The calendars you tick, Apple Health and what you write are read on the phone. WHOOP and your Notion workspace are read on the server, so Veille still has something to tell you when the app has been closed all day.

Secrets are never sent. Raw Health readings stay too: the phone sends one sentence for the day, not the samples behind it.

What reaches the model is bounded by what you granted, not by what something judged relevant. Anything held back is named in the answer, so you see the gate where it applied.

One exception: a question you speak is uploaded to be turned into text. Nothing else travels with it, and Veille keeps no recording.

A notice arrives on a lock screen anyone near you can read, so it carries the headline and the action, never the reason behind them. The specific half stays behind whatever locks the app.

Every belief keeps its source, its date and how sure Veille is, and you can correct any of them. Forgetting is a real delete on both sides, and erasing an account clears every table that holds a row of yours.

The form stores your email, the two answers you picked and the question you want to investigate, along with where you arrived from — a campaign tag or the site that linked you. Entries are kept until Veille opens to you, or until you ask us to remove yours. Nothing here connects to your accounts, visits are counted without cookies, and nothing is sold or shared.