Privacy Policy

Information Vital Processes

Vital may process information you provide directly, including:

• Account information such as your email address and application preferences.
• Bodyweight measurements and daily check-ins.
• Workout plans, exercises, sets, and training history.
• Nutrition entries, foods, meals, calorie and macronutrient information.
• Skincare routines and skin observations.
• Goals, routines, reminders, and completion history.
• Progress photos and optional notes or capture metadata.
• Other health or wellness information you choose to enter into Vital.

WHOOP Data

If you choose to connect your WHOOP account, Vital requests access only to the WHOOP information required for its features.

Vital currently requests permission to access:

• Basic WHOOP profile information.
• Recovery data.
• Physiological cycle data.
• Sleep data.
• Workout data.

Vital also requests offline access so that it can refresh your authorization and keep your WHOOP information synchronized.

Vital does not currently request WHOOP body-measurement access.

WHOOP data may include information such as Recovery score, heart-rate variability, resting heart rate, sleep duration and performance, Strain, workout information, and associated timestamps.

Connecting WHOOP is optional. You may disconnect WHOOP from Vital at any time.

How Vital Uses Information

Vital uses your information only to provide personal health and performance features, including:

• Displaying your health and fitness history.
• Tracking goals and progress.
• Calculating deterministic trends and summaries.
• Managing workouts, routines, nutrition, skincare, and reminders.
• Displaying WHOOP Recovery, sleep, HRV, resting heart rate, Strain, and related trends.
• Synchronizing data you have authorized Vital to obtain from WHOOP.
• Providing features that you explicitly request, such as food search or meal-image analysis.
• Maintaining application security and reliability.

Vital does not use WHOOP Recovery or other wearable scores as automatic medical clearance and does not automatically change your training plan based solely on WHOOP information.

AI-Assisted Features

Vital includes optional AI-assisted nutrition features.

When you explicitly choose features such as meal-photo analysis or nutrition-label scanning, the selected image and information necessary to perform that request may be transmitted to OpenAI for processing.

AI output is treated as a proposal and is not automatically accepted as authoritative health or nutrition data. You are given an opportunity to review or correct results before they become confirmed Vital records.

Progress photos are separate from meal-analysis images and are not automatically submitted for AI analysis.

Food Data Services

Vital may use third-party food databases, including:

• USDA FoodData Central.
• Open Food Facts.

Food searches, product identifiers, or barcodes may be sent to these services when necessary to find nutrition information.

Storage and Service Providers

Vital uses Supabase for services including authentication, database storage, private file storage, and server-side application functions.

Information may therefore be processed by Supabase as necessary to operate Vital.

WHOOP information is obtained only after you authorize Vital through WHOOP's OAuth authorization process.

Vital may also use OpenAI, USDA FoodData Central, and Open Food Facts for the specific optional features described above.

Vital does not sell, rent, or license your personal information or WHOOP data.

Vital does not use your health or WHOOP information for advertising.

Progress Photos

Progress photos are treated as private data.

They are stored in private storage protected by authenticated access controls and are not given public URLs.

Vital does not provide public profiles or automatically share progress photos with other users or third parties.

WHOOP Authorization Credentials

WHOOP access and refresh credentials are stored only on Vital's server infrastructure.

They are not stored as ordinary mobile application data and are not exposed to the Vital client.

Vital protects stored WHOOP credentials using encrypted server-side storage.

Data Security

Vital uses reasonable technical safeguards designed to protect personal information, including:

• Authenticated user accounts.
• Per-user database access controls.
• Private file storage.
• Encryption in transit.
• Server-side storage of integration credentials.
• Encrypted WHOOP access and refresh tokens.
• Account isolation between Vital users.

No system can guarantee absolute security, but Vital is designed to minimize access to sensitive information and limit data exposure.

Data Sharing

Vital does not sell personal information.

Information is shared with service providers only when necessary to operate a feature you have chosen to use.

These may include:

• Supabase — application hosting, authentication, database, file storage, and backend functions.
• WHOOP — account authorization and WHOOP data synchronization.
• OpenAI — optional meal-photo and nutrition-label analysis.
• USDA FoodData Central — food and nutrition lookup.
• Open Food Facts — barcode and food-product lookup.

Vital does not use third-party advertising networks or behavioral advertising analytics.

Data Retention and Deletion

Vital retains personal information for as long as it is needed to provide the application or until it is deleted.

Individual records and progress photos may be deleted where the application provides that functionality.

When a progress photo is deleted, Vital is designed to remove both the private stored image and its associated application record.

Disconnecting WHOOP stops future synchronization and removes Vital's stored authorization credentials. Previously imported WHOOP history may remain in Vital unless it is separately deleted.

Where account deletion is available, deletion removes live account data and associated private files and revokes connected integrations. Limited copies may temporarily remain in infrastructure backups until those backups expire under the service provider's normal retention process.

Your Choices

You may:

• Choose whether to connect WHOOP.
• Disconnect WHOOP at any time.
• Choose whether to use AI-assisted features.
• Delete supported records and progress photos.
• Control notification permissions through your device.
• Choose whether to enable biometric App Lock.

WHOOP authorization may also be revoked through WHOOP where supported.

Health Information Disclaimer

Vital is a personal wellness and performance tool.

It is not a medical device and does not provide medical diagnosis, treatment, or emergency medical services.

Information displayed by Vital, including WHOOP information and AI-assisted output, should not be considered a substitute for professional medical advice.

Children's Privacy

Vital is intended for adult users and is not designed for children.

Changes to This Policy

This Privacy Policy may be updated if Vital's features, integrations, or data practices materially change.

The effective date at the top of this policy will be updated when changes are made.

Contact

Questions about this Privacy Policy or Vital's handling of personal information can be directed to:

[CONTACT_EMAIL]