VERITAS Privacy Policy
This policy explains how the VERITAS app ("VERITAS" or "the app") handles information. VERITAS is published by Global Intelligence Laboratory LLC ("GIL", "we", "us"). It applies to the iOS and Android versions of the app and to this website. VERITAS is not affiliated with the U.S. Department of Veterans Affairs.
1. Information stored on your device
VERITAS stores what you put into it: conditions you track, symptom logs, notes, timeline events, imported records (such as a VA Blue Button report or private medical records), evidence files, and exports you generate. All of it is kept in the app's private storage on your device.
Sensitive fields are encrypted at rest, and the vault key is protected by your device's secure storage (the iOS Keychain or Android Keystore). GIL does not operate any server for VERITAS data and has no access to it.
2. On-device processing
Importing records, reading scanned documents (text recognition) and, on supported iPhones, suggesting conditions with Apple's on-device AI model all happen on your device. These features do not send your records to GIL or to any cloud AI service. AI suggestions are never saved without your confirmation.
3. Optional permissions
- Apple Health / Health Connect: if you turn it on, VERITAS reads daily summaries (sleep, steps, resting heart rate and heart-rate variability) to show alongside your logs. It stores only those summaries, on your device, and never writes health data.
- Face ID / Touch ID / biometrics: used only to unlock your local vault. Biometric data is handled by your device; VERITAS never sees it.
- Notifications: local reminders to log symptoms, scheduled on your device.
- Files and photos: accessed only when you choose a file to import.
You can revoke any permission at any time in your device settings.
4. Sharing and exports
Exports such as PDF summaries, condition packets and statements are created on your device. They leave your device only when you share them yourself through your device's share sheet, to the person or service you choose. Backups are files you control. VERITAS does not upload anything automatically.
5. What we do not do
- No accounts, sign-up or VERITAS server.
- No analytics, advertising, crash-reporting or tracking tools.
- No selling, renting or "sharing" of personal information as those terms are used in privacy laws.
- No legal or medical decisions. VERITAS organizes information and does not provide legal or medical advice.
6. Beta program and this website
If you ask to join the VERITAS beta, by email or with the form on this site, we receive your name, email address, the device you plan to test on, and anything you choose to write. We use it only to run the beta: to send you an invite, follow up about your testing, and reply to your feedback. We do not add you to a marketing list or share it with anyone except as needed to send a TestFlight or test-build invitation through Apple or Google.
Form submissions are processed by Cloudflare, which hosts this website, and delivered to our inbox. We delete beta details when the beta ends or when you ask, whichever comes first. This website does not use cookies, analytics or tracking scripts. Cloudflare, as our hosting provider, processes standard request data such as IP addresses to deliver and protect the site.
7. Keeping and deleting your data
Your data stays on your device until you delete it. Settings → Delete All Data erases the vault and every imported file, and uninstalling VERITAS removes it as well. Because we never have a copy, we cannot recover deleted data. Keep your own backup if you want one.
8. Security
VERITAS encrypts sensitive fields at rest, keeps its key in your device's secure storage, and supports biometric unlock and an auto-lock timer. This website is served over HTTPS. No method of storage is perfectly secure, so protect your device with a passcode.
9. Children
VERITAS is intended for adults and is not directed at children under 13.
10. Your privacy rights
Wherever you live, you can ask what information we hold about you, or ask us to correct or delete it, by emailing support@gil.consulting. We will respond within 30 days, or sooner if the law requires, and we will not treat you differently for exercising your rights.
EEA, UK and Switzerland: GIL is the controller of the limited personal data described here. We rely on performance of a contract (providing purchases you make), legitimate interests (preventing fraud, running the beta, replying to you) and legal obligation (keeping required transaction records). You have the rights to access, rectify, erase, restrict, object and port your data, and to complain to your local data protection authority. GIL is based in the United States; transfers there are protected by the safeguards the law requires, such as Standard Contractual Clauses.
California and other US states: we do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information. You can request to know, correct or delete your personal information by emailing us. Because VERITAS does not track you across sites or apps, Do Not Track and Global Privacy Control signals do not change how it behaves; we would honor them in any case.
11. Future features
If we add optional features that send data off your device, such as sharing a case with an organization you choose, this policy will be updated first, the feature will be opt-in, and the app will show what will be shared before anything leaves your device.
12. Changes to this policy
If we change this policy, we will post the new version on this page and update the date above. If a change significantly affects how your information is handled, we will also tell you in the app before it takes effect.
13. Contact
Global Intelligence Laboratory LLC
Email: support@gil.consulting