Consumer Health Data Privacy Policy

• Apple Health (iPhone) or Health Connect (Android) data you allow us to read: heart rate, heart-rate variability, resting and walking heart rate, respiratory rate, blood oxygen, body temperature, sleep, workouts, steps, distance, active and resting energy, and body measurements such as weight and height.
• Workouts you record with the VitalVault Apple Watch app, including heart rate, pace, cadence and, for outdoor workouts, the GPS route.
• Scores we calculate from that data: Recovery, Energy Bank, sleep and strain scores, training load, biological age estimate and trends.
• Answers you give in the app: how often you work out, your personal focus, and food you avoid (such as lactose or gluten).
• AI reviews you request of your workouts and Energy, and, where available, meals you log.

We collect consumer health data only from you: from Apple Health or Health Connect with your permission, from the VitalVault Apple Watch app, and from what you enter in the app. We do not buy health data or collect it from other companies.

• To calculate and show your scores, trends and workout details.
• To sync your data to your account so it is available on your devices.
• To generate AI reviews, only when you ask for one.
• To share a workout as a public link, only when you tap Share.
• To keep the service secure and working, and to provide support you request.

We do not use consumer health data for advertising, and we do not sell it.

We collect consumer health data only after you consent: Apple asks for your permission before VitalVault can read Health data or record a workout, and you choose which data types to allow. We ask for separate consent before the first time any of your data is sent to our AI provider. You can withdraw consent at any time (see §7).

We share consumer health data only with these service providers, to run the app:

• Google Cloud (hosting and database, in the European Union) and Google Firebase Authentication (sign-in).
• Anthropic (AI provider, United States), only the inputs needed for an AI review you request, after your consent. Anthropic does not use them to train its models.
• Apple, for Apple Health, iCloud sync of your app settings, and subscriptions.
• Strava, only workouts you choose to upload after connecting Strava, where available.
• Anyone with a link you share, which shows the workout summary and route map you chose to share.

We may also disclose data if the law requires it. We have no affiliates that receive consumer health data.

Consumer health data is stored in Google Cloud in the European Union (Warsaw, Poland) and on your devices. We keep it while your account exists and delete it from our servers when you delete your account.

• Access: confirm whether we hold your consumer health data, get a copy of it, and get a list of the third parties we shared it with.
• Delete: in the app, go to Settings → Account → Delete account, or email us. We delete the data from our servers and tell our service providers to delete it too.
• Withdraw consent: turn off Health access in iPhone Settings → Privacy & Security → Health → VitalVault (on Android: Health Connect → App permissions → VitalVault), stop using AI features, or delete your account.
• Appeal: if we decline a request, reply to our answer to appeal, and we will review it. If you are not satisfied, you can contact your state Attorney General.

To make a request, email [email protected] from the address on your account. We answer within 45 days. We will not treat you differently for exercising these rights.

Digital Bee d.o.o., Zelenice 29, 52220 Labin, Croatia — [email protected]