Consumer Health Data Policy
What health data VITALi handles, why, who receives it, and how you control it. One standard for everyone, wherever you live.
Last updated 16 September 2026
This policy explains what health data VITALi handles, why, where it comes from, who it is shared with, and how you control it. "Health data" here means any information about your body, health or fitness that VITALi stores or that could be worked out from it.
1. Who we are
VITALi is run by Iwan Brossard, France. Contact: privacy@tryvitali.com.
2. Your two consents
- To collect. Before you enter anything, VITALi asks, on its own screen, whether it may store your health data. It cannot work without it, and the screen says so. You can withdraw by deleting your data (§7).
- To share. The only sharing you can turn on is personalised ads (§5). It is off unless you turn it on, and you can change it any time in Settings → Privacy.
The AI Coach asks for its own, separate consent the first time you open it, because it sends health data to an AI service to answer you (§5).
3. The health data we collect, and why
| Category | Examples | Why |
|---|---|---|
| Nutrition | Meals, calories and nutrients, water, alcohol, caffeine, fasting | To track your intake and goals |
| Activity and training | Workouts, sets, steps, distance, active calories | To track your training and daily activity |
| Sleep and recovery | Sleep times and stages, naps, sleeping heart rate, mindful minutes | To show sleep patterns and recovery |
| Body measurements | Weight, height, body measurements, body composition | To track changes over time |
| Health measures | Menstrual cycle, blood pressure, symptoms and injuries, supplements, heart rate, HRV, blood oxygen, VO₂ max, temperature, blood glucose read from your health app | To show trends you choose to track |
| Wellbeing | Mood and energy scores, journal notes | To show how you feel over time |
| Derived estimates | Daily score, readiness, biological age, training load, insights | Computed on your phone from the above, to summarise it for you |
| About you | Age, sex, height, activity level, goals | To suggest targets and compute estimates |
We collect no precise location, no biometric identifiers (such as face or fingerprint data) and no genetic data. We never use health data for advertising and never sell it.
4. Where it comes from
- You, when you log something.
- Apple Health or Health Connect, only if you connect them, read-only, through the phone's permission prompt.
- Your phone, which computes the derived estimates. Nothing is inferred on our servers.
5. Who receives it
By default, no one: your health data stays on your phone. It leaves it only in these cases:
| Who | What | When | Role |
|---|---|---|---|
| Supabase (hosting, EU) | A copy of your data | Only if you create an account and sync | Processor: stores it for us, uses it for nothing else |
| Mistral AI (EU) | Your question and a summary of recent data (listed on the Coach's consent screen) | Only when you use the Coach, after its own consent | Processor: produces the reply, keeps it 30 days for abuse monitoring, never trains on it |
| Google (AdMob) | Not your health data. If you turn personalised ads on, Google learns that this device uses VITALi, a health and fitness app, and may use your advertising identifier to tailor ads | Only if you turn personalised ads on | Third party, under its own policy |
No other company receives your health data. Crash reports and opt-in analytics carry none (Privacy Policy §4).
6. Your rights
Wherever you live, you can:
- See what health data we hold about you and the list of everyone it was shared with (§5).
- Get a copy: Settings → Your data → Export, on every plan, or ask us.
- Delete it: in the app (your account deletion removes every synced copy), or ask us. We also make sure our processors delete it.
- Withdraw consent: turn personalised ads off, stop using the Coach, or delete your data. Withdrawing never costs you a feature you are paying for, except what needs that consent to work.
- Not be treated differently for using any of these rights.
7. How to use them
- In the app: Settings → Privacy (sharing choices) and Settings → Your data (export and delete).
- By email: privacy@tryvitali.com, from the address on your account, so we know it is you. We answer within one month, and tell you if a complex request needs more time (never more than 45 extra days).
- Appeal: if we refuse or you disagree with our answer, reply with "Appeal" in the subject. We review it again within 45 days and explain the outcome. You can also contact your data protection authority, or in Washington State the Attorney General (www.atg.wa.gov).
8. How we protect it
Stored in the app's private storage on your phone; synced copies readable only by your account, enforced by the database; encrypted in transit; optional two-factor sign-in; no health data in logs, crash reports or analytics.
9. Changes
We update the "Last updated" date when this policy changes. If what we collect or share changes, VITALi asks for your consent again before it applies.