Privacy
Privacy Policy
Last updated September 25, 2026
The short version
Veris helps you understand your PMOS (formerly PCOS) risk. To do that, you share information about your symptoms and cycle. That information is yours: we use it to generate your results, we don't sell it, and you can ask us to delete it.
Information we collect
- Account information: your name and email when you create an account.
- Optional profile details: your date of birth and state, if you add them in settings.
- Billing information: your membership status and renewal date. Card details are held by Stripe, our payment processor, and never reach our servers.
- Assessment responses: the answers you give about your cycle, symptoms, and health history. Some of this is health information, and we treat it as sensitive.
- Technical and usage data: basic device, browser, and aggregate usage information used to keep the service working and improve it.
Anonymous assessments
You can complete the assessment and see your results without creating an account. In that case your responses are tied to a temporary anonymous session rather than to your identity. If you later create an account, those results carry over so you don't lose them.
Beta waitlist
While Veris is in beta, a person joins with a referral code from a member. The waitlist keeps your email, your first name, your answer to whether you already have a PCOS or PMOS diagnosis, and who referred you. We use this only to run the beta list. If you are not admitted within 90 days, or you do not use your invite within 90 days of admission, we delete your entry. Deleting your assessment data in Settings also clears your diagnosis answer from the waitlist. To limit abuse, the join form keeps a one-way hash of your network address for up to two days. To be removed from the list sooner, contact us through the contact page.
How we use your information
- To generate your screening summary, probable pattern, and suggested labs.
- To save your results and let you track changes over time (when you have an account).
- To operate, secure, and improve the service.
We do not sell your personal information, and we do not use your health information for advertising.
How your information is shared
We share information only in these limited cases:
- Service providers who run the product on our behalf: Supabase (authentication and database) and Vercel (hosting and basic analytics). They process data under contract and only as needed to provide their service.
- Legal reasons: if required by law, or to protect the rights and safety of users.
Data retention
We don't keep your information longer than we need to:
- Anonymous assessments (taken without an account) are automatically deleted 90 days after they're created.
- Waitlist entries are deleted if the person is not admitted within 90 days, or does not use the invite within 90 days of admission.
- The join form's one-way hash of your network address is deleted within two days.
- Registered accounts are never auto-deleted. If an account is inactive for 12 months, its data is archived (retained, not deleted), and restored automatically the next time you sign in.
- When you delete your account, it enters a 30-day grace period during which you can restore it; after that it and all associated data are permanently deleted.
- Deleting your assessment data takes effect immediately.
Deleting your account or data
You're in control. From your settings you can delete just your assessment data (keeping your login) or delete your entire account. Account deletion has a 30-day grace period so you can change your mind.
Your rights and choices
You can access, correct, export, or delete your information. To make a request, contact us using the details below. Depending on where you live, you may have additional rights under laws such as GDPR or CCPA, and we honor those rights.
Security
Data is encrypted in transit, access is restricted, and sensitive operations are gated behind authentication. No system is perfectly secure, but we work to protect your information using industry-standard practices.
Cookies
We use cookies that are necessary to keep you signed in and to operate the service, plus limited analytics to understand aggregate usage. We don't use third-party advertising cookies.
Children's privacy
Veris is intended for adults and is not directed to children under 13. We don't knowingly collect information from children.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we'll update the date above and, where appropriate, notify you.
Contact
Questions about your privacy or this policy? Email admin@veris-pmos.com.