slurs and threats only, never swearing or banter. While that check is on, the chat tells them, and their messages are sent to the AI for it. Anyone can report any message and block its author.

Anthropic processes this data on our behalf under its commercial API terms and does not use it to train its models.

7. Analytics and diagnostics

To understand how Vetta is used and to fix problems, we record in-app events — for example that a league was created, a workout was logged or a screen was opened — together with your account's random user ID, your app version and your device model and iOS version. We store these events in our own database and send them to PostHog, Inc. (product analytics, United States), together with a few events our servers record about your leagues, such as a finished season's result. When the app crashes or runs slowly, a technical report with the same user ID is sent to Functional Software, Inc. d/b/a Sentry (United States). These providers process the data only for us.

We never send them your name, email, photos, messages, data from Apple Health, or your location (for a workout Apple Health did not fill in they receive only its sport, most often just "Workout"), and we do not sell or share any data for advertising or track you across other companies' apps or websites.

PostHog keeps analytics events for up to 1 year and Sentry keeps crash reports for up to 90 days; our own copy is covered in section 9. When you delete your account, your analytics events are unlinked from you in our database; events already sent to PostHog keep only your random user ID, which then points to no account, until PostHog's retention period ends. You can ask us to stop analytics for your account, or to delete your events from PostHog, at any time by emailing support@joinvetta.app before you delete your account.

8. Your controls

The switches live in Settings (the gear on the You tab) › Privacy.

• Photo checks in cases — whether the Judge may see your photo if someone opens a case on it. Off means your photo is never sent.
• Health badge — show your league a badge, never a number. Off by default.
• Share my steps — show your leagues your step milestones. Off by default.
• Show my numbers — show the time and distance Apple Health measured on your posts. Off until you choose.
• Show my league history and Show my flame — what your league-mates see on your card. On by default.
• On this phone — a copy of your own posts kept on your phone only, never uploaded. On by default.
• Notifications, Camera, Apple Health — each one can be turned off in iOS Settings; pick which notifications you get in Settings › Notifications.
• Report and block — any member, from the member list, a photo, a chat message or a case. Blocking is mutual. Unblock in Settings › Privacy › Blocked people.
• Remove a check-in — delete your own check-in and its photos.
• Leave a league — from the league page.
• Analytics — email us to stop analytics for your account (section 7).
• Delete account — see section 10.

9. How long we keep it

10. Deleting your account

Open the You tab, tap the gear for Settings, then Account › Delete account, and confirm. It takes effect immediately:

• Your profile, check-ins, Apple Health data, coins, messages, case history, pokes, reactions and blocks are deleted, and your sign-in is removed.
• Reports are kept, because we may still need to act on them: a report you filed is kept without your ID, and a report about you is kept as our moderation record with the username you had. A reported photo is kept for up to 30 days from the report, then deleted.
• Leagues you own pass to the longest-standing member. A league with nobody left in it is deleted.
• Your usage events in our database lose your ID. Events already in PostHog keep only your random user ID, which no longer points to an account, until PostHog's retention period ends (section 7). Photo files still in storage, your profile photo included, are removed by the hourly sweep within 2 days, except a photo kept for a report.
• The copies of your posts kept on your phone are removed.

You can also email support@joinvetta.app from the address on your account and we will delete it for you.

11. Children

Vetta is for people 13 and older. We ask for your birth year right after you sign in. If it shows you are under 13, Vetta stops there and deletes the account at once. If you could still be 12, Vetta waits until January 1 to let you in. If we learn that a child under 13 has an account, we delete it. If you believe that has happened, email us.

Members under 18 need a parent or guardian to agree to the Terms of Use. Chat messages of members under 16 are screened (section 6), and socials show only between members who are both 15 or older.

12. California residents

If you live in California, you have the right to know what personal information we hold about you, to have it deleted, to have it corrected, and not to be treated differently for using those rights. We do not sell your personal information and we do not share it for cross-context advertising, so there is nothing to opt out of. To use these rights, delete your account in the app or email support@joinvetta.app; we will confirm it is you by replying to the email on your account. The categories we collect, why, and who receives them are listed in sections 1, 2, 4 and 7. We do not respond to browser "Do Not Track" signals because Vetta has no web tracking.

13. Users in Turkey (KVKK)

If you live in Turkey, the Law on the Protection of Personal Data (KVKK, No. 6698) also applies. Vetta's maker, named at the top of this page, is the data controller. We use the data in section 1 to run the game you signed up for and to keep it fair and safe, and Apple Health data only if you turn it on. Your data is stored and processed in the United States by the services in section 4.

You may ask whether we process your data, why, and who receives it; have it corrected or deleted; object to a result reached only by automated means, such as a Judge verdict; and claim damages for unlawful processing. Write to support@joinvetta.app; we answer within 30 days. If we don’t answer, or you disagree with our answer, you may complain to the Personal Data Protection Authority (KVKK).

14. Security

Data travels encrypted. Every read and write on our database is checked against who you are and which leagues you are in, so a member can only reach their own leagues. AI keys and other secrets live on our servers, never in the app. No system is perfect; if we learn of a breach that affects you, we will tell you.

15. Changes and contact

If this policy changes in a way that matters, we will say so in the app before it takes effect. Questions, requests or complaints: support@joinvetta.app. Our postal address is available on request by email.