privacy policy
via wellness · effective date: october 16, 2026
who is responsible
via is operated by Gustavo Rojano. This policy covers the via iPhone beta and our website, viawellness.app. For privacy questions or requests, email gus@viawellness.app.
The friends beta is for adults aged 18 and over. via provides general wellness support, not medical diagnosis or treatment.
what via collects
Your account. Sign in with Apple provides an account identifier and the email or private relay address you choose to share. Provisioned email accounts use an email address and password for authentication through Supabase.
What you share and create. Conversations, selected photos, goals, plans, reported activities and preferences; and the coach’s responses, saved memories, Daily Notes and Weekly Readings. This may include sensitive health information you choose to share. You do not have to share health information to discuss general goals.
Apple Health, if you allow it. Supported data includes steps, heart rate, sleep, active energy, exercise time, stand hours, activity summaries and workouts. Summaries and workout information can be stored with your account and used for coaching. Connecting Health is optional. This version does not write to Apple Health.
App operation. Timezone, notification preferences, device push token, app-activity signals, notification interactions and operational logs. Apple may share TestFlight diagnostics and feedback you submit, including screenshots you choose to include.
Our website and support. If you join the beta waitlist, we collect your email to manage the waitlist and contact you about access. Squarespace hosts the website and may process IP addresses, browser and device information, page visits and cookies for website operation and analytics. If you contact us, we receive your message and contact details. Website sign-up does not give Squarespace access to your via coaching history.
how we use it
We use information to secure your account, provide coaching, remember context, build and adjust plans, generate notes and readings, deliver notifications, manage beta access, answer requests and fix problems.
via does not sell your personal information or use Apple Health data for advertising. This beta does not share your health information with studios, practitioners or product advertisers.
The app asks for AI-processing consent before personalized coaching begins. Health access and notifications have separate permission controls.
the services that help us
Supabase provides account authentication, database storage and backend services. via’s main database is hosted in the United States. Operational processing and support can occur in other locations.
Anthropic processes your messages and relevant context through its API to generate coaching, memories, notes and readings. Depending on the feature and your permissions, context may include plans, recent conversations, saved memories, Health-derived summaries and attached photos. Do not share information you do not want processed this way.
Apple provides sign-in, Health permissions, push delivery and TestFlight. Notification text may appear on your lock screen according to via’s preview settings and your iPhone settings.
Squarespace provides the website and its sign-up tools.
These services have their own security and data-handling terms. Information can be processed outside your country, including in the United States. Supabase and Anthropic publish data-processing terms covering confidentiality, security and international transfers. The locations used by a provider can include countries beyond via’s database region.
your controls
In you → data & privacy, you can change Health use, AI-processing consent and notification preferences, or delete your account.
Turning off Health use stops future uploads and use of Health context; it does not automatically erase information already stored. You can also revoke Health access in iOS.
Withdrawing AI-processing consent stops future AI processing and signs you out. Personalized coaching, notes and readings require that processing. Withdrawal is separate from account deletion.
In what via knows about you, you can correct or forget saved memories. Forgetting a memory does not delete the original conversation.
You can adjust quiet hours and notification choices in via, and notification permissions and previews in iOS.
retention and deletion
Account content is kept to provide your history and personalized experience until you delete it through an available control or delete your account.
Use you → data & privacy → delete account and data to delete your account and associated active-service data. Email-only accounts confirm deletion with their password. For Apple-linked accounts, the flow also attempts to revoke Sign in with Apple authorization and explains any additional Apple Settings step needed. Deleting via data does not erase the original records in Apple Health.
Deletion from the active service does not mean every provider copy disappears immediately. Backups and operational records may remain through the provider’s recovery and security retention cycles, or where legally required. Those periods vary by provider and service configuration.
Anthropic’s published standard API policy provides for deletion of inputs and outputs within 30 days, with exceptions for legal obligations, safety enforcement, particular features or a different agreement. Flagged content may be retained longer. This is distinct from the conversation history stored in via.
We retain waitlist and support information for managing beta access and resolving requests. Email us to leave the waitlist or request deletion of those records. Deleting an app account does not automatically remove a separate website waitlist entry or feedback submitted to Apple.
access, correction and questions
You can ask what information we hold, request a copy, correct it, request deletion, withdraw permission, or ask how it has been used. Contact gus@viawellness.app, describe the request and identify the account concerned. We may verify ownership before disclosing or deleting account information.
Your rights and any exceptions depend on applicable law. You can also raise a concern with your local data-protection authority, including Colombia’s Superintendencia de Industria y Comercio.
security and changes
via uses encrypted connections and account access controls. Protected local conversations and attachments are excluded from iCloud device backup by the app. No service can guarantee complete security.
We will update this page when our practices change and identify the effective date. Material changes to purposes or permissions will be communicated as required; publishing this policy does not replace consent requested in the app.