Privacy Policy
Last updated: 2026-10-13 · Version 1.2.0
Your trust matters. This policy explains what we collect, why, who receives it, how long we keep it, and the choices you have. We do not sell your personal information.
Operated by KAVOD AI LLC, 3049 Getty Way Apt 306, Orlando, FL 32835.
What we collect
We collect what you choose to tell us, grouped the way you'd expect: about you and your service (name, service branch, era, service dates, discharge type, rank at separation, state, veteran status, VA enrollment, VA ID card, service connection, combat deployment, Purple Heart, Medal of Honor, former POW, years of service, Selected Reserve or drill status, wartime service, PACT Act toxic exposure, Camp Lejeune service, and medical/Chapter 61 retirement); about your health and disability status (VA disability rating, TDIU, Permanent & Total, Aid & Attendance, Housebound, VA healthcare priority group, and whether you're an MST survivor); about your household and finances (dependents, whether your spouse is a veteran, surviving-spouse and caregiver status, Gold Star family status, household income bracket, housing status — including if you tell us you're experiencing homelessness — and employment status); and how you use the app (areas of interest, notification preferences, the profile-photo address Google sends if you sign in with Google, content you post in the community, direct messages you send to other members, support messages and reports you file, AI conversation history, and first-party usage data like pages viewed, searches, and button clicks, tied to an anonymous visitor and session ID and a one-way fingerprint (hash) of your IP address, and linked to your account when you are signed in), and the requests you send through our privacy, copyright and intimate-image forms (your name as you type it, your email address, a phone number, if you give one on an intimate-image removal request, and what you tell us). Health- and disability-related answers are always voluntary: we ask for your separate agreement before you can enter them (see the Consumer Health Data Privacy Policy), you can skip anything you'd rather not share, and we use them only to match you to relevant benefits; we never sell them. We also collect standard account data (email address and a password hash) and basic technical data (device type, browser type, and your IP address, used for security and rate limiting; when we store it with usage data or form submissions we keep only a hash of it). A push-notification token for your device, only if you turn on alerts, so we can send them. Turning alerts off removes it. When you create an account we ask you to confirm that you are at least 18; we keep only that you confirmed it and when, never your date of birth. If you sign in with Google or Apple, we receive what that provider sends (see "Signing in with Google or Apple"). We also keep a short record of the agreements you give, change or withdraw and of the times you download your data (see "How long we keep it").
How we use it
To operate the platform, personalize benefit and resource recommendations, route the AI assistant to the right answer, keep the community safe, and comply with legal obligations. Profile data is used only to improve relevance, never sold. We also use the state in your profile and what you tell the assistant to choose which sponsor to show (never your health answers), and we measure sponsor views and clicks.
Service providers and what each receives
Supabase (database and sign-in): your account and profile, everything you save or post, direct messages, AI conversations, notifications and usage data. Netlify (hosting and servers): the requests your device makes to Vet Hub, including your IP address and your device and browser type, and your messages in transit to our servers. Resend (email delivery): your email address, your display name, and the text of the emails we send you, such as confirmation links, password-reset and security notices, benefit alerts and support replies. Anthropic (AI assistant): the messages you send to Command Center and the other information described under AI assistant. Anthropic also receives the text of a post, thread or direct message that someone reports, so an automated reviewer can make a first-pass moderation check. Apple Push Notification service and Google Firebase Cloud Messaging (push notifications): only if you turn on alerts in the mobile app, your device's push token, the notification text (kept generic; it does not name a benefit), and the in-app link the alert opens, which includes the name of the benefit's page. Cloudflare Turnstile (bot defense): on forms such as sign-in, sign-up, password reset and contact, your browser sends Cloudflare technical signals so it can tell people from bots; we do not send it your profile or your messages. Have I Been Pwned (breached-password check): when you create or change a password, your browser and our servers send only the first five characters of a one-way fingerprint (a SHA-1 hash) of the new password, never the password itself, to check it against known data breaches; nothing about your account is sent. Sentry (error monitoring): a technical error report when something breaks, with no messages and no profile data. Reports from the website, and JavaScript errors in the apps, go through Vet Hub's own relay, which removes the IP address before anything reaches Sentry. Crash reports from the iPhone and Android apps go directly from the device to Sentry, and Vet Hub configures Sentry not to store IP addresses. Google and Apple (sign-in): only if you choose to sign in with them; see "Signing in with Google or Apple". We do not use any third-party analytics, advertising or tracking service.
Signing in with Google or Apple
If you sign in with Google, we receive your Google account ID, your email address, whether Google has verified it, your name and the web address of your profile photo. If you sign in with Apple, we receive an ID Apple assigns to you and your email address, or a private relay address if you chose Hide My Email; Apple gives us your name only the first time you sign in on the iPhone app. We use this to create your account and sign you in. We ask for nothing else from Google or Apple and we do not read your Google or Apple data. Our servers keep no Google token. For Apple we keep one token, in a table no member can read, only so that we can end Apple's access when you disconnect Apple or delete your account. To disconnect, use Connected sign-in methods on your profile page, or remove Vet Hub in your Google Account (Security, Sign in with Google) or in your Apple Account (Settings, your name, Sign-In & Security, Sign in with Apple). Deleting your Vet Hub account also ends Apple's access.
AI assistant
Command Center (Brittany in English, Miguel in Spanish) is an AI assistant, not a person, and it can make mistakes. Vet Hub is not affiliated with VA and is not VA-accredited, and the assistant cannot decide whether you are eligible for any benefit; VA or the program decides. Before your first message we ask you to agree, and you can withdraw that agreement from the assistant's menu or your profile, and delete your chats at the same time. When you send a message we send it to Anthropic to write the answer, together with your recent messages in that chat, a snapshot of your profile (display and full name, account email, preferred language, service branch, era, state, veteran status and interests; the "Health and wellness" interest is left out unless you agreed to health and disability answers) and any file you attach to that message. We do not send your disability rating or VA claim details themselves. The assistant's benefit tools do use your profile on our servers to find matches, and what they return (a list of programs that Vet Hub's rule-based list shows as possibly relevant, each with a title, summary and link) goes to Anthropic with your message. That list is calculated from your profile, including the health-related answers you gave, so which programs appear, and their order, can reveal them. An attached file is used for that message only; we keep its name and size, not its contents. We save the conversation in your account so you can return to it. Anthropic keeps what we send under its own terms and retention periods, which we do not control. Anthropic states that it deletes what we send within 30 days by default, may keep it longer if its safety systems flag it, and by default does not use it to train its models; we have no agreement that shortens these periods (source: Anthropic privacy center, "How long does Anthropic store my organization's data?", https://privacy.claude.com/en/articles/7996866-how-long-does-anthropic-store-my-organizations-data).
Health and disability answers
You decide whether to tell us about your health and disability status (for example your VA disability rating). We ask for your separate agreement before you can enter those answers; it is not part of the Terms of Service, and if you say no, those questions are skipped and your benefit matches use the rest of your profile. You can withdraw your agreement at any time in Profile, Privacy, and choose to erase the answers you already entered. How we handle this kind of information, who can receive it and how long we keep it is in the Consumer Health Data Privacy Policy.
How long we keep it
Account and profile data: while your account is active; deleted when you delete your account. AI conversations: kept in your account until you delete a chat from your dashboard, withdraw your agreement to the assistant and choose to delete your chats at the same time, or delete your account. We do not run an automatic deletion schedule for them. Direct messages: kept until either person deletes their account, which removes the conversation for both. Community threads and replies: deleted when you delete your account; a thread other members replied to stays so their replies are not lost, with its title and text replaced by "[Removed by its author]" and your name removed. If we are legally required to preserve your account or something you wrote, we cannot complete the deletion until that obligation ends. Support tickets you filed while signed in: deleted when you delete your account, with the email and message in them. Moderation records: kept as trust & safety history, and because the law may require us to keep a record of how reports were handled, unlinked from your account when you delete it. Contact-form and sponsor-inquiry messages and confirmed newsletter addresses: kept until you ask us to remove them. Intimate-image removal requests (the details you give on that form) and privacy requests are kept as our record of what was asked and what we did; we run no automatic deletion schedule for them, and deleting your account unlinks them from it without removing them, so ask us through the contact page if you want one removed. Account-deletion requests (your email address and a hashed IP address) and a short operational record that an account was deleted (its account ID and the date) are also kept for our records. A short record that you agreed to, changed or withdrew an agreement (the Terms and Privacy Policy, the AI assistant, or the separate health-data consent: which agreement, which version, and when), and a record that you downloaded a copy of your data (when, and the size of the file, never what is in it), are kept under your account ID for 24 months as security records, including after you delete your account. The "Security and admin audit records" line below gives that period; the "Consent records" line below is only your notification choices, which are deleted with your account. Short-lived rate-limit counters hold a hashed IP address or email, or your account ID, and are deleted 48 hours after their window ends (see the schedule below), and a per-day total of assistant usage cost against your account ID, with no message content, is kept for about a week and deleted with your account. Our providers keep their own logs for their own periods; deleting your account does not reach into those, and they age out on the providers' schedules. This is how long we keep the rest:
| Data | How long we keep it |
|---|---|
| Rate-limit counters | 48 hours after the window ends |
| Password-reset tokens | 24 hours after expiry or use |
| Unconfirmed newsletter sign-ups | 30 days |
| Usage analytics, signed in or not | 13 months, and deleted with your account |
| Email delivery events | 13 months |
| Uptime and watchdog records | 90 days |
| Scorecard and CI reports | 13 months |
| Security and admin audit records | 24 months |
| Consent records | For the life of the account |
| AI conversations | Until you delete a chat or your account; no automatic deletion |
| Contact and sponsor messages, confirmed newsletter addresses | Until you ask us to remove them |
| Encrypted database backups | Up to 35 days after the backup is taken |
Your privacy choices
You can turn Vet Hub's own analytics off on a device with the control on the Cookie & Tracking Notice. Vet Hub also turns its analytics off by itself when your browser sends a Global Privacy Control signal or a Do Not Track signal. We do not sell your personal information or share it for advertising across other sites or apps, so there is nothing further for a Global Privacy Control signal to opt you out of. We do not allow third parties to collect information about your activity on other sites or services through Vet Hub.
Your rights
You can see and edit your profile in the app. In the app (Profile, Privacy) you can also download a copy of the information in your account as a file (it lists the documents you uploaded by name but does not contain the files themselves; for those, or for anything you think is missing, use the contact page), withdraw your agreement to the health and disability answers and to the AI assistant, and delete your account. You can delete a saved AI chat from your dashboard. Deleting your account permanently deletes your profile, saved benefits, AI conversations, direct messages (the whole conversation, including what the other person wrote in it), documents, and the threads and replies you wrote in the community. A thread other members replied to stays so their replies are not lost, but its title and text are replaced with "[Removed by its author]" and your name is removed. Support tickets you filed while signed in are deleted too, with the email and message in them. Moderation records you're part of are kept as trust & safety history, unlinked from your account. If we are legally required to preserve your account or something you wrote, we cannot complete the deletion until that obligation ends, and we will tell you to contact us. For anything else, such as asking us to correct something you can't edit yourself, use the contact page and choose Privacy request. We check that the request is from you and answer within 45 days; if we need more time we tell you why within the first 45 days. If we refuse, you may appeal by replying or by sending a message that begins "Privacy appeal"; we answer in writing within 45 days, and if we deny the appeal we will tell you how to contact your state attorney general. Residents of some states, including California, Washington, Nevada and Connecticut, have additional rights to know, access, correct and delete their information; you can use them the same way.
How we protect it
Encryption in transit (TLS), encrypted credential storage, role-based access controls, row-level security on every database table, rate limiting on forms, password reset, the AI assistant and administrator sign-in, and our sign-in provider's own limits on member sign-in. Two-step sign-in with an authenticator app is optional for members, who can turn it on under Sign-in and security in their profile, and it is required for staff and administrator accounts. We monitor for abuse and review security regularly.
Minimum age
Vet Hub is for adults. You must be at least 18 years old to create an account or use Vet Hub. When you create an account we ask for your month and year of birth only to confirm that you are 18 or older; we keep the confirmation and its date, never your date of birth. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has an account, contact us through the contact page; if we learn that an account belongs to a person under 18, we restrict it and delete it.
Contact
Privacy questions? Use the contact page and choose Privacy request.
Changes to this policy
We may update this policy. When we do, we post the new version and its date on this page and say so at the top of it. Continued use after a change means you accept the updated policy.