Vela pilot: privacy notice

Version privacy-notice.v12 · last updated 27 October 2026 · This invitation-only research trial runs in English or Traditional Chinese (繁體中文), on Telegram or LINE. Each person uses Vela in the language they choose, and Vela translates between the two when a family uses both.

In short

• Vela carries one question a day from a family to someone they love, and brings that person's answer back to the family.
• We keep as little as we can. Voice notes, photos and the words of answers are deleted after 30 days. Book export is outside this trial. Stories are kept only when that feature is enabled and you choose to keep them.
• When an answer mentions something like a fall or pain, Vela sends the organiser a separate note with the person's own words only if the person the light is for has agreed to that separately; otherwise the note carries none of their words. Their answers still reach the family group, organiser included, as they sent them.
• On Sundays the organisers get a short weekly read. Each organiser's copy may also carry a few words, just for them, on how their own messages reached the person. The founder alone also sees a careful guess at what may lie beneath the week's words. See "The weekly read".
• If the person the light is for has not answered their morning message a while after they usually do, Vela sends a short check-in with two buttons. A tap on "Not okay, tell my family" tells every organiser at once. See "The check-in".
• An organiser can choose to have Vela send a question it wrote in their style, or one from Vela's own list worded as family members write, with their name on it, on a morning when nobody in the family wrote one. The person the light is for sees it as a question from that organiser; the family's app marks it "written by Vela". See "Questions Vela writes for an organiser".
• Vela never contacts anyone on its own. Every message to a neighbour or friend is sent by a person in the family.
• Vela is not a medical or emergency service.
• Anyone can say stop at any time, and anyone can ask to see, correct or delete what we hold about them.

Who runs Vela

Vela is a small pilot run by Timur Aiusheev (in this notice, "the founder"), a private individual in Taipei, Taiwan. There is no company yet. Timur Aiusheev decides how your information is used and is responsible for it. If a company takes the service over, we will tell you before anything changes.

Contact: support@vela-light.com, which reaches the founder.

Who this notice is for

• The family member who sets Vela up (the organiser) and everyone in the family's Vela group. Vela's first message in that group links this notice, with a button, "I've read it", for each adult to tap. The organiser also sends this notice to each adult before adding them to the group.
• The person the family keeps a light on for. Every message uses their name; in this notice we say "the person the light is for".
• Nearby contacts: up to two people living near that person, whom an organiser may ask to look in.
• Children who send a question through a parent's phone. We keep only the child's first name, next to the question.

What we collect

From everyone in the family's Vela group

• The name your messaging app shows us, your language and your time zone. On Telegram also your username. On LINE there is no username, and we learn your language only when LINE shares it.
• What you send to Vela: questions (we call them asks), photos, voice notes, and replies and reactions to answers. LINE has no reactions, and in a LINE group asks and replies are text only: photos and voice notes for the family are sent from the app.
• Whether you tapped "I've read it" under Vela's first message in the group.

App setup and local preview: The new onboarding asks for the relationship, interests and preferred ways of replying, alongside the name, language, country, time zone and morning time. These help prepare the first week. Before saving, the preview answers stay in app memory; a chosen portrait can leave a temporary local file. The in-memory draft is cleared on sign-out or account changes, except for the one explicitly accepted preview being saved into its intended first signed-in session. Replaced or abandoned portrait previews are removed; interrupted portrait previews are swept on the next app start. If local file deletion fails, a cache file may remain until cleanup succeeds or the app cache is removed. Saving sends the setup answers and chosen questions to Vela; it does not record the invited person's consent. Relationship, interests and reply preferences are kept with their member profile for the same period as their name and morning settings. You can ask the founder to correct or remove them.

Notification choices: You may choose whether Vela sends a notification when a parent answers your question and whether it reminds you before your turn. Vela saves those choices with your account to honour them across your phones. They are not shown to other family members or sent to an AI provider. You can change them in Settings. Vela clears the saved choices when your account is deleted. They do not switch off Vela Light quiet-morning notices, which are explained separately.

Optional parent portrait: The organiser can choose a photo for a parent's window. The cropped portrait is stored on that device, scoped to the signed-in account and family, and is not uploaded to Vela or sent to an AI provider. Remove or replace it in the parent's settings. Signing out or changing accounts clears Vela's local portrait storage. This is different from a photo deliberately sent in an ask or reply, which is uploaded and follows the 30-day media rule. Choose a photo you have permission to use.

About the person the light is for

• The name the family uses, how to greet them each morning (for example "Mrs Chen"), language, country, time zone and usual wake-up time. The organiser gives us these, and we confirm them with the person on the onboarding call.
• Their answers: button taps, voice notes, text, photos and stickers, and when each answer came.
• What our software works out from an answer: a written transcript of a voice note, in the language spoken, and a translation into English or Traditional Chinese when someone in the family reads the other language, a one-line summary, mentions of people, places, plans or dates, mentions of health only with the separate yes described under "Health words", and whether the answer mentions something the organiser should hear, such as a fall or pain.
• When the morning messages went out, days away, and days without an answer.

From each week's messages between the person the light is for and the family: what our software reads in the week as a whole, described under "The weekly read": for the founder only, up to three possible readings of what may lie beneath the words; and, for each organiser who asked or replied that week, a few words on their own messages.

Questions Vela drafts: a suggested question for each of the next few mornings of the person the light is for, drafted from their recent answers and from the recent questions one organiser wrote to them; whether that organiser chose to have it sent in their name; and, on each question sent that way, a mark that Vela wrote it. See "Questions Vela writes for an organiser".

Optional calling number in the iPhone app: With the person’s permission, an organiser may save their calling number on that device to open its dialler from a quiet notice. Vela does not upload that number. It is removed when cleared, when the organiser signs out or switches accounts, and when this app’s private storage is removed. The organiser can contact the founder to request help with deletion. Temporary audio and photo downloads in the app are scoped to its signed-in account and removed on account changes. Audio playback files are removed on completion or cancellation, with a startup sweep for interrupted sessions.

About nearby contacts: the name and how they know the person, which the organiser gives; once the contact has said yes, also their phone number and the messaging app they use; and whether they agreed.

Before setup, about the person the light is for and each family member in the Vela group: the country where they live (for the United States, the state) and whether they are a Russian citizen. The organiser gives these to the founder, who uses them only to decide whether the family can join the pilot now (see purpose 8), and keeps them in the founder's pilot notes as codes and yes or no answers under the family code, never with names.

Only with a separate yes, on the founder's calls: answers to a few short questions, such as how connected someone feels (at weeks 0, 4 and 12), how the organiser would feel if Vela stopped (at days 14 and 30), and whether the organiser would pay for Vela Light, a paid plan Vela plans to offer later (at day 30). Skipping them changes nothing.

App permission: The app shows a notice, in English or Traditional Chinese, naming OpenAI and Deepgram before sign-in or saving. Your own choice is recorded with the text version, a fingerprint of the exact notice and a server timestamp when your account is provisioned or you accept on an existing account. This app record stays with your active account and is cleared when the account is deleted. It is separate from your parent’s consent, the health-words choice and the longer-lived consent records below. Declining keeps the preview on your device and does not authorise any family data sharing. Existing test families continue under their recorded pilot consent; a software update does not create new consent for them.

Records we create: when and how each person agreed or said no, to which version of which text, and, for a button tap, a fingerprint of that text; delivery records; a log of each AI call (which call, when, whether it worked, its cost); a log of every time the founder opens or changes a family's records; usage events without any message content, such as "an answer arrived at 08:12, by button".

What we do not collect

No location. No access to a phone's contacts, camera or microphone beyond the voice notes people choose to send. Vela does not ask for medical records; words about health that someone chooses to say in an answer are handled as described under "Health words". Nothing from anyone's device other than what they send to Vela. No advertising identifiers. No payment information: the pilot is free.

In the family's Vela group, Vela keeps only the messages meant for it: replies to its evening message, /ask and /later messages, replies to the posts of answers, reactions to those posts, and taps on "I've read it". It also notices when someone leaves the group, which the messaging app tells Vela.

• On Telegram, when Vela is an administrator of the group (which lets reactions count), Telegram delivers every message in the group to Vela; every message not meant for Vela is discarded as it arrives, without being stored or logged.
• On LINE, LINE delivers every message in the group to Vela, and Vela cannot ask it to deliver less. Vela's software keeps only replies made with LINE's Reply to Vela's own messages, messages starting with /ask or /later, and taps on its buttons. Everything else (messages, photos, voice notes, stickers, edits) is discarded as it arrives, before anything else in Vela sees it, without being stored or logged. A message that quotes someone else's message is read only to see whether it quotes Vela, then discarded. So keep other family conversation in another group.
• Unsending on LINE. If someone unsends a message Vela kept, Vela deletes its copy. Vela cannot remove what it already posted in the group, because LINE does not let Vela delete its own messages.

Why we use it

1. To carry the exchange: deliver each ask at the person's morning hour in their language, then bring the answer and the family's replies back.
2. To keep the light: tell the family when the person has answered. Learn from their answer times when they usually answer, on each day of the week. When a morning is still unanswered a while after that, send them a short check-in; when they tap "Not okay", tell every organiser and the founder at once (see "The check-in"). When a day stays quiet, send the organiser the facts (when the morning message went out, when the person usually answers) and the names and numbers of the nearby contacts who have agreed, so the organiser can decide what to do.
3. To work across languages and voices: turn voice into text, translate between English and Traditional Chinese when the family uses both.
4. To pass on words that matter: if an answer mentions something like a fall, pain, a stranger at the door or a request for money, the organisers hear about it that day: with the person's own words if the person the light is for has agreed to that (see "Health words"), and otherwise in a short note, with none of their words, saying that something they said may be worth a call. Vela does not diagnose, and it does not send these words to anyone else.
5. To send the organiser a short weekly read on Sunday: what the person told the family that week and what changed in how they answered, compared only with their own earlier weeks, and, with the separate yes under "Health words", their own health words that came up on two or more days. That account is never a score, a diagnosis or advice. Each organiser's copy may also carry feedback on their own messages, with one suggestion for the week ahead. The founder alone also sees a reading of what may lie beneath the week's words, to understand the family's week while checking the read, and to judge whether readings like these are accurate and kind enough ever to share. Both are described under "The weekly read".
6. To run the service safely: send every message once and on time, fix failures, prove that deleted information was deleted, and show what each person agreed to.
7. To learn whether the pilot works: answer rates, answer times and how often days stay quiet, counted without names. Results are shared only as totals.
8. To decide who can join the pilot: the founder's family in Vietnam took part first; up to 10 families in Taiwan, most of them on LINE and in Traditional Chinese, follow for about 30 days. Each family takes part only once the founder has approved it on Vela's admin page. This describes the proposed cohort, not legal clearance. The founder checks each participant’s residence and any relevant citizenship restrictions before approving participation. The Vietnam family waits until the review of its actual participants, consent and processing flows is complete. Existing restrictions remain in force until that review is recorded.
9. To suggest questions, and send one for an organiser who chose it: draft a question the family could ask the person next, in the style of one organiser's own recent questions, for the family to use, change or ignore in the app; and, only for an organiser who chose "Send it as me", send it as that organiser's question on a morning when nobody in the family wrote one (see "Questions Vela writes for an organiser").

We do not sell information, show advertising, or use anyone's words or voice to train AI models. We do not use a real answer or voice note to test or improve Vela's AI unless the person who said it agrees separately, for that one item.

What we rely on in Taiwan (Personal Data Protection Act):

• Organisers: the pilot arrangement they agreed to, and their consent (Article 19(1)(2) and (5)).
• The person the light is for: their consent (Article 19(1)(5)), and, for words about their health, their separate written consent (Article 6(1)(6)).
• Other family members in the group: their consent (Article 19(1)(5)).
• Nearby contacts: their consent, once they say yes (Article 19(1)(5)). Before they answer, Vela holds only the name and relation the organiser gave, and shows them in no message.

Health words

Words about health, such as a fall, pain, not eating, a visit to the doctor or what a doctor said, need care. Under Taiwan's law some of them may count as medical information, which may be used only with the person's own written consent (Personal Data Protection Act, Article 6(1)(6)). So Vela asks the person the light is for about them separately.

• When Vela asks. Right after the person taps "Yes, that's fine" to the light, Vela sends one more question, with its own buttons: may Vela pass their words about their health, for example a fall or pain, on to the organiser, so the organiser can call, and say in the Sunday weekly read which of those words came up more than once? Vela asks once and never asks again by itself.
• The tap is written consent. Tapping a button is the person's own agreement in writing, and only the person may tap it. Vela keeps which version of the question they answered, when, and a fingerprint of its text. Anyone who would rather answer on paper can tell the founder.
• If they say yes. The organisers see the person's own words that day when an answer suggests something like a fall or pain. Health mentions are kept with the answer for 30 days, like its other words. On Sundays, the weekly read may also quote those of the person's own health words that came up on two or more days that week, with the days, such as "knee hurts" on Monday and Thursday. The founder can leave them out. They are never written by the AI and never stored with the weekly read: Vela reads them from the answers each time the read is shown, so they disappear when the answers' words are deleted after 30 days, or at once if the person withdraws this consent. A yes to the earlier version of this question, which did not mention the weekly read, never puts health words in it. The one-line summary of an answer, kept while the family uses Vela, may say they mentioned their health, never with the name of an illness, a test result or a medicine.
• If they say no. Vela works the same way. It keeps no health mentions and leaves health out of the one-line summary. Vela still notices words that may matter, because that is how the family knows when to call, but the organisers then get only a short note, with none of the person's words, saying that something they said may be worth a call. The person's own message still reaches the family group as they sent it, and its words are deleted after 30 days.
• For everyone. Whatever the answer, Vela's summaries and notes never keep the name of an illness, a test result or a medicine. Only the founder's readings under "The weekly read" may quote the person's words exactly as they were said, and those readings are deleted 30 days after the end of their week. The feedback for organisers never mentions what the person said about their health.
• Who handles them. OpenAI and Deepgram, in the United States, turn voice into text and notice these words for Vela, and the database is in Singapore (see "Who sees it").
• Changing your mind. Saying "stop" withdraws a yes to health words as well as pausing the light, and saying "start" does not bring that yes back. To agree again, or to withdraw only this consent, tell the founder or your organiser.

The check-in

The morning message has no buttons: the person answers it in their own words, by voice or in writing.

• When. If the person has not answered about an hour after they usually do, Vela sends a short check-in asking how they are. It comes no sooner than an hour and no later than two and a half hours after the morning message; in the first weeks, before Vela knows when they usually answer, after two hours. Vela learns their usual time again every night from their answer times, separately for a day of the week that runs differently. The check-in is sent once.
• The two buttons. "I'm okay" answers the morning, and the light is lit. "Not okay, tell my family" also lights the light, and at once tells every organiser by message, and the founder, that the person tapped it and when. The family group sees that they are not feeling okay. Vela does not ask why and never guesses. The tap is kept like any other answer.
• If there is still no answer. The organisers get a quiet notice about 90 minutes after the check-in, and no later than five hours after the morning message (four hours in the first weeks), by message and in the app. If no organiser acts on it within two hours, by tapping a button or by the person answering, Vela sends it once more and tells the founder.
• Not an emergency service. "Not okay" reaches people, not emergency services. In an emergency, call for help directly.

The weekly read

Every Sunday Vela drafts the weekly read, and the founder checks it before anything is sent. It has three parts. For the feedback and the readings, Vela's AI reads that week's messages only: the person's answers (what they wrote, the written version of what they said, and the buttons they tapped), each morning's ask and who sent it, and the family's replies and reactions to the person, each with the family member's first name.

• The lines about the week (purpose 5) go to every organiser. The person the light is for can read them too, by writing "what does the family see". They are never a score, a diagnosis or advice.
• Feedback for each organiser, about their own messages. For each organiser who asked or replied that week: what in their own messages reached the person, for example which ask drew a long answer, and one thing to try next week, for example asking more about something the person brought up. It speaks only of that organiser's own messages and the person's answers to them: never of another family member, never of what the person said about their health, never of a feeling the person did not put into words, and never as a grade. The founder can change or remove it before sending. It goes only in that organiser's own copy of the read, under a heading that says it is just for them. Nobody else in the family sees it.
• What may lie beneath the words, for the founder only. Up to three readings of what may lie beneath the week's words: a feeling, a wish, a worry or an attitude of the person the light is for, of the family, or in the exchange between them. Each reading is worded as a possibility, not a fact, says how sure it is, and rests on a few of the week's words, quoted exactly. A quote can be anything written or said that week, including words about health; the founder already reads these messages (see "Who sees it"). Vela's code keeps a reading only if every quote is found in that week's messages. A reading is never a diagnosis or a score, and it never says what anyone should do. The founder reads them on Vela's admin page to understand the family's week while checking the read, and to judge whether readings like these are accurate and kind enough ever to share. They are never sent to anyone, never shown in "what does the family see", and never in the app. Showing them to anyone else would need a new version of this notice, given first to everyone it concerns.
• How long. The readings and the feedback are deleted 30 days after the end of the week they are about. The weekly read then keeps only how many organisers got feedback. Feedback that was sent stays in the organiser's own chat until they delete it there.
• Who handles them. OpenAI drafts them, in the United States (see "Who sees it").

Questions Vela writes for an organiser

Every night Vela's AI drafts a question for each of the next few mornings of the person the light is for. It starts from Vela's own list of questions, and may draw on people, places and plans the person mentioned in recent answers and on the recent questions one organiser wrote to them, so that it sounds like that organiser. The family sees it in the app as a suggestion, and anyone in the family can use it, change it or ignore it.

• Sending it as the organiser. In the app, on the person's morning settings, an organiser can choose "Send it as me". Then, on a morning when nobody in the family wrote a question by the evening before, Vela sends the question it drafted in that organiser's style as that organiser's question, with their name on it, instead of its own question signed "Vela". On a morning with no such draft, it sends that day's question from Vela's own list instead, worded the way a son or daughter would write it, with the organiser's name on it. Either is sent only in the person's language, and only while that organiser is still in the family. Only one organiser at a time can choose it for a person, and only that organiser can turn it on or off; turning it off applies to every morning not yet prepared.
• What the person sees. The question arrives like any question from that organiser, with their name under it. The message itself does not say that Vela wrote it. In the app, the organisers and the family see it marked "written by Vela". If the person the light is for asks the organiser or the founder whether a question was written by Vela, they will be told.
• What it never does. A question Vela writes never asks how the person is feeling or about their health, never makes up a name, and is never used as an example of how the organiser writes.
• Saying no. The person the light is for can ask the organiser or the founder at any time for every question to come only from the family's own words, and it is turned off for their mornings.
• How long. The words of a drafted question are deleted 30 days after Vela wrote them. A question sent this way is kept like any other question: its words are deleted after 30 days.
• Who handles them. OpenAI drafts them, in the United States (see "Who sees it").

Who sees it

• The family in the Vela group sees the asks, the answers with their transcripts and, where needed, translations, and the replies.
• The person the light is for hears or reads the family's replies the next morning, and can ask "what does the family see" at any time.
• Organisers also receive notices on quiet days, the words or notes passed on under purpose 4, the weekly read, with feedback on their own messages in their own copy only, and the details of the nearby contacts who have agreed.
• A nearby contact sees only a message an organiser chooses to send them on a quiet day. They never see answers.
• The founder reads the family's exchanges during the pilot, to make sure Vela works as it should and to write and send the weekly read, and records whether each nearby contact agreed. On Sundays the founder also sees, on the admin page only, Vela's readings of what may lie beneath the week's words (see "The weekly read"), and shows them to no one. Every time the founder opens or changes a family's records, on Vela's admin page or directly in the database, it is logged, and you can ask to see that log. When something needs the founder's attention, such as a note under purpose 4 or a weekly read ready to check, Vela tells the founder in a private Telegram chat with a link to the admin page; that chat never contains what anyone in the family wrote. Vela's software is built with the help of an AI coding assistant, which works with test data and never with your family's messages.
• Service providers process information for us, only to provide Vela:

Expo delivers app builds and checks for app updates; it receives technical installation/update identifiers and network details. Push notifications are separately controlled and are not enabled merely because the app shows a permission prompt. If enabled, Expo and Apple (APNs) or Google (FCM) also receive device push tokens and notification text/identifiers, never family answer text or health words.

Telegram and LINE are the messaging apps used in this trial, each under its own terms. Messages in those chats stay in the app until you delete them there; deleting your information in Vela does not remove them from your chat history.

We will tell organisers at least 14 days before a new provider starts receiving family messages.

Where it is stored

Our database is in Singapore. Messages on Telegram or LINE also pass through that app's own servers. We ask Cloudflare to store voice notes and photos in its Asia-Pacific region; Cloudflare treats this as a preference, not a guarantee. Vela's software runs on Cloudflare's worldwide network, so a message may be processed for a moment in the Cloudflare data centre nearest to the person who sent it. The AI and voice-to-text providers work in the United States. The founder's pilot notes are kept in Google Drive, on Google's servers in the United States and other countries. Your information is therefore used in Singapore, the United States and other countries where these providers operate, not only where you live.

How long we keep it

When we delete something, we keep a short record of what kind of record it was, its reference number and when it was deleted, with a fingerprint (a hash) of the kind and the number, never of what it said. We keep records of consent and of deletions for 5 years because Taiwan's law makes us prove what people agreed to, and a claim for damages can be made for up to 5 years after the damage (Personal Data Protection Act, Articles 7 and 30).

Your rights

At any time, free of charge, you can:

• See what Vela holds about you, and get a copy.
• Correct it or add what is missing.
• Stop. The person the light is for can simply say "stop" in the chat. Morning messages and the light pause at once, and the organiser is told: "[Name] asked to pause. Nothing is wrong with the app." Saying "start" brings it back. Saying "stop" also withdraws a yes to health words, which "start" does not bring back. Anyone else can tell the founder, or their organiser, who passes it on; the founder then removes them from Vela. A family member can also simply leave the family's Vela group: Vela notices, stops including them in the turns, and deletes their information 30 days later. An organiser who leaves the group stays an organiser until they tell the founder.
• Delete. Ask the founder, and we delete your information. What remains is listed under "How long we keep it" (for example, usage events without content).
• Withdraw consent, including the consent to health words on its own. This does not affect what was done before.

The person the light is for can also ask "what does the family see" in the chat, and receives the one-line summaries of their last seven answered days and the lines about their week from the most recent weekly read sent to the organisers. It does not show the organisers' feedback or the founder's readings (see "The weekly read"). For those, or for anything else the family has seen, ask the founder.

How: write to support@vela-light.com, or tell your organiser, who passes it on to the founder. We may ask one simple question to make sure the request comes from you. Stopping takes effect immediately. We aim to complete every other request within 7 days, and always within the time Taiwan's law allows: 15 days for access or a copy, 30 days for a correction, a stop or a deletion (each extendable once, with a written reason). These rights cannot be waived or limited by agreement.

If you are unhappy with how we handled your information, please tell the founder. You can also complain to the data protection authority where you live.

If you do not give us this information

Every part of Vela is a choice.

• If the person the light is for says no to the light, Vela starts nothing. It confirms the no once, tells the organisers, and at once deletes what the organiser gave about the person at setup (their name, greeting, time zone, wake-up time, messaging account and nearby contacts), keeping only the record that they said no. Vela then no longer recognises them: if they write to Vela later, it answers as it would anyone new. The family stays in touch as before, and can invite them again later through the founder. If the person never answers the invitation, the same information is deleted 30 days after the invitation link expired.
• If the person the light is for says no to health words, Vela works the same way, as described under "Health words".
• Without a messaging account and a morning time, Vela cannot deliver a morning message.
• Voice is never required. The morning message is answered in the person's own words, by voice or in writing; if it is still unanswered a while after they usually answer, the check-in can be answered with one tap.
• Tapping "I've read it" in the family group is optional; asks and replies work without it.
• On LINE, the check-in's buttons, and those of a photo choice or vote the family sent, sit directly beneath the message; the tap on a button is the answer, and Vela keeps which message it answered.
• An organiser who would rather not get feedback on their own messages can tell the founder, who then sends their copy of the weekly read without it.
• "Send it as me" is off unless an organiser chooses it. Without it, on a morning nobody in the family wrote a question, Vela sends its own question, signed "Vela".
• Nearby contacts are optional. Without them, a notice on a quiet day names no one to call except the organiser.
• The research questions are optional.
• An organiser who does not give a name and a way to be reached cannot join the pilot.
• Without where each person lives and whether anyone is a Russian citizen, the founder cannot tell whether the family can join, so the family waits.

Not a medical or emergency service

Vela cannot tell whether anyone is in danger and cannot send help. Messages can be late or fail. If someone may need help now, call them, and call emergency services (119 in Taiwan, 911 in the United States, 112 in Europe). A quiet day in Vela is information, not an alarm, and a "Not okay" tap reaches the family, not emergency services, and words or notes passed on to the organiser, the weekly read and its readings are not a diagnosis.

Changes to this notice

This notice may change during the pilot; the date at the top says when it was last updated. If we change what we collect, why we use it, who receives it or how long we keep it, we will tell everyone in the pilot before the change applies, and ask again where consent is needed. Every version has a number and a date.