Dew · Privacy Policy

Your logs stay with
you and your iCloud.

Dew keeps your Sjogren's data on your device and your own private iCloud. The only time anything leaves is when you choose to generate an AI Visit Brief. This policy explains exactly what, where, and who is involved.

Last updated: June 2026 · Effective immediately

The short version
Stored on device + your private iCloud. Your logs sync through Apple CloudKit in your own iCloud account. We run no server that stores them and cannot read them.
The AI Visit Brief is the one exception. When you tap generate, a compressed summary of your logs is sent over TLS to our API and our AI provider (Anthropic) to write the brief, then discarded. Our server keeps only a monthly usage count.
Weather, Health and camera are optional. Location is used only to fetch humidity; Apple Health sleep is read-only; the blink test runs entirely on your device.
We never sell or track you. No advertising, no analytics, no cross-app tracking, no IDFA. Payments are handled by Apple.
1. Who we are

Dew ("the App", bundle ID com.huyngo.dew) is published by Velora Health ("we", "us", "our"). For any privacy question or request you can reach us at customer-care@velorahealth.io.

Dew is a wellness tracker. It is not a medical device and does not diagnose, treat, cure or prevent Sjogren's syndrome or any other condition. Patterns and the AI brief are observations from your own logs; always consult a qualified clinician.

2. The data in Dew

You can log a range of Sjogren's-related information, all of which is health data:

In addition we use a small amount of non-health data to run accounts and billing: an Apple account identifier from Sign in with Apple (used as your account ID for the Visit Brief), and your subscription status (provided by Apple's App Store; we never see your payment details). We do not collect your email, contacts, photos library, usage analytics or advertising identifiers.

3. Where your data is stored

Everything you log is stored on your device using Apple's SwiftData and synced through your own private iCloud (Apple CloudKit), so it stays available across your Apple devices. This data resides in your personal Apple account; Velora Health cannot access it, and we operate no backend database that stores your health logs. Your sign-in token is stored securely in the iOS Keychain.

4. Sign in with Apple

Generating an AI Visit Brief requires you to Sign in with Apple so our service can verify the request and enforce the monthly limit. We receive only an anonymous Apple identifier and a secure token; we never receive your Apple password, and we do not request or store your email address. The token lives in the iOS Keychain on your device.

5. The AI Rheumatology Visit Brief

When you choose to generate a brief, the App sends a compressed summary of your logs for the selected period (for example ESSPRI values, eye-drop brands and relief, medications, flares, red flags, and any lab values you added) over an encrypted TLS connection to our Dew API (hosted on Google Cloud Run).

Our Dew API is stateless for your health data: it forwards the summary to our AI provider, Anthropic (Claude), which writes the brief and returns it. The brief is sent back to your device, rendered to a PDF locally, and saved in your own storage. Your logs and the brief are not stored on our servers. The only thing our server records is a monthly usage count (your account identifier plus the month) so we can apply the one-brief-per-month quota.

Anthropic processes the request solely to generate your brief and, per its API terms, does not use API data to train its models. Every brief carries a clear "not medical advice" disclaimer.

6. Camera (optional blink test)

Dew includes an optional blink test that uses your camera. The video is processed entirely on your device using Apple's Vision framework; only the resulting count or score is saved to your log. No video or image ever leaves your device, and nothing is uploaded to us or any third party.

7. Location & weather

If you enable it, Dew uses your location once to fetch the local humidity from OpenWeather, because dry air can affect Sjogren's symptoms. Only your approximate coordinates are sent to OpenWeather - never your health data - and the resulting humidity value is stored with your daily log. This feature is entirely optional; if it is turned off, no location data is collected or sent.

8. Apple Health (HealthKit)

With your permission, Dew reads - read-only - your sleep hours from Apple Health to show how rest relates to your symptoms, and writes that value into your daily context on your device and iCloud. Dew never writes to Apple Health.

In line with Apple's requirements, data read from HealthKit is used only to provide app functionality. It is never used for advertising or marketing, and is never sold or shared with third parties. You can revoke access anytime in iOS Settings > Health > Data Access & Devices.

9. Subscriptions & payments

Dew Pro is an auto-renewable subscription sold through Apple's App Store. Apple handles all payment processing; we never receive or store your payment information. Manage or cancel anytime in your Apple ID settings.

10. Third-party services we rely on

We share data only with the providers needed to deliver these features:

Dew contains no third-party analytics, advertising or crash-reporting SDKs.

11. What we do not do

We do not sell your data. We do not show ads or use your data for advertising. We do not track you across other apps or websites, and Dew uses no advertising identifier (IDFA), so no App Tracking Transparency prompt is needed.

12. International data transfer

Our API and its usage counter are hosted in the United States. When you generate a Visit Brief, the summary is processed on servers in the US (by us and by Anthropic). Your health logs themselves remain in your own iCloud account, governed by Apple.

13. Data retention & deletion

Because your logs live in your own device and iCloud, you control them: delete individual entries in the App, or remove the App and its iCloud data to erase everything. The Visit Brief summary is processed transiently and not retained by us.

You can also delete your account from within the App. This removes the only record we hold for you - your monthly usage counter - from our server. You may also email us to request deletion.

14. Your rights

Depending on where you live (for example under GDPR in the EU/UK or CCPA in California), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. We do not sell personal information. To exercise any right, use in-app deletion or contact us at the address below.

15. Children's privacy

Dew is intended for adults managing Sjogren's syndrome and is not directed at children under 13 (or under 16 where required). We do not knowingly collect data from children.

16. Changes to this policy

If we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the App. Continued use after changes constitutes acceptance of the updated policy.

Questions about privacy or your data?
We're happy to help with any request, including data or account deletion.
customer-care@velorahealth.io ->