OVERVIEW

Vitalog ("we," "us," or "our") is a personal health and fitness tracking application accessible at myvitalog.com. We take your privacy seriously — especially because the data you log with us (meals, weight, sleep, mood, workouts) is personal and sensitive.

This Privacy Policy explains what information we collect, how we use it, and what control you have over it. By using Vitalog, you agree to the practices described here.

WHAT DATA WE COLLECT

We collect two categories of information:

We do not collect payment information (Vitalog is currently free). We do not collect location data. We do not use tracking pixels or advertising cookies.

HOW WE USE YOUR DATA

Your data is used exclusively to provide and improve Vitalog. Specifically:

• To display your logged data back to you across devices
• To calculate summaries, trends, BMI, and macro totals
• To power AI features — macro estimation, weekly summaries, and goal planning — by sending anonymized portions of your data to our AI provider (see Section 6)
• To send you transactional emails (account confirmation, password reset)
• To respond to support requests you submit through the Contact Us form
• To debug technical issues and improve app reliability

We do not use your data for advertising, profiling, or sale to third parties under any circumstances.

DATA STORAGE & SECURITY

Your data is stored in Supabase, a SOC 2 Type II certified cloud database platform. All data is encrypted in transit (TLS) and at rest (AES-256). Your password is never stored in plain text — it is securely hashed using industry-standard algorithms.

Access to your data is protected by authentication. Only you, logged into your account, can view or modify your personal health records. Vitalog staff do not routinely access individual user data.

We retain your data for as long as your account is active. If you delete your account or use the "Clear All Data" feature in Settings, your health data is permanently deleted from our systems within 30 days.

DATA SHARING

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Supabase — our database and authentication provider. They store your data but have no right to use it independently.
• Anthropic — our AI provider (see Section 6 for full details).
• Legal requirements — if required by law, court order, or to protect the rights and safety of our users.

We do not integrate with advertising networks, data brokers, or social media platforms.

AI FEATURES & THIRD PARTIES

Vitalog uses AI features powered by Anthropic's Claude API. When you use these features — macro estimation, weekly summaries, or the AI goal planner — relevant portions of your health data are sent to Anthropic's servers to generate a response.

Specifically:

• Macro Estimator: Sends only the food name you typed. No personal profile data is included.
• Weekly Summary: Sends a 7-day summary of your nutrition, sleep, weight, mood, and workout data along with your age, gender, height, and goals.
• AI Goal Planner: Sends your current weight, target weight, goal date, height, age, gender, and any notes you provide.
• AI Chat: Sends the text message you type. Your name and profile may be included for context.

You can choose not to use AI features at any time. All core tracking functionality works without them.

YOUR RIGHTS

You have the following rights regarding your data:

• Access: You can view all your data within the app at any time.
• Correction: You can edit any logged entry directly in the app.
• Deletion: Use "Clear All Data" in Settings to permanently delete all health data, or contact us to delete your account entirely.
• Portability: Contact us to request an export of your data in a machine-readable format.
• Opt-out of AI: Simply don't use the AI features — all data sent to Anthropic is triggered only by your explicit action.

If you are a resident of California, you have additional rights under the CCPA, including the right to know what personal information is collected and the right to non-discrimination for exercising your privacy rights.

If you are a resident of the European Economic Area, you have rights under GDPR, including the right to object to processing and the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at the address in Section 10.

CHILDREN'S PRIVACY

Vitalog is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account and associated data.

CHANGES TO THIS POLICY

We may update this Privacy Policy as Vitalog evolves. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice.

Your continued use of Vitalog after any changes constitutes acceptance of the updated policy.

CONTACT US

If you have questions about this Privacy Policy or want to exercise your data rights, you can reach us through the Contact Us form inside the Vitalog app (Settings → Contact Us), or by emailing us directly.

We aim to respond to all privacy-related inquiries within 5 business days.