Your health data stays yours.

Who we are

Valeska is a personal health organizer for people living with chronic illness. It is published by PhoenixCKK LLC ("PhoenixCKK," "we," "us"). This policy covers the Valeska app on iPhone, iPad, and Android, and this website.

Most of this policy applies to both apps. Where the apps work differently, the section title starts with iPhone and iPad or Android, and that section applies only to that app.

This policy describes Valeska 1.24 and later on iPhone and iPad, and Valeska 1.5 and later on Android. If you have an older version, please update it (see The old account service).

Our regulatory status

• Valeska is not a medical device. It does not diagnose, treat, cure, or prevent any disease, and it does not give medical advice. Always talk to a qualified clinician.
• PhoenixCKK is not a HIPAA-covered entity and is not a HIPAA "business associate." We are a consumer software company.
• We follow the consumer health privacy laws that do apply to us (see Your rights and Health breach notification).

What we collect

PhoenixCKK does not collect your health records. The app sends us no crash reports, no analytics, and no usage data.

Here is what Valeska keeps on your phone. It stays there, and in any backup or saved copy you choose to make.

• Health information you enter: symptoms, medications and doses, conditions, meals and nutrition, water, mood, cycle data, health readings you type such as blood pressure, blood sugar, weight, and temperature, questions for your doctor, severity ratings, notes, and dates and times.
• Documents you add: photos or scans of insurance cards, IDs, and medical records, plus the text the app reads from them.
• Symptom photos, if you attach a photo to a symptom.
• Profile details: the names you enter and, if you choose to add them, date of birth and gender.
• Voice transcripts, when you use voice input. Valeska never stores the audio. You review the text before anything is saved.
• Health data you choose to bring in: from Apple Health on iPhone and iPad (see Apple Health), or from Health Connect on Android (see Health Connect).
• Lab results and medication records from Apple Health, only if you allow them on iPhone (see Clinical health records).

Reference lookups. When you scan a barcode or search for a food by name, Valeska asks Open Food Facts and USDA FoodData Central. When you add a medication or scan a medicine label, it looks up the name in the NIH drug name list (RxTerms, at clinicaltables.nlm.nih.gov). When you scan a medicine's barcode, it looks up the code with the FDA (openFDA). To check for interactions, it sends the names of two of your medicines, or a medicine and a food, to the FDA (openFDA drug labels, which come from DailyMed). These checks can run on their own when you have medicines in Valeska, for example when you open your medication list. Each lookup sends only the barcode, food name, or drug names needed, never anything that identifies you.

Each app also uses a few services from Apple or Google. They are described in the iPhone and iPad and Android sections below.

If you email us, we get your email address and whatever you choose to write. We use it only to answer you.

What we do not collect

• Your name, email address, or any account
• Crash reports, analytics, or usage events. Valeska sends us none.
• Biometric data, fingerprints, or facial recognition data
• Your precise location
• Your contacts, or photos and files you have not chosen to add
• Cross-app or cross-website tracking
• Advertising identifiers, ad-tracking SDKs, or any data used for advertising

How your information is used

Your information is used on your phone only, to:

• Show your records, patterns, and reminders
• Build Visit Prep summaries you choose to share with your doctor
• Look up the food and medicine information you ask for, and show drug interaction information from public government databases
• On iPhone and iPad, match local weather with your symptom days (see Weather)
• Back up your records the way you choose

We do not use your health data for advertising, marketing, profiling, or data mining. We never sell it, and we never use it to train AI models.

Where your data lives

Valeska has no account and no server. There is no sign-in, no password, and no email address. The app opens straight to your day. Your records stay on your phone, in an encrypted database. PhoenixCKK never receives them, and we don't keep a list of the people who use Valeska.

The reference lookups go straight from your phone to those outside services. They carry only the barcode, food name, or drug names being looked up. They never include your name or the rest of your records. Like any internet request, the service can see your device's internet (IP) address.

Your backup is yours too. On iPhone and iPad it goes to your own iCloud (see iCloud backup). On Android, Valeska does not back up on its own. A backup leaves your phone only when you use Save a copy and choose where to put it (see Save a copy and Google Block Store). Either way, it is locked on your phone first, and only you can open it with your recovery code.

Who has access

Your health data is private to you.

• PhoenixCKK has no copy of your records, so we can't read, share, or sell them.
• We do not sell, rent, or share your data with anyone, including insurance companies, employers, data brokers, or marketers.
• We do not use your data to train AI models.
• Caregiver sharing has ended. No one else can see your records in Valeska. When you share a Visit Prep summary, an export, or a saved copy, it goes only where you send it.
• On Android, Google ML Kit receives the diagnostic and usage data described under Google ML Kit. Google states that it is encrypted in transit and is not shared with third parties.

Dependent profiles

You can keep a profile for someone you care for, such as a child or a parent. You create it, and you enter and control everything in it.

• The app does not collect anything directly from the person in the profile.
• Dependent profiles stay on your phone, and in your backup or saved copies, like the rest of your records.
• Deleting a profile, or erasing everything on this phone, removes its data from this phone.

Payments

Valeska is free for 7 days. After that, a one-time purchase unlocks it for good. There is no subscription. We never see or store your card details. Valeska checks your unlock on your phone. If you used Valeska before this change, it stays free for you.

• iPhone and iPad: the purchase goes through the App Store, and Apple handles the payment. Family Sharing lets people in your Apple family use the unlock too. Your unlock is kept in your iCloud Keychain.
• Android: the purchase goes through Google Play, and Google Play handles the payment. Your unlock is kept on your phone and in Google Block Store.

The App Store unlock and the Google Play unlock are separate purchases.

On-device processing

Valeska's AI runs on your phone. It turns voice text and label scans into entries, such as a medication name and dose, and it writes the short summaries that explain your patterns. On iPhone and iPad it uses Apple's on-device AI. On Android it uses Gemini Nano on your phone, through Android AICore. No health data or saved transcripts are sent to an outside AI service. Lab results you import on iPhone are never given to the AI.

• Voice input on iPhone and iPad: your phone turns your voice into text. On phones that can't do this on the device, Apple's speech service turns your voice into text.
• Voice input on Android: Android's system speech provider turns your voice into text, based on your device and provider settings.

On both, Valeska never stores the audio or sends it to PhoenixCKK.

How long we keep it

• On your phone: until you delete an entry or profile. Erase everything on this phone, in Settings, removes all of it right away.
• Your backups and saved copies: in your own iCloud (iPhone and iPad), or wherever you saved a copy, until you delete them. On iPhone and iPad, Valeska keeps the 3 most recent iCloud backups from each device and removes older ones on its own.
• The old account service: deleted on December 1, 2026 (see The old account service).
• Emails you send us: kept only as long as we need to help you.

Our data-deletion page explains how to remove everything.

Your rights

• Access: see your data in the app at any time.
• Export: from Settings as a data file or spreadsheet, as a locked file with Save a copy, or as a Visit Prep summary. Symptom photos are included in an export only when you turn on that option. Exporting is free.
• Correct: edit any entry in the app.
• Delete: delete entries or profiles, or erase everything on this phone from Settings. Delete your backups and saved copies where they are kept. See our data-deletion page.
• Withdraw consent: turn off any permission, such as Apple Health, Health Connect, location, or the microphone, or erase your data at any time.

Because we don't hold your records, you do most of this in the app. For records on the old account service, or any question, email us.

Washington residents (My Health My Data Act): you have the right to know what consumer health data we collect, to ask us to delete it, and to withdraw consent. We do not sell consumer health data.

California residents (CMIA / CCPA): you have the right to know, to delete, and to opt out of any sale of personal information. We do not sell personal information.

Other U.S. states: if you live in a state with a consumer privacy law (for example Virginia, Colorado, Connecticut, Oregon, Texas, or Florida), you may have similar rights to access, correct, delete, and opt out. Contact us and we'll honor them.

iPhone and iPad: Apple Health (HealthKit)

If you turn it on, Valeska reads health data from Apple Health: vitals, activity, sleep, water, the medications and doses you log in the Health app, and cycle data when cycle tracking is on. It uses them to show trends and to add them to Visit Prep summaries you choose to share with your doctor.

If you also allow write access, Valeska saves entries you log yourself to Apple Health: water, period and spotting days, cervical mucus, ovulation tests, sexual activity, and vitals you type in (blood pressure, blood sugar, weight, and temperature). You start every save. You can turn water and vitals saving off in Settings.

Apple Health data stays on your phone and in your own encrypted iCloud backup. It is never sent to us. With Apple Health data, we do not:

• Share it with advertisers, data brokers, or anyone else
• Use it for marketing or advertising
• Sell it
• Use it to train machine learning models

You can turn it off any time in Settings → Apple Health inside Valeska, or remove access in the iPhone Settings app under Privacy & Security → Health → Valeska.

iPhone and iPad: Clinical health records

Apple Health can hold clinical records from providers you have connected. With your separate permission, Valeska on iPhone can read lab results and medication records you choose to import. You can skip this entirely.

• They are stored in the encrypted database on your phone and in your own encrypted iCloud backup, and never sent to us.
• Lab values are never given to the on-device AI.
• They appear in a Visit Prep summary or export only when you make one.
• An imported medication works just like one you add by hand. You can edit or delete it.
• We never use them for advertising or marketing, sell them, share them, or use them to train AI models.

You can remove imported records in the app's Health records settings. Valeska for Android does not ask for Health Connect medical records permissions (see Health Connect).

iPhone and iPad: iCloud backup

Valeska backs up your records to your own iCloud, in a private space that only your Apple Account can reach. The backup holds your records, including dependent profiles, documents, photos, Apple Health data, and lab results. Before anything leaves your phone, Valeska locks it with AES-256 encryption. The key stays on your devices and in your iCloud Keychain, and you get a recovery code to open your backup on a new phone. We never have your key or your code. If you lose both, no one can open your backup. Not even us.

Backup is free and runs on its own while iCloud is on for Valeska. To stop it, open the Settings app, tap your name, tap iCloud, and turn off Valeska. To delete your backup, see our data-deletion page. You can also use Save a copy in Settings → Backup to save your backup as a file and keep it anywhere you like. You need your recovery code to open it.

iCloud Keychain. Valeska keeps a few small items in iCloud Keychain so they follow you to a new iPhone or iPad: an ID that labels your records, your backup key, your free trial dates, and your unlock. Apple encrypts iCloud Keychain end to end.

App settings. Some settings are saved in your own iCloud so they come back on a new device. These include which parts of the app are turned on (this can show, for example, that you use cycle tracking), water and reminder settings, display settings, and your Apple Health choices. They do not include your entries. They use Apple's standard iCloud protection, not Valeska's own encryption.

iPhone and iPad: Weather

Weather insights are on unless you turn them off in Settings. To get local weather, Valeska sends a rough location to Apple Weather through WeatherKit. It uses your phone's reduced-accuracy location if you allow location access, or the zip code in your profile if you don't. Valeska does not save your location. When you enter a zip code, Apple's map service turns it into a place name.

Valeska for Android has no weather feature and asks for no location permission.

iPhone and iPad: Siri and Apple Watch

Siri and Shortcuts. You can ask Siri, or use the Shortcuts app, to log a symptom, add a question for your doctor, or add an appointment. Apple handles what you say to Siri under Apple's own privacy terms. Valeska saves the entry on your phone.

Apple Watch. If you use Valeska on Apple Watch, your iPhone sends your medicines, doses, and some recent entries to your paired watch. What you log on the watch comes back to your iPhone. This goes between your own devices, not to us.

Android: Health Connect

If you turn on Health Connect, Valeska reads heart rate and resting heart rate, blood pressure, blood oxygen, blood glucose, respiratory rate, weight, steps, active calories, and sleep sessions and stages. It uses them to show health trends and to add them to Visit Prep summaries you choose to share with your doctor. You may separately allow up to 90 days of past history.

What Valeska reads is limited. On Android it never reads Water, medical records, reproductive or cycle data, or body temperature from Health Connect. Valeska for Android does not ask for Health Connect medical records permissions.

Writing is a separate choice. Valeska writes to Health Connect only when you turn a write-back setting on. Every write-back setting is off until you turn it on, is set per profile, and is offered only for your own profile, never a dependent's.

• Water write-back, turned on in Water settings. While it is on, Valeska writes the water amounts and times you log.
• Vitals write-back, turned on with the Write vitals to Health Connect switch on the Health screen. While it is on, Valeska writes four kinds of reading you type yourself: blood pressure, blood sugar, weight, and body temperature. Only readings you typed are written, never readings Valeska brought in from somewhere else.

Health Connect data stays on your phone, and in copies you choose to save. With Health Connect data, we do not:

• Share it with anyone
• Use it for marketing or advertising
• Sell it
• Use it to train machine learning models

You can remove read access in the system Health Connect settings. You can turn Water write-back off in Water settings, turn vitals write-back off with the switch on the Health screen, or remove either write permission in the Health Connect app.

Android: Save a copy and Google Block Store

Valeska for Android does not back up to the cloud on its own. Your records live only on your phone. To keep a backup, use Save a copy in Settings → Backup. Valeska makes a locked file that only you can open with your recovery code. You choose where to keep it, and it stays there until you delete it. To bring it back, use Restore from a backup → Open a backup file.

Valeska keeps a few small items in Google Block Store on your phone, so they survive a reinstall: an ID that labels your records, your unlock and free week dates, and the key that opens your saved copies. If your phone offers end-to-end encryption, Google also keeps them in your Google backup, where Google cannot read them. None of this is health data.

Android: Google ML Kit

Valeska for Android uses Google ML Kit on your phone for barcode and document scanning, reading text, identifying and translating languages, and on-device AI. Google states that these tools collect device and app information, identifiers for your user, device, or app install, performance data, settings, input and output sizes, feature events, error codes, and languages, for diagnostics and usage analytics. Barcode scanning also reports a scan session ID, zoom changes, and where possible barcodes appear on the screen.

Google states this data is encrypted in transit and is not shared with third parties. Google's description lists sizes, settings, events, and errors, not scanned images, recognized text, prompts, or AI output. Valeska cannot turn this off.

Outside services

We keep outside services to a minimum. None of them gets your records from us. Valeska works with only these:

• Food lookups: Open Food Facts and USDA FoodData Central.
• Medicine lookups: the National Library of Medicine's RxTerms list (clinicaltables.nlm.nih.gov) and the FDA's openFDA, for drug labels from DailyMed and for medicine barcodes.
• Apple, on iPhone and iPad: iCloud and iCloud Keychain, the App Store, Apple Health, Apple Weather through WeatherKit, Apple's map service, Apple's speech service, and Siri.
• Google, on Android: Google Play, Google Block Store, Health Connect, Google ML Kit, and Android's speech service.
• The old account service, on iPhone and iPad only, for the one-time copy described below, until it is deleted on December 1, 2026.

The old account service

Earlier versions of Valeska had accounts. That ended on October 6, 2026. Records from those accounts were stored with Supabase, hosted in the United States.

• iPhone and iPad: if you used Valeska with an account before, the app copies your records from it to this phone one time. It only reads. It does not change anything on the old service. When the copy finishes, or after a few failed tries, the app forgets your old sign-in and does not contact the old service again. While the option is shown, you can also start the copy yourself in Settings with Bring back records from your old account.
• Android: Valeska 1.5 for Android does not contact the old service at all. Records already on your phone stay there.
• Older versions: Valeska before 1.24 on iPhone and iPad, and before 1.5 on Android, used accounts and the old service. If you still have one of those versions, please update it.
• Deletion: the old service and everything on it are deleted on December 1, 2026. Until then, you can ask us to delete your old account sooner by emailing info@valeska.app.

This website

This website is hosted by Cloudflare. We may use Cloudflare Web Analytics to count page visits. It does not use cookies and does not track you across other sites. Our fonts load from Google Fonts, so your browser asks Google for them. Cloudflare and Google can see your IP address and browser details when you visit, as with any website. The site has no sign-in and no forms.

Security

• Encrypted database on your phone (SQLCipher)
• Backups and saved copies locked with AES-256 encryption before they leave your phone, with a recovery code only you hold
• Optional app lock with Face ID, Touch ID, or your passcode on iPhone and iPad, or your fingerprint, face, or phone PIN on Android
• Encrypted connections (TLS) for every lookup

No system is perfectly secure, but we design, test, and run Valeska to keep your data protected.

Health breach notification

If there is a breach of unsecured health data, we will notify affected users in line with the FTC Health Breach Notification Rule and applicable state breach notification laws.

Children's privacy

Valeska is meant for adults managing chronic illness, including parents or caregivers managing a child's chronic illness. We do not knowingly collect data directly from children under 13. Health information about a child in a dependent profile is entered and controlled by the parent or guardian who created that profile (see Dependent profiles). If you believe a child has sent us data directly, contact us and we'll remove it.

Changes to this policy

If we materially change how we handle your data, we'll tell you in the app and update the "Last updated" date at the top of this page.

Governing law

This policy is governed by the laws of the State of Florida, United States, without regard to its conflict-of-laws rules. Valeska is offered to users across the United States, and we honor the privacy rights described above wherever in the U.S. you live.

Contact us

Questions about this policy or your data? Email info@valeska.app.

PhoenixCKK LLC