Last updated: May 22, 2026
Gudea is built by VeloVault LLC. We take your privacy seriously. This policy explains what data we collect, why, and what control you have over it. Gudea is a consumer wellness app — it is not a medical device and does not create a HIPAA-covered relationship with you.
Gudea is a consumer wellness and fitness app. It is not a medical device and does not provide medical advice, diagnosis, or treatment. AI-generated meal plans, workouts, recipe suggestions, supplement guidance, calorie and nutrient targets, and coach replies are general wellness information only and may be inaccurate, incomplete, or unsuitable for your individual circumstances.
Always consult a qualified healthcare professional — such as a doctor, registered dietitian, or pharmacist — before changing your diet, supplements, medications, or exercise routine, especially if you have a medical condition, are pregnant or breastfeeding, are recovering from an eating disorder, or take prescription medication. In an emergency, call your local emergency services. Use of Gudea is at your own risk.
Gudea stores your fitness data (workouts, meals, body metrics, schedule, supplements, medications, symptoms, sleep, and AI coach chat history) locally on your device using encrypted local storage. This data never leaves your phone unless you explicitly use a feature that requires it (e.g. AI coach features, cloud backup).
When you use AI coach features — daily report, chat with the coach, supplement or nutrition label photo scanning, workout/meal plan generation, “How am I doing?” — the following are sent to our Firebase Cloud Functions backend, which immediately forwards the request to Anthropic (maker of Claude AI):
Anthropic processes this data and returns a response. Per Anthropic’s commercial API terms, inputs are not used to train their models. Anthropic may retain request logs briefly for abuse prevention. We do not attach names, emails, account IDs, or precise location to these requests. Disable all AI coach processing in Settings → Privacy & Data → AI Coach Processing. When disabled, no data leaves your device for Claude.
If you opt in, we collect anonymous usage statistics through Firebase Analytics: app installs, screen views, session duration, and crash reports. No personal health data is included. Disable anytime in Settings.
Gudea shows ads through Google AdMob to support free access. Ads are non-personalized by default. Opt into personalized ads in Settings, or go Premium to disable AdMob entirely.
Gudea offers an optional Premium subscription that unlocks unlimited AI coaching, progress photos, and removes ads. If you subscribe:
Apart from the account ID, no personal information is shared with RevenueCat.
Premium users can request an AI body-composition estimate by taking a front and side photograph. When you submit the photos:
This feature requires you to be 18+ and is not available if you’ve disabled Body Fat tracking in Settings > Content Sensitivity.
With your permission, Gudea reads metrics from Apple HealthKit (iOS) or Google Health Connect (Android):
Completed workouts can be written back so other fitness apps and your wearable see them. This exchange is directly between your phone and the health platform — never uploaded to our servers except when a relevant metric is included in an AI coach request that you explicitly initiate.
We will never use Apple HealthKit or Google Health Connect data for advertising or marketing purposes, and we will never sell or share HealthKit or Health Connect data with third parties for advertising. Health platform data is only transmitted off-device when you explicitly invoke an AI coach feature that includes a relevant metric in its prompt summary; you can disable that pathway entirely in Settings → Privacy & Data → AI Coach Processing. We do not use HealthKit or Health Connect data to train machine-learning models, and we do not redisclose it to data brokers.
Gudea uses your camera for food and supplement barcode scanning. Barcode numbers go to Open Food Facts (and optionally USDA FoodData Central) with no user identity attached. For label photo scanning (supplement or nutrition facts), the image is sent to Anthropic for extraction — see AI Coach Features above.
With your permission, Gudea uses approximate location for weather-aware recommendations (e.g. air quality alerts). Sent to Open-Meteo; not stored on our servers.
In Settings → Privacy & Data, you can at any time:
We rely on Article 6(1)(a) consent for optional processing (analytics, personalized ads, AI coach), and Article 6(1)(b) performance of contract for essential app function. Health-related entries are Article 9 “special category” data; processed only with your explicit consent, revocable in Settings.
You have rights of access, rectification, erasure, restriction, portability, and objection. In-app Export and Delete buttons satisfy these for on-device data. For other requests, email gudeasupport@gmail.com — we respond within 30 days.
We do not sell or share your personal information for cross-context behavioral advertising. Health data is “sensitive personal information” under CPRA and used only to provide requested services.
Gudea collects Consumer Health Data as defined by Washington’s MHMDA. We collect only the categories listed above, use them only to provide the app, and do not sell them. A plain-language Consumer Health Data Privacy Policy is at /consumer-health-data.html.
Residents of Nevada, Connecticut, Colorado, Virginia, Texas, Oregon, Montana, Delaware, Iowa, New Jersey, New Hampshire, Kentucky, Minnesota, Maryland, Rhode Island, Indiana, and Tennessee have similar rights. Contact gudeasupport@gmail.com with your request.
Gudea is an adult wellness app and requires users to be at least 18 years old. This is enforced by an age gate during onboarding that asks for your date of birth. The app is not directed to children, teens, or anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a minor has used Gudea, contact us to delete the data.
All user data stays on your device until you delete it or uninstall. AI request logs at Anthropic are retained briefly per their terms. Firebase Analytics retains aggregated anonymous events per Google’s default (14 months).
On-device data lives in sandboxed private storage. API traffic uses HTTPS. Cloud Backup (if enabled) is encrypted at rest and in transit. We’ll notify affected users within 72 hours of any confirmed breach.
Cloud Backup uses an anonymous Firebase account ID by default, which is lost on uninstall. To make your backup recoverable across installs, you can optionally link a Google account from Settings > Privacy & Data > “Secure with Google”.
Linking shares the email address and Google account ID of your Google account with Firebase Auth. Gudea uses the email only to identify your account across devices — we do not send you marketing emails unless you explicitly opt in separately, and we never see your Google password, Gmail contents, Drive, or other Google services. The email is retained until you sign out or delete your account.
Sign out any time from Settings. Signing out does not delete your cloud backup — use “Delete all your data” for that.
We’ll update the “Last updated” date and show an in-app notice for material changes. Continued use after a change means acceptance.
Questions, requests, or appeals? Email gudeasupport@gmail.com. We respond within 30 days.
Postal: VeloVault LLC, c/o Northwest Registered Agent Service, Inc., 2501 Chatham Rd Ste N, Springfield, IL 62704-4188