EVENTUALLY.VET

EVENTUALLY.VET Privacy Policy

Last Updated: September 2026

EVENTUALLY.VET ("the App," "we," "our") is a personal record-keeping application for active-duty military members, veterans, and their families to document their military service across its whole span: medical appointments, deployments, duty stations, exposures, conditions, accomplishments, and the records they're asked for again and again, including preparing VA disability claims.

1. The Information Is Yours

EVENTUALLY.VET does not gather information about you. YOU enter your own records into the app, and they are saved on YOUR device, under your control. We can't see them. Think of it like a private notebook that lives in your pocket, not a form you send to us.

Things you may choose to record, all stored locally on your device:

  • Profile: name, rank, branch, service dates, and job/occupational code (MOS, AFSC, Navy rating/NEC, and equivalents)
  • Medical: appointments, providers, diagnoses, treatments
  • Service: deployments, hazard exposures, duty stations
  • Conditions: names, descriptions, VA claim status
  • Attachments: documents and photos you add
  • Cloud account: email and password (only if you opt into backup, when that feature becomes available)

This information stays on your device. It is never sent to us and never leaves your device unless YOU choose to (by exporting/sharing a file, or by enabling cloud backup once that feature becomes available).

We do NOT collect: Social Security Numbers, GPS location, advertising data, or information from other apps.

Crash and diagnostic data. To keep the app stable, we use a crash-reporting service (Sentry) that receives anonymous diagnostic and crash data, NEVER the content of your records. We do not and cannot see your appointments, diagnoses, documents, or any personal detail you enter. We do not use advertising or usage-tracking analytics.

2. How Your Data Is Stored

  • Local (default): stored on your device and protected by your device's built-in encryption (iOS Data Protection / Android full-disk encryption). Your records never leave the device unless you enable cloud backup or share/export.
  • App lock: optional biometric (Face ID / Touch ID) or PIN lock adds an authentication layer on top of device encryption.
  • Cloud backup (optional, opt-in, not yet available): when enabled in a future release, your data will be encrypted on your device before it is uploaded. We are finalizing an authenticated AES-256-GCM design with per-account key protection; until that ships in a released build, we do not claim "AES-256" or "zero-knowledge" for cloud backup.

3. How Your Data Is Used

Solely to provide app functionality: storing records, generating claim summaries and buddy-letter templates, matching exposures to presumptive conditions, and syncing between your devices (if backup enabled). We NEVER use your data for advertising, profiling, sharing with government agencies, sale to third parties, or AI training.

4. Data Sharing

Only when YOU initiate it: exporting a summary, emailing a buddy-letter request, or using the system share sheet. The one third party we use today is Sentry, our crash-reporting service, which receives anonymous diagnostic and crash data only (never your records). Your device email client (buddy letters) and your device calendar (read-only import, stays on device) are used only at your direction. Cloud backup is not yet available; when it launches, opting in will be entirely your choice.

5. Your Rights

Access, correct, export, and delete your data at any time, whether individual records or all local data, directly on your device. If cloud backup becomes available and you opt in, you will be able to delete your cloud backup and account as well, processed within 30 days.

6. Children's Privacy

Intended for service members and veterans; not directed at anyone under 17. We do not knowingly collect information from minors.

7. HIPAA

This is a personal health record app maintained by and for the individual user, not a HIPAA covered entity or business associate. We voluntarily apply HIPAA-aligned security controls. It does not replace official VA/DoD or civilian medical records.

8. California (CCPA/CPRA)

Right to know, delete, and non-discrimination apply. We do not sell personal information.

9. Changes

We may update this policy; changes posted with a new "Last Updated" date and, for material changes, with notice.

10. Contact

Email: privacy@eventually.vet with the subject "Privacy Inquiry (EVENTUALLY.VET)". We respond within 30 days.

EVENTUALLY.VET is not affiliated with, endorsed by, or connected to the U.S. Department of Veterans Affairs, the Department of Defense, or any branch of the U.S. military.