Privacy Policy

Before the app is released. This policy applies to the VITALi app from its release in the App Store and Google Play. It is written to be accurate to the app and is pending legal review. This website itself sets no cookies and runs no analytics.

This policy explains what VITALi ("the app", "we") does with your data, why, and how you control it.

The short version

VITALi works fully offline, with no account. What you log is stored on your phone.
Cloud sync is optional. If you create an account, your data is stored with Supabase so it reaches your other devices. It is never sold, never shared with advertisers, and never used to train a model.
The AI Coach is the one feature that sends health data to an AI service, and only if you choose to use it and agree first. Everything else — scores, trends, recommendations — is computed on your phone. Not yet released The Coach is not released yet; §5 applies from the version that adds it.
No advertising networks. The Free plan shows VITALi's own upgrade cards, built into the app. No ad SDK, no advertising identifier, no tracking across apps.
Crash reports are stripped of your data before they leave the phone; usage analytics are off unless you turn them on.
You can export everything, on every plan, and delete your account from inside the app.

1. Who is responsible

The controller of your personal data is Iwan Brossard, France. Contact: privacy@tryvitali.com.

2. Data stored on your phone

Everything below is stored in the app's private storage on your device. None of it is sent anywhere unless you turn on cloud sync (§3), use the AI Coach (§5), or — for the stripped technical data in §4 only — the app crashes.

Food and drink

Meals and foods logged, with calories and nutrients, including alcohol and caffeine
Water intake
Favourite foods, your own custom foods and recipes, and corrections you make to database foods
Fasting windows

Training and activity

Workouts, sets (including effort ratings), routines, exercises and personal records
Challenges you create and their progress
Daily steps
Gear (such as shoe or bike mileage) and the gyms you save with their equipment

Sleep and recovery

Sleep and naps, including sleep stages and heart rate when your watch provides them
Mindful minutes

Body

Weight and goal weight
Body measurements
Body composition (body fat, muscle mass, body water, visceral fat)

Health measures

Menstrual cycle days
Blood pressure readings
Symptoms and injuries, with their severity and body part
Supplements you take and when you took them
Readings imported from your watch (§6)

Habits and journal

Habits and the days you completed them
Journal entries: mood and energy scores, and any notes you write

About you

Your name (as the app greets you), age, height, sex and activity level
Your goals and daily targets, and the trackers you chose

App data

Reminders you set (scheduled on the phone; not server push notifications)
Your daily-use streak, stars, XP, achievements and cosmetic items
Import history (which file was imported and when — not the file itself)
Settings, including your theme, units, language, plan and your privacy choices

Backups made by your phone. On iPhone, the app's data is included in your iCloud or computer backups under Apple's terms, like other apps' data. On Android, the app opts out of Google's automatic app backup.

3. Cloud sync, if you create an account

If you sign in (Profile → Sign in to sync), we additionally process:

Your email address and password, handled by Supabase Auth. We never see your password.
An authenticator (two-factor) secret, if you turn two-factor on.
A copy of the data in §2, stored so only your signed-in account can read or change it — enforced by the database, not only by the app.
Your plan, as a record the app reads but cannot change (so a plan cannot be granted by editing the app).

Supabase stores it in the EU (Frankfurt, verified 2026-09-16). Supabase, Inc. is a US company; where data may be accessed from the US, the transfer relies on the safeguards in Supabase's data processing agreement.

4. Update checks, crash reports and analytics

None of these ever contains your health data — no food, weight, sleep, cycle, blood pressure, symptom, workout, journal or watch values, and no text you typed.

Update checks — Expo (650 Industries, Inc.). When the app starts, it asks Expo's update service whether a newer version of the app's code is available. That request carries your IP address, the app's version and platform, and a random installation identifier. It happens with or without an account.
Crash reports — Sentry (Functional Software, Inc.; EU data region, Frankfurt). When the app crashes or hits an error, it sends the error type, where in our code it happened, the screen's name (never its contents), the device model, OS and app version. Before a report leaves the phone, numbers, quoted text and email addresses are removed from it, and no account email, IP address or user identifier is attached. Kept up to 90 days.
Usage analytics — PostHog (PostHog Inc.; EU Cloud, Frankfurt). Off unless you turn it on. You are asked once, and can change it in Settings → Privacy. If you agree, the app sends events such as "first entry logged" or "plan upgraded", with a random identifier made on your phone — not your email or account. No session recording, no automatic capture of taps or screens. Kept 12 months. Turning it off stops events immediately.
App store statistics (installs, crash counts) that Apple and Google give every developer, under their own policies.

5. The AI Coach Not yet released

The Coach answers questions about your own data in a chat. To do that it has to send parts of your data to an AI service, which is why it is off until you open it, and asks first.

Before your first message the Coach shows exactly what it sends, to whom and for how long, with "Agree" and "Not now" as equal choices. Nothing is sent before you agree, and nothing is ever sent if you never open the Coach.
Sent with each message: what you ask, and a short summary of recent days — food and water, workouts, sleep, steps, weight, watch readings, your goals, and your age range, sex, height and activity level.
Sent only when your question needs it: cycle, blood pressure, symptoms, body measurements and composition, supplements, fasting, habits, routines, challenges, and journal mood and energy scores.
Never sent: your name, email or account details; your journal notes; where you train; settings, reminders and app data.
Photo meal logging (VITALi Max) sends the photo you take, once, to recognise the food.
Who receives it: the AI provider, named here before the Coach is released, acting on our instructions only to produce the reply. It does not use your data to train its models and keeps it for a period stated here before the Coach is released.
What we keep on our servers: a count of the messages you have used and when, so your plan's allowance and limits work. Not your questions and not the replies; your conversations stay on your phone.
You can withdraw in Settings → Privacy → AI Coach. Nothing more is sent after that.

The Coach gives general wellness information. It is not a medical service and will tell you when something needs a doctor.

6. Watch and health-app data

If you connect Apple Health (iPhone) or Health Connect (Android), VITALi asks for read-only permission. It never writes to your health app. With your permission it reads:

Activity: steps, distance, floors climbed, elevation gained, active and total calories burned, exercise sessions
Heart and lungs: heart rate, resting heart rate, heart-rate variability, blood oxygen, respiratory rate, VO₂ max
Body: weight, height, body fat, lean body mass, bone mass, body water mass, basal metabolic rate
Health measures: blood pressure, blood glucose, body temperature, skin temperature, menstruation
Nutrition and hydration recorded by other apps
Sleep, including stages

What is read is stored with your other data on the phone (§2) and synced only if you use cloud sync. You can disconnect in the app, and revoke permission in your phone's Health or Health Connect settings.

Your "biological age" and similar figures are wellness estimates computed on your phone, not diagnoses.

7. Why we may use your data (legal bases)

Use	Legal basis (GDPR)
Storing and syncing your health data at your request	Your explicit consent (Art. 9(2)(a)), given by choosing to log it and to sign in; and performance of our contract with you (Art. 6(1)(b))
Sending data to the AI Coach	Your explicit consent (Art. 9(2)(a)), asked separately before first use
Reading watch data	Your explicit consent (Art. 9(2)(a)), through the platform's permission prompt
Your account and plan	Performance of our contract (Art. 6(1)(b))
Stripped crash reports and update checks	Our legitimate interest in the app working and being updated (Art. 6(1)(f))
Usage analytics	Your consent (Art. 6(1)(a)) — off by default

You can withdraw any consent at any time; this does not affect what was done before.

8. Advertising

VITALi uses no advertising network. The Free plan shows VITALi's own upgrade cards, which are built into the app and send nothing. There is no advertising identifier, no cross-app tracking, and no ad-related data collection. If that ever changes, this policy changes first.

9. Service providers

Provider	Purpose	What it receives
Supabase, Inc.	Accounts and cloud sync (§3)	Your email, and your app data, only if you sign in
Expo (650 Industries, Inc.)	App update checks (§4)	IP address, app version, platform, random installation id
Sentry (Functional Software, Inc.; EU region)	Crash reports (§4)	Stripped error reports; no health data
PostHog Inc. (EU Cloud)	Usage analytics, only if you opt in (§4)	Named events and a random device id; no health data
The AI provider (named before release) Not yet released	The AI Coach, only if you use it and agree (§5)	The data listed in §5
Apple / Google	App distribution, subscriptions and payments	What their stores process for every app and purchase
Apple Health / Health Connect	Read-only watch data (§6)	Nothing from us; VITALi only reads

We never sell personal data or share it for advertising.

10. How long we keep it

On your phone: until you delete it or uninstall the app.
Cloud copy, login and plan: until you delete your account.
A record that you deleted an item is kept up to 90 days so your other devices remove it too.
Database backups roll off after 7 days (Supabase Pro).
Crash reports: up to 90 days. Analytics events: 12 months. Coach message counts Not yet released: stated here when the Coach is released.

11. Your controls and rights

Export your data: Settings → Your data → Export data (CSV or JSON), on every plan including Free.
Delete your account: Profile → Account & Security → Delete account. This removes your synced data, and your login with it where our server supports it; if only the data could be removed, the app tells you, and you can email us to remove the login.
Delete what is on your phone: uninstall the app. Signing out keeps your data on the phone, by design.
Stop syncing: sign out in Profile → Account & Security. A session unused for 30 days signs out on its own.
Turn analytics off, and Not yet released withdraw from the AI Coach, in Settings → Privacy.
Two-factor authentication: Profile → Account & Security.

Under the GDPR you can ask us for access to, correction, deletion or a copy of your data, object to or restrict its use, and withdraw consent — write to privacy@tryvitali.com. You can also complain to the CNIL (www.cnil.fr), or to the data protection authority where you live.

12. Age

VITALi is for people aged 16 and over. It is not directed at younger users, and the app does not let you enter an age under 16. We do not knowingly collect data from anyone younger.

13. Changes

We update the "Last updated" date when this policy changes. A change to what the AI Coach sends asks for your agreement again before the next message.

14. Contact

privacy@tryvitali.com for anything about your data · hello@tryvitali.com for everything else