Mello · Privacy Policy

Your logs stay with
you and your iCloud.

Mello keeps your gastroparesis data on your device and your own private iCloud. The only time anything leaves is when you choose to generate an AI Tolerance Report. Here is exactly how it works.

Last updated: June 2026 · Effective immediately

The short version
Stored on device + your private iCloud. Your logs sync through Apple CloudKit in your own iCloud account. We run no server that stores them and cannot read them.
The AI Tolerance Report is the one exception. When you tap generate, a summary of your logs is sent over TLS to our API and our AI provider (Anthropic) to write the report, then discarded. Our server keeps only a monthly usage count.
Apple Health weight is optional. With your permission Mello can read your weight and save the weight entries you log; you can revoke access anytime.
We never sell or track you. No advertising, no analytics, no location, no cross-app tracking. Payments are handled by Apple.
1. Who we are

Mello ("the App") is published by Velora Health ("we", "us", "our"). For any privacy question or request, contact customer-care@velorahealth.io.

Mello is a wellness food diary. It is not a medical device and does not diagnose, treat or prescribe diets. Patterns and reports are observations from your own logs; always consult your GI specialist or dietitian.

2. The data in Mello

You can log gastroparesis-related information, all of which is health data:

We also use a small amount of non-health data: an anonymous Apple identifier from Sign in with Apple (used only for the AI report quota) and your subscription status from Apple. We do not collect your email, contacts, photos, location, usage analytics or advertising identifiers.

3. Where your data is stored

Everything you log is stored on your device using Apple's SwiftData and synced through your own private iCloud (Apple CloudKit). This data resides in your personal Apple account; Velora Health cannot access it and operates no backend database that stores your health logs. Your sign-in token is stored in the iOS Keychain.

4. The AI Tolerance Report

When you choose to generate a report, the App sends a compressed summary of your logs for the period (meals by texture, tolerance, GCSI scores, weight trend, medications, flares) over an encrypted TLS connection to our Mello API (Google Cloud Run).

Our API is stateless for your health data: it forwards the summary to Anthropic (Claude), which writes the report and returns it to your device. Your logs and the report are not stored on our servers; the only record kept is a monthly usage count (your account identifier plus the month) to apply the one-report-per-month quota. Anthropic processes the request solely to generate your report and, per its API terms, does not use API data to train its models. Every report carries a "not medical advice" disclaimer.

5. Apple Health (HealthKit)

With your permission, Mello can read your weight from Apple Health and write the weight entries you log in Mello back to Apple Health, so your record stays in one place. This is entirely optional.

In line with Apple's requirements, HealthKit data is used only to provide app functionality. It is never used for advertising or marketing, and never sold or shared. You can revoke access anytime in iOS Settings > Health > Data Access & Devices.

6. Subscriptions & payments

Mello Pro is an auto-renewable subscription sold through Apple's App Store. Apple handles all payment processing; we never receive or store your payment details.

7. Third-party services

We share data only with the providers needed to deliver these features:

Mello contains no third-party analytics, advertising or crash-reporting SDKs.

8. International data transfer

Our API and its usage counter are hosted in the United States. When you generate a report, the summary is processed on US servers (by us and by Anthropic). Your health logs themselves remain in your own iCloud account, governed by Apple.

9. Data retention, deletion & your rights

Your logs live in your own device and iCloud, so you control them: delete entries in the App, or remove the App and its iCloud data to erase everything. You can also delete your account in the App, which removes the only record we hold - your monthly usage counter. Depending on where you live (e.g. GDPR, CCPA) you may have rights to access or delete personal data; contact us and we will help.

10. Children's privacy

Mello is intended for adults managing gastroparesis and is not directed at children under 13. We do not knowingly collect data from children.

11. Changes to this policy

If we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the App.

Questions?
We're happy to help with any request, including data deletion.
customer-care@velorahealth.io ->