Privacy Policy

This is the same text as in the Vital app, under Settings.

1. What We Collect

Account info (email, display name, password hash). Health and fitness data you log (food entries and macros, body weight, workouts). The vitamins, supplements and medication you choose to track, with their doses, schedules and when you mark each one taken or skipped. The water you log each day and your water goal. Meals and foods you save for reuse (including your own foods and the extra nutrients you log), the meal each food belongs to, your fasting start and end times, your diet and allergy choices for recipes, the recipes you mark as favorites, the calorie and macro targets you set, your shopping list and your weekly meal plan. Screen time and app usage data you choose to track in the app. We do not collect your AI Coach conversations or the AI service key you enter: both stay on your device (see section 3). The one exception is when you tap Report on an AI Coach reply: that reply, the reason you pick, any note you add, and your question only if you tick the box, are sent to us so we can review the reply. Basic device and diagnostic info (app version, crash reports). The camera reads food barcodes on your device; those images are not saved or uploaded. If you use progress photos, the photos you take or choose are saved only on your phone and are never uploaded to us; you can delete them at any time in Settings. A list of the products you scanned recently is kept on your phone so a repeat scan works offline; it is not sent to us. If you import a file exported from another app, the file is read on your device, and only the food, workout and weight entries you choose to import are added to your log. If you use an invite code, we keep the code, which account invited which, and when the reward conditions were met, so we can give the free days. We do not collect your precise location or contacts.

2. How We Use It

To run the Service: calculating your targets, storing your logs, and powering the dashboard, progress charts and the Coach. We also use aggregated, de-identified usage data to improve the app. We do not use your health data to serve you ads, and we do not sell your health data to data brokers or advertisers.

3. Who We Share It With

The AI service you choose, only if you turn on the AI Coach (Google, OpenRouter, Anthropic or OpenAI). You connect it with your own key, which is kept in your device’s secure storage. Each time you ask the AI Coach something, your device sends the request directly to that service: your question, the recent messages in that chat, the Coach’s instructions, and only the parts of your log you switch on in AI Coach settings (daily targets, today’s totals, recent food, weight trend, workouts). Vital’s servers never see your key or your AI Coach chats, and the chat is kept only on your device until you delete it. The AI service handles what you send under its own terms and privacy policy, which differ between services; for example, on Google’s free tier Google may use what you send to improve its products and people at Google may read it. A payment processor (via Apple App Store / Google Play billing), which handles your payment details directly, Vital never sees your card number. Infrastructure providers that host the app’s servers and database. Open Food Facts, a public food database, when you scan a barcode or search for a food: only the barcode number or the words you typed are sent, never a photo or anything about you. We don’t sell your personal data to anyone.

4. How Long We Keep It

We keep your data for as long as your account is active. If you delete your account from Settings, we delete your logged data within 30 days, except where we’re required to keep billing records longer for tax or legal reasons.

5. Your Rights

You can export a copy of your data from Settings > Export my data. You can correct or delete your data by editing it in the app or deleting your account. If you’re in a region with additional data rights (like the EU/UK or California), you can also request a copy or deletion of your data by contacting us directly.

6. Security

Passwords are hashed, never stored in plain text. Data in transit is encrypted. Access to production data is limited to what’s needed to operate the Service.

7. Children's Privacy

Vital isn’t directed at children under 16, and we don’t knowingly collect data from them. If you believe a child has created an account, contact us and we’ll remove it.

8. Changes to This Policy

If this policy changes in a material way, we’ll notify you in the app before the change takes effect.

9. Contact

Questions about this policy or your data can be sent to the support address listed on the Vital App Store or Google Play listing.