Privacy Policy — Velocity

Effective date: May 13, 2026

Last updated: May 13, 2026

This Privacy Policy describes how Moncef Samai ("we," "us," or "our"), operating the Velocity mobile application ("Velocity" or "the App"), collects, uses, and discloses information about you.

Contact: contact@aivelo.app

1. Information We Collect

1.1 Account Information

Email address (used for authentication)
Display name

1.2 Athlete Profile

Date of birth
Gender
Primary and secondary race events (e.g., 800m, 5K)
Years of training experience
Fitness tier and current training phase
Weekly volume and long-run targets

1.3 Health and Fitness Data

Personal best times and paces by event
Pace zones and vVO2max reference pace
Heart rate (average and max BPM, if logged)
Rate of perceived exertion (RPE, 1–10 scale)
Training session data: distances, splits, rest intervals, notes

1.4 Biomechanics Video Data

When you use the Form Tracker feature:

Short video clips (~3–4 seconds each) are captured using your device camera
Clips are transmitted over HTTPS to our analysis server
The server extracts pose landmarks and computes biomechanics scores
Processed numerical results (scores, joint angles, cadence) are stored in your account
Video clips may be retained for a period of time to help us improve analysis quality and guide product development. Retained clips are stored securely and are not shared with third parties or used for any purpose other than improving the service.

1.5 Payment Information

Your Stripe customer ID is stored in our database
Your subscription tier (free, Jogger, BigDawg, or Coach) is stored in your profile
Card numbers, CVV, and full payment details are handled entirely by Stripe and are never seen or stored by us

1.6 Analytics (opt-in)

If you enable "Share Analytic Data" in Privacy & Data settings, we collect anonymized session metadata to improve AI recommendations. This toggle is off by default.

1.7 Technical Data

Device type and OS version (used for error logging and crash diagnostics)
App version

2. How We Use Your Information

Purpose	Basis
Provide core features: training plans, session logging, form analysis	Contract
Generate AI-powered training plans and coaching cues	Contract
Process payments and manage subscriptions	Contract
Allow coach access to your data (only if you enable it)	Consent
Improve AI models with aggregated, anonymized data	Consent (opt-in toggle)
Improve analysis accuracy and guide product development using retained video clips	Legitimate interest
Debug errors and maintain service reliability	Legitimate interest
Notify you of material changes to this policy	Legitimate interest

We do not use your data for advertising or third-party marketing.

3. Third-Party Services

We share data with these processors only to the extent required to provide the service:

Processor	Purpose	Data shared
Supabase	Database, authentication, storage	All stored account and training data
Stripe	Payment processing	Email, subscription tier, Stripe customer ID
Anthropic	AI coaching responses	Prompt context (profile, session data)

Supabase infrastructure is hosted in the United States (AWS us-east-1). By using Velocity, you acknowledge that your data may be processed in the United States.

We do not sell your personal information.

4. Camera Permission

Velocity requests camera access solely to record running clips for biomechanics analysis. The camera activates only when you explicitly start a recording session. It is never accessed in the background.

5. Data Retention

Data	Retention
Account and profile	Until account deletion
Training sessions and plans	Until account deletion
Biomechanics results (numerical)	Until account deletion
Raw video clips	Retained for a limited period to support quality improvement and product development; deleted upon account deletion request
Stripe customer ID	Deleted from our database on account deletion; billing history retained by Stripe per their policy
Anonymized analytics (if opted in)	May be retained in aggregate after deletion

6. Your Rights

All users

Access — request a copy of your data: contact@aivelo.app
Correction — update your profile directly in the app
Deletion — go to Settings → Danger Zone → Delete Account to permanently erase all your data
Deactivation — temporarily deactivate your account in Settings → Danger Zone

Canadian residents (PIPEDA)

You have the right to access your personal information, challenge its accuracy, and withdraw consent for non-essential processing. Contact us to exercise these rights. We respond within 30 days.

EU / EEA residents (GDPR)

You have rights of access, rectification, erasure, restriction, portability, and objection. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. You may lodge a complaint with your local supervisory authority.

California residents (CCPA)

You have the right to know what personal information we hold, to request deletion, and to opt out of sale. We do not sell personal information.

7. Children

Velocity is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will delete it promptly.

8. Security

All data in transit is encrypted via HTTPS/TLS
Row-level security policies in Supabase ensure each user can only access their own data
Stripe is PCI-DSS compliant; we never handle raw card data
Video clips are transmitted over HTTPS and stored securely; retained clips are accessible only to us and not shared with third parties

No internet transmission is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We will update the "Last updated" date for any changes. For material changes, we will provide in-app notice. Continued use after the effective date constitutes acceptance.

10. Contact

Moncef Samai

Email: contact@aivelo.app

We respond to all requests within 30 days.

This policy is available at: https://aivelo.app/privacy