Privacy Policy

01Overview

Welcome to VitalUp ("we", "us", "our", or the "Application"). VitalUp is a health, fitness and lifestyle app that helps you track activity and workouts, sleep, nutrition, hydration, weight, mood and screen time, with an AI coach (Vita) and an optional social Arena (points, badges, friends and leaderboards).

This Privacy Policy explains what data we collect, why we need it, who processes it, what other users can see, and your rights over your data.

02Google Health Connect and Apple Health

VitalUp can read fitness and health data recorded by your Android device and compatible wearables through Google Health Connect. VitalUp only reads from Health Connect; it never writes to it. You choose which data types to allow, and you can withdraw access at any time in the Health Connect settings.

Limited Use commitment

VitalUp's use of information received from Google Health Connect adheres to the Health Connect Permissions Policy, including the Limited Use requirements:

1. User-facing features only: Health Connect data is used only to provide the features described in the table below (dashboard, goals, sleep and weight tracking, workout history, the Vita coach and Arena points).
2. No sale: We never sell, rent or otherwise monetise Health Connect data, and never give it to data brokers, insurers or advertisers.
3. No advertising: We never use or transfer Health Connect data for advertising of any kind.
4. Transfers we make, and why:
   • To our backend (Supabase), to back up and sync your weight, workouts and daily figures.
   • To our AI processors (Google Gemini, with Groq as a fallback), only if you switch on "Include Health Connect readings" for Vita, so it can answer with your current figures. It is off until you turn it on, and you can turn it off at any time.
   • Daily steps and sleep from Health Connect count towards your Arena points, streaks and badges. Those totals (not the raw readings) are visible to your friends and to other members of your communities, unless you hide yourself from leaderboards (see section 6).
5. No human reading: We do not let people read your Health Connect data, except with your explicit consent (for example, when you send it to support), for security purposes, or where the law requires it.
6. Minimal access: VitalUp only requests the data types listed below.

Data types VitalUp reads

Apple Health (iPhone)

On iPhone, VitalUp reads the same kinds of data from Apple Health (HealthKit) instead of Health Connect: steps, workouts, sleep (time asleep, sleep stages and time in bed) and weight. VitalUp only reads from Apple Health; it never writes to it. You choose which data types to allow when VitalUp asks, and you can change this at any time in the Health app (Sharing > Apps > VitalUp).

Apple Health data is used exactly as described above for Health Connect and for the purposes in the table: only for VitalUp's features, never sold, never used for advertising or marketing, and never given to data brokers, insurers or advertisers. It is sent to our AI processors only if you switch on "Include Apple Health readings" for Vita, and daily step and sleep totals count towards Arena points, which your friends and communities can see unless you hide yourself from leaderboards.

03Information we collect and why

Depending on which features you use, we collect the following categories of data.

A. Account and profile

• Account: email address and password (stored hashed by Supabase Auth), or your Google account's name, email and photo if you sign in with Google.
• Profile: name, username, profile photo, date of birth, gender, height, weight, goal weight, city and country (if you set them, used for local leaderboards) and your time zone (so daily scores and the weekly summary follow your day).
• Health questionnaire (onboarding): activity level, dietary preference and goals, and, if you answer them, health conditions, medicines, allergies, smoking and self-reported blood pressure. These answers personalise your goals, diet plans and Vita.

B. Activity, hydration and wellness logs

• Logs: water, meals (food names and nutrition), sleep, weight, mood and stress check-ins, and workouts, including the GPS route of outdoor workouts (precise location), duration, distance, pace, calories and heart rate from a Bluetooth strap. Logs are stored on your device and backed up to our servers.
• Settings and plans: goals, reminders, app settings, workout notes and your diet plan are backed up to our servers so they can be restored on sign-in.
• Screen time: app usage totals read with Usage Access stay on your device (see section 4). Your screen-time limit is backed up with your settings.
• Vita chats: your conversations with Vita are kept on your device. Each message is sent to our AI processors to get an answer (see section 5), but chats are not stored on our servers.
• Arena data: daily scores, points, levels, streaks, rest days, badges, awards, friends, cheers, communities and challenges.
• Support: messages you send through Contact Support, with basic diagnostics (app version, device model, OS version).

C. Meal photos and barcodes

• When you use the Food Scanner, the photo of your meal or nutrition label is sent to our AI processors to recognise the food and estimate nutrition. Photos are not stored on our servers; a copy stays on your device with the meal log until you delete it or sign out.
• Barcode lookups are checked against our product catalogue, USDA FoodData Central and Open Food Facts. Open Food Facts is contacted directly from your device, so it receives the barcode and your IP address.
• Products you add yourself (name and nutrition for a barcode) are added to VitalUp's shared product catalogue so other users can find them. They are saved without your name or account.

D. Usage analytics and crash reports

• Firebase Analytics: automatic usage events (first open, app sessions, screens viewed and time in app), device information (model, OS version, language, approximate region from IP) and device identifiers, linked to a pseudonymous account ID (a random ID, not your name or email). We do not send health figures, food names or anything you type. You can switch it off in Settings > Privacy & security > Share usage analytics.
• Firebase Crashlytics: crash and error reports (stack trace, app version, device model, OS version), linked to your pseudonymous account ID so we can find related errors. Health data and database contents are removed from error reports before they are sent.

04Device permissions

VitalUp asks for permissions only when you use the feature that needs them.

On iPhone

iPhone asks you before VitalUp can use each of these, the first time a feature needs it:

• Location (While Using the App): records your route, distance and pace during a GPS workout. If you lock the screen while a workout is recording, iPhone shows the location indicator until you stop. VitalUp never asks for "Always" location.
• Camera and Photos: meal and nutrition label photos, barcodes, and food photos you pick from your library.
• Motion & Fitness: counts steps during workouts.
• Bluetooth: connects Bluetooth heart rate straps.
• Media & Apple Music: plays music from your library during workouts.
• Face ID: the optional app lock. Verification happens entirely in iOS; VitalUp and our servers never receive biometric data.
• Notifications: reminders you set, Arena and friend notifications and the weekly summary.

Screen time tracking and the phone-based sleep estimate are not available on iPhone.

05AI features: Vita, diet plans and the Food Scanner

VitalUp's AI features run through our servers, which send your request to Google Gemini and, if Gemini is unavailable, to Groq (which runs open models such as Llama). Your name, email and account details are not included in these requests.

• Vita AI coach: your message, the last few messages of the conversation, and a summary of your data: age, gender, height, weight and goal weight, goal, activity level, dietary preference, health questionnaire answers (health conditions, medicines, allergies, smoking, self-reported blood pressure), today's and recent water, sleep, meals and calories, steps, workouts, weight trend, mood and stress check-ins, today's screen time and your active diet plan. Health Connect readings (steps, sleep and imported workouts) are included only if you switch on "Include Health Connect readings" ("Include Apple Health readings" on iPhone). Vita shows a notice explaining this before you first use it.
• Diet plans: your calorie and macro target, dietary preference, allergies and plan preferences, and any change you ask for.
• Food Scanner: the meal or label photo, or the food name or barcode you searched. Barcode lookups may use Google Search through Gemini to find the product.

The providers process each request to produce the answer. Depending on the service tier used, a provider may keep requests for a limited time and may use them to improve its services, under its own terms. We never sell this data or use it for advertising. If you'd rather not share this data, don't use Vita, diet plan generation or photo scanning; the rest of the app works without them.

06Arena: what other users see

The Arena is VitalUp's social and points area. Your daily totals (including steps and sleep from Health Connect or Apple Health, water, meals, workouts and check-ins) earn points, streaks and badges on our servers.

• Visible to other users by default: your username, display name, profile photo, city and country (if set), level, points, streaks, badges, awards and leaderboard ranks appear on leaderboards in your communities, and to your friends.
• Not visible to others: your email, your logs (individual meals, weights, sleep sessions, routes), your health questionnaire answers and your Vita chats.
• How to hide: turn off leaderboard visibility in Settings > Privacy & security to leave the leaderboards and community rankings. Friends you have accepted then see only your username, display name, photo and level.

07Service providers

We use the following providers to run VitalUp. Each receives only the data needed for its job.

• Supabase (authentication, database, file storage, server functions): stores your account, profile, backed-up logs, Arena data and profile photo.
• Google Gemini and Groq: AI processing for Vita, diet plans and the Food Scanner (see section 5).
• Google Firebase: push notifications (Cloud Messaging), usage analytics (Analytics) and crash reports (Crashlytics).
• Google Sign-In: if you choose to sign in with Google.
• Google Play Billing and RevenueCat: only if you buy VitalUp Pro. Google Play handles the payment; we never see your card details. RevenueCat manages the subscription and receives your VitalUp user id (a random identifier), your purchase details (plan, price, dates) and device information needed to confirm the purchase. It does not receive your health data, name or email. Your subscription record is deleted from RevenueCat when you delete your account.
• Google ML Kit: barcode and text recognition that runs on your device; images are not sent to Google by this feature.
• Google Health Connect: Android's health data platform (read only).
• Apple Health (HealthKit): iPhone's health data platform (read only). Your Apple Health data stays on your iPhone unless VitalUp uses it as described in section 2.
• Resend: sends our emails (sign-up codes, password resets, support replies, deletion confirmations) and so receives your email address and the email content.
• Mapbox: map tiles for workout routes and offline maps. Mapbox receives tile requests (the map area being viewed) and your IP address.
• USDA FoodData Central (through our servers) and Open Food Facts (directly from your device): public food databases for nutrition lookups.

08Storage, sync and security

We use layered technical and organisational safeguards.

• Encryption in transit: all communication between VitalUp and our servers and providers uses TLS (HTTPS).
• Encryption at rest: our cloud database is encrypted at rest. Your sign-in session is stored in the Android Keystore-backed secure storage on your device.
• Access control: Row-Level Security on our database means your logs, health answers, backups and settings can only be read by your own account. The Arena information listed in section 6 is shared with other users as described there.
• On your device: logs are kept in the app's private storage, excluded from Android cloud backup and device-to-device transfer. The optional app lock hides the app from the recent-apps screen and blocks screenshots.

09Retention and deletion

We keep your data while your account exists. You can export or delete it at any time without penalty.

• Export: Profile > Account details > Export my data creates a file with your profile, logs, workouts, settings, goals, Vita history and Arena data.
• Signing out removes your logs, workouts, Vita history and meal photos from the device (after backing up anything not yet uploaded).

How to delete your data

1. In the app: go to Profile > Account details > Delete account. Confirming deletes your account and all associated records from our live database and your profile photo from storage straight away, and wipes the app's data on your device.
2. On the web: submit a request on our account deletion page.
3. By email: send an email to privacy@vitalup.live with the subject "Delete My VitalUp Account" from your registered account email. We will process and permanently purge your records within 30 days.

After deletion, copies in our providers' backups are removed as those backups expire, typically within 30 days. We keep the deletion confirmation and related support or privacy emails (which contain your email address and username) to show that we handled your request. Email delivery logs are deleted after 2 days. Products you added to the shared catalogue stay there, as they are not linked to you.

10Children's privacy

VitalUp is not intended for children under 13, and we do not knowingly collect data from anyone under 13. In EEA and UK countries where the age of digital consent is higher than 13 (up to 16), users under that age need the consent of a parent or guardian to use VitalUp. If you believe a child has given us their data without the required consent, contact us and we will delete it promptly.

11Changes to this policy

We may update this Privacy Policy as the app changes or the law requires. We will update the effective date at the top of this page and, for significant changes, notify you by email or in the app.

12Contact us

If you have any questions, concerns or requests about this Privacy Policy or your data, reach out. We acknowledge and respond to privacy inquiries within 48 business hours.