Privacy Policy

This policy applies to the VITALi app on the App Store and Google Play. App Store and Google Play. It is written to be accurate to the app. The only cookie this website sets remembers the language you pick. If you tap Allow on its banner, it counts page visits with Cloudflare Web Analytics (Cloudflare, Inc.): the page address, referrer, browser and country, with no cookie and no identifier that follows you. If you tap Decline, nothing is sent.

This policy explains what VITALi ("the app", "we") does with your data, why, and how you control it.

The short version

VITALi works fully offline, with no account. What you log is stored on your phone.
Cloud sync is optional. If you create an account, your data is stored with Supabase so it reaches your other devices. It is never sold, never shared with advertisers, and never used to train a model.
The AI Coach is the one feature that sends health data to an AI service, and only if you choose to use it and agree first. Everything else (scores, trends, recommendations) is computed on your phone.
You choose, twice. Before you enter anything, VITALi asks whether it may store your health data. Later it asks whether ads may be personalised; that is off unless you turn it on. One standard for everyone, wherever you live. Our Consumer Health Data Policy (tryvitali.com/health-data) sets out the health-data side in full.
Ads on the Free plan only. The Free plan shows ads from Google AdMob. Google never receives your health data. Paid plans have no ads.
Crash reports are stripped of your data before they leave the phone; usage analytics are off unless you turn them on.
You can export everything, on every plan, and delete your account from inside the app.

1. Who is responsible

The controller of your personal data is Iwan Brossard, France. Contact: privacy@tryvitali.com.

2. Data stored on your phone

Everything below is stored in the app's private storage on your device. None of it is sent anywhere unless you turn on cloud sync (§3), use the AI Coach (§5), or, for the stripped technical data in §4 only, the app crashes.

Food and drink

Meals and foods logged, with calories and nutrients, including alcohol and caffeine
Water intake
Favourite foods, your own custom foods and recipes, and corrections you make to database foods
Fasting windows

Training and activity

Workouts, sets (including effort ratings), routines, exercises and personal records
Challenges you create and their progress
Daily steps
Gear (such as shoe or bike mileage) and the gyms you save with their equipment

Sleep and recovery

Sleep and naps, including sleep stages and heart rate when your watch provides them
Mindful minutes

Body

Weight and goal weight
Body measurements
Body composition (body fat, muscle mass, body water, visceral fat)

Health measures

Menstrual cycle days
Blood pressure readings
Symptoms and injuries, with their severity and body part
Supplements you take and when you took them
Readings imported from your watch (§6)

Habits and journal

Habits and the days you completed them
Journal entries: mood and energy scores, and any notes you write

About you

Your name (as the app greets you), age, height, sex and activity level
Your goals and daily targets, and the trackers you chose

App data

Reminders you set (scheduled on the phone; not server push notifications)
Your daily-use streak, stars, XP, achievements and cosmetic items
Import history (which file was imported and when, not the file itself)
Settings, including your theme, units, language, plan and your privacy choices

Backups made by your phone. On iPhone, the app's data is included in your iCloud or computer backups under Apple's terms, like other apps' data. On Android, the app opts out of Google's automatic app backup.

3. Cloud sync, if you create an account

If you sign in (Profile → Sign in to sync), we additionally process:

Your email address and password, handled by Supabase Auth. We never see your password.
An authenticator (two-factor) secret, if you turn two-factor on.
A copy of the data in §2, stored so only your signed-in account can read or change it, enforced by the database, not only by the app.
Your plan, as a record the app reads but cannot change (so a plan cannot be granted by editing the app).

Supabase stores it in the EU (Frankfurt, verified 2026-09-16). Supabase, Inc. is a US company; where data may be accessed from outside the EU, the transfer relies on the European Commission's standard contractual clauses in Supabase's data processing agreement (and the UK addendum to them).

4. Update checks, crash reports and analytics

None of these ever contains your health data: no food, weight, sleep, cycle, blood pressure, symptom, workout, journal or watch values, and no text you typed.

Update checks: Expo (650 Industries, Inc.). When the app starts, it asks Expo's update service whether a newer version of the app's code is available. That request carries your IP address, the app's version and platform, and a random installation identifier. It happens with or without an account.
Crash reports: Sentry (Functional Software, Inc.; EU data region, Frankfurt). When the app crashes or hits an error, it sends the error type, where in our code it happened, the screen's name (never its contents), the device model, OS and app version. Before a report leaves the phone, numbers, quoted text and email addresses are removed from it, and no account email, IP address or user identifier is attached. Kept up to 90 days.
Usage analytics: PostHog (PostHog Inc.; EU Cloud, Frankfurt). Off unless you turn it on. You are asked once, and can change it in Settings → Privacy. If you agree, the app sends events such as "first entry logged" or "plan upgraded", with a random identifier made on your phone, not your email or account. No session recording, no automatic capture of taps or screens. Kept 12 months. Turning it off stops events immediately.
Barcode lookups: Open Food Facts (Open Food Facts association, France). When you scan a barcode, the app sends the barcode's digits to Open Food Facts to find the product. The request carries your IP address and nothing else: no account, no health data. The product found is saved on your phone as one of your foods, so scanning it again sends nothing. Photos are never used for this; the camera only reads the barcode.
App store statistics (installs, crash counts) that Apple and Google give every developer, under their own policies.

5. The AI Coach

The Coach answers questions about your own data in a chat. To do that it has to send parts of your data to an AI service, which is why it is off until you open it, and asks first.

Before your first message the Coach shows exactly what it sends, to whom and for how long, with "Agree" and "Not now" as equal choices. Nothing is sent before you agree, and nothing is ever sent if you never open the Coach.
Sent with each message: what you ask, and a short summary of recent days: food and water, workouts, sleep, steps, weight, watch readings, your goals, and your age range, sex, height and activity level.
Sent only when your question needs it: cycle, blood pressure, symptoms, body measurements and composition, supplements, fasting, habits, routines, challenges, and journal mood and energy scores.
Never sent: your name, email or account details; your journal notes; where you train; settings, reminders and app data.
Photo meal logging (VITALi Max) sends the photo you take, once, to recognise the food.
Who receives it: Mistral AI (Paris, France), acting on our instructions only to produce the reply. It does not use your data to train its models, and deletes it after 30 days, the period it keeps requests to detect abuse of its service (Mistral AI's data processing addendum). Its sub-processors are listed on Mistral AI's Trust Center; any outside the EU are covered by standard contractual clauses.
What we keep on our servers: a count of the messages you have used and when, so your plan's allowance and limits work. Not your questions and not the replies; your conversations stay on your phone.
You can withdraw in Settings → Privacy → AI Coach. Nothing more is sent after that.

The Coach gives general wellness information. It is not a medical service and will tell you when something needs a doctor.

6. Watch and health-app data

If you connect Apple Health (iPhone) or Health Connect (Android), VITALi asks for read-only permission. It never writes to your health app. With your permission it reads:

Activity: steps, distance, floors climbed, elevation gained, active and total calories burned, exercise sessions
Heart and lungs: heart rate, resting heart rate, heart-rate variability, blood oxygen, respiratory rate, VO₂ max
Body: weight, height, body fat, lean body mass, bone mass, body water mass, basal metabolic rate
Health measures: blood pressure, blood glucose, body temperature, skin temperature, menstruation
Nutrition and hydration recorded by other apps
Sleep, including stages

What is read is stored with your other data on the phone (§2) and synced only if you use cloud sync. You can disconnect in the app, and revoke permission in your phone's Health or Health Connect settings.

Your "biological age" and similar figures are wellness estimates computed on your phone, not diagnoses.

7. Why we may use your data (legal bases)

Use	Legal basis (GDPR)
Storing your health data on your phone, and syncing it if you sign in	Your explicit consent (Art. 9(2)(a)), asked on its own screen before you enter anything; and performance of our contract with you (Art. 6(1)(b))
Sending data to the AI Coach	Your explicit consent (Art. 9(2)(a)), asked separately before first use
Reading watch data	Your explicit consent (Art. 9(2)(a)), through the platform's permission prompt
Your account and plan	Performance of our contract (Art. 6(1)(b))
Stripped crash reports and update checks	Our legitimate interest in the app working and being updated (Art. 6(1)(f))
Usage analytics	Your consent (Art. 6(1)(a)); off by default
Ads on the Free plan	Your consent (Art. 6(1)(a)) where the law requires it, asked by Google's consent form before any ad loads
Personalised ads	Your consent (Art. 6(1)(a)), our own switch, off unless you turn it on, for everyone

You can withdraw any consent at any time; this does not affect what was done before.

8. Advertising

The Free plan shows ads from Google AdMob (Google Ireland Limited in the EU, Google LLC elsewhere): a banner at the bottom of a few screens, and full-screen ads (the first about two minutes after you open the app, then one every five to ten minutes, only when you move between screens). Paid plans show no ads.

Personalised ads are off unless you turn them on, for everyone, wherever you live. VITALi asks once, at the end of setup, and you can change it any time in Settings → Privacy. Off means you still see ads, chosen from the kind of app you are in, your language and rough location, not from what you do elsewhere.
Only if you turn personalised ads on: on iPhone, Apple then asks whether VITALi may track you across other companies' apps, and Google may use your device's advertising identifier to tailor ads. Google then learns that this device uses VITALi, a health and fitness app. That is the only sharing you can turn on, and it is off by default.
Where the law requires it (such as the EU, the UK and Switzerland), Google's own consent form also asks before any ad loads. If you decline, no ad is requested. You can change that answer in Settings → Ad choices.
What Google receives: your IP address, device and app information, and how you interact with the ads; your advertising identifier only if you turned personalised ads on (and, on iPhone, allowed tracking). Google uses this to show and measure ads under its own policy (policies.google.com/technologies/ads).
What Google never receives: anything you log in VITALi. Ad requests carry no health data, no keywords from the app and no account details.

9. Service providers

Provider	Purpose	What it receives	Where, and what protects a transfer
Supabase, Inc.	Accounts and cloud sync (§3)	Your email, and your app data, only if you sign in	EU (Frankfurt); standard contractual clauses for any access from outside the EU
Expo (650 Industries, Inc.)	App update checks (§4)	IP address, app version, platform, random installation id	United States; EU-US Data Privacy Framework (with the UK and Swiss extensions)
Sentry (Functional Software, Inc.)	Crash reports (§4)	Stripped error reports; no health data	EU (Frankfurt); Data Privacy Framework and standard contractual clauses
PostHog Inc.	Usage analytics, only if you opt in (§4)	Named events and a random device id; no health data	EU (Frankfurt); Data Privacy Framework and standard contractual clauses
Resend	Sign-up and password emails (§3)	Your email address	EU (Ireland); Data Privacy Framework and standard contractual clauses
Google AdMob (Google Ireland Limited / Google LLC)	Ads on the Free plan only (§8)	Advertising identifier if allowed, IP address, device and app information, ad interactions; never health data	Worldwide; Data Privacy Framework and Google's standard contractual clauses
Mistral AI (France)	The AI Coach, only if you use it and agree (§5)	The data listed in §5	EU
Cloudflare, Inc.	Our website and forwarding emails you send us	What you write to us, and website visits	Worldwide network; Data Privacy Framework and standard contractual clauses
Open Food Facts	Barcode lookups (§4)	The barcode digits and your IP address, only when you scan	France
RevenueCat, Inc.	Subscriptions: checks with Apple and Google which plan you bought	Your purchases and renewals, and a random identifier or your account id; never health data	United States; standard contractual clauses in its data processing agreement
Apple / Google	App distribution, subscriptions and payments	What their stores process for every app and purchase	Their own terms
Apple Health / Health Connect	Read-only watch data (§6)	Nothing from us; VITALi only reads	On your phone

We never sell personal data. The only advertising partner is Google AdMob on the Free plan (§8), and it never receives your health data.

10. How long we keep it

On your phone: until you delete it or uninstall the app.
Cloud copy, login and plan: until you delete your account.
A record that you deleted an item is kept up to 90 days so your other devices remove it too.
Database backups roll off after 7 days (Supabase Pro).
Crash reports: up to 90 days. Analytics events: 12 months. Coach message counts: while your account exists, and deleted with it. What the Coach receives, at Mistral AI: 30 days.

11. Your controls and rights

Export your data: Settings → Your data → Export data (CSV or JSON), on every plan including Free.
Delete your account: Profile → Account & Security → Delete account. This removes your synced data and your login. If anything goes wrong, the app tells you and nothing is half-deleted.
Delete what is on your phone: uninstall the app. Signing out keeps your data on the phone, by design.
Stop syncing: sign out in Profile → Account & Security. A session unused for 30 days signs out on its own.
Turn personalised ads and analytics on or off, and withdraw from the AI Coach, in Settings → Privacy.
Withdraw consent to store health data: delete it (Settings → Your data, or uninstall), and delete your account if you synced. VITALi cannot keep working without storing it, which the consent screen says.
Two-factor authentication: Profile → Account & Security.

Under the GDPR you can ask us for access to, correction, deletion or a copy of your data, object to or restrict its use, and withdraw consent. Write to privacy@tryvitali.com. You can also complain to the CNIL (www.cnil.fr), or to the data protection authority where you live.

One policy, one standard, wherever you live. We apply this policy and our Consumer Health Data Policy (tryvitali.com/health-data) to everyone, at the level of the strictest law we operate under, rather than a weaker version for some countries. VITALi is operated from France, so if you use it outside the European Union your data is processed in the EU and by the providers in §9 (their countries and safeguards are listed there). Whatever rights your local law gives you, you can use them by writing to privacy@tryvitali.com, and you can complain to your own data protection authority.

12. Age

VITALi is for people aged 16 and over. It is not directed at younger users, and the app does not let you enter an age under 16. We do not knowingly collect data from anyone younger.

13. Changes

We update the "Last updated" date when this policy changes. A change to what the AI Coach sends asks for your agreement again before the next message.

14. Contact

privacy@tryvitali.com for anything about your data · hello@tryvitali.com for everything else