Privacy Policy

• Health & fitness data — read from Apple Health on iPhone or Health Connect on Android, with your explicit permission (e.g. heart rate, HRV, sleep, workouts, steps, energy). VitalVault only reads the data types you approve. Workouts you record with the VitalVault Apple Watch app are saved to Apple Health with your permission.
• Location (workout routes) — when you record an outdoor workout on Apple Watch and allow location access, VitalVault records the GPS route of that workout. The route is stored with the workout and synced to your account. On Android, VitalVault reads the routes of workouts that your watch or fitness app saved to Health Connect, when you allow it. Location is used only during a workout you start, never in the background otherwise, and never for advertising.
• App-generated data — content you create in the app: nutrition/meal logs, workout notes and reviews, energy/recovery calculations, settings and preferences. My health answers include your self-reported food avoidance preferences, typical workout frequency and personal focus. These answers are stored against your account and cached on your device. Food preferences are used to highlight relevant product information; they are not sent to Open Food Facts with barcode queries.
• Account data — an account identifier and email address provided through our authentication provider (Google Firebase Authentication) when you sign in with Apple, Google or email. If you use Sign in with Apple with “Hide My Email”, we only receive Apple’s relay address.
• Purchase data — transaction identifiers and subscription status used to verify VitalVault Pro purchases with Apple. Apple handles payment card details.
• Usage statistics (optional) — only if you tap Allow when the app asks (or turn it on in Settings → Privacy), the app sends anonymous usage events to Google Analytics for Firebase: which screens and features you use, such as opening a workout, sharing it or viewing the subscription screen, with an app-generated instance ID. These events never contain health or fitness values, workout routes or anything read from Apple Health or Health Connect, are not linked to your account, and are never used for advertising (the advertising ID is not collected). You can turn this off at any time in Settings → Privacy.
• Technical data — requests to the website and backend can include IP addresses, request details and technical logs processed by our hosting providers.

• VitalVault calculates dashboard insights on your device and also syncs to our backend. Health samples, workouts and supported app records may be sent over HTTPS to our Google Cloud backend and stored against your account. On-device calculation does not mean that all data stays on your device.
• Where it is stored — our backend and database run in Google Cloud in the European Union (Warsaw, Poland), for users in every country. When you request an AI review, the inputs listed in §3 are processed by Anthropic in the United States. Sign-in is handled by Google Firebase Authentication, whose servers may be outside your country.
• Selected app preferences and workout templates sync through your private iCloud (CloudKit) database so they are available on your other Apple devices. This is separate from Apple’s own Health storage and sync.
• Records are stored on your device and in the services used by the enabled features. Deletion covers the application database and, when the identity deletion service is configured, the sign-in account. A hash of the deleted account identifier is retained to prevent unexpired access tokens from recreating data. Technical logs, backup copies and older local or iCloud records require separate handling (see §6).

AI workout reviews, AI Energy reviews and, where available, AI meal entry send relevant inputs through our backend to Anthropic, our AI provider, only when you request them. The app asks for your permission before the first request of each kind and lists what will be sent. Inputs can include workout measurements (heart rate, pace, splits, intervals) or Energy and recovery summaries, or the meal text you typed; workout routes are not sent. Anthropic processes these inputs to generate your result and does not use them to train its models. AI results can be wrong; review them before relying on them.

You can choose to share a workout as a public link. Anyone with the link can see the workout summary you shared and, for outdoor workouts, its route map. To protect your home or start location, the first and last 250 m of the route are removed before publishing. Nothing is shared unless you tap Share. Contact us to remove a link; deleting your account removes all your shared links.

We use your data only to provide the app’s functionality: computing recovery, energy and trend insights, storing and syncing your logs, generating AI reviews you request, and managing your subscription. The app does not include advertising or advertising-tracking features.

We do not sell your data or share it for advertising. The app and website use these service providers, depending on the features you use:

• Google Firebase Authentication — sign-in.
• Google Analytics for Firebase — optional usage statistics, only if you allow them (see §1).
• Google Cloud — website and backend hosting and database.
• Cloudflare — website delivery and HTTPS.
• Anthropic — only when you use AI features (see §3).
• Apple — Sign in with Apple, Health access, purchases and iCloud sync.
• Food catalog providers — food searches and barcode lookups, where Nutrition is available.
• Strava — workout uploads you request after connecting Strava, where available.

• Delete app account data — Settings → Account → Delete account removes your account, your synced data and your shared workout links from our backend and deletes your sign-in account. Contact [email protected] for help removing remaining iCloud, local and backup records. Deleting app data does not delete your Apple Health or Health Connect records or cancel an App Store subscription.
• Data access — contact us to request access to data associated with your account. The app does not provide a one-click export of all records.
• Revoke permissions — you can revoke Health access at any time in the iPhone Settings → Privacy & Security → Health, and location access in Settings → Privacy & Security → Location Services. On Android, use Health Connect → App permissions → VitalVault, and Settings → Location for location access.
• Usage statistics — turn them on or off at any time in Settings → Privacy.
• Access / correction — contact us to access or correct your personal data.

Residents of Washington, Nevada and other US states with consumer health data laws can read how we collect, use and share health data, and how to exercise their rights, in our Consumer Health Data Privacy Policy.

VitalVault is not directed to children under 16 and we do not knowingly collect their data.

We may update this policy; material changes will be reflected here with a new “last updated” date.

Questions or requests: [email protected].