1. Your Privacy Matters
At Vitalis, we understand you're trusting us with very personal health information. This privacy policy explains exactly how we handle your data - in plain English, no legal jargon.
The Bottom Line: We use your health data only to provide you with personalized IBS insights. We never sell your personal information, and you can delete everything anytime.
2. What Information We Collect
2.1 Health & Wellness Data You Enter
- Food entries: What you eat, when, and where
- Symptoms: Types, severity, timing, and location
- Stress levels: Your daily stress ratings
- Custom additions: Foods, symptoms, or locations you add
2.2 Account Information
- Apple ID sign-in: Your name and email (if you choose this option)
- Anonymous sign-in: Just a unique, anonymous identifier
- Device info: What type of phone/tablet you're using and app version
- Settings: Your notification preferences and timezone
2.3 Subscription Data
- Payment info: Handled by RevenueCat - we only see if you have an active subscription
- Usage patterns: Which features you use most (helps us improve the app)
3. How We Use Your Information
3.1 Creating Your Personal Insights
- Find food triggers: Analyze which foods correlate with your symptoms
- Identify safe foods: Show which foods you tolerate well
- Pattern recognition: Discover when and where symptoms occur most
- Stress correlation: See how stress affects your symptoms
- Generate reports: Create weekly, monthly, and longer-term insights
3.2 App Functionality
- Sync across devices: Keep your data updated on all your devices
- Secure your account: Protect your data with authentication
- Send reminders: Help you stay consistent with tracking (if you want them)
- Customer support: Help you when you have questions
- Subscription management: Handle your premium features
3.3 Improving Vitalis
- Fix bugs: Identify and resolve app issues
- Better features: Understand what users need most
- Research: Improve our insights algorithms (using anonymized data only)
- Security: Keep your data safe from threats
4. How We Protect Your Data
4.1 Storage & Security
- Dual storage: Data saved both on your device and our secure servers
- Encryption: All data encrypted during transmission and storage
- Access controls: Only authorized personnel can access servers
- Regular backups: Your data is safely backed up to prevent loss
- Security monitoring: 24/7 monitoring for threats
4.2 What We DON'T Do
- ❌ Never sell your data to advertisers or marketers
- ❌ Never share with insurance companies or employers
- ❌ Never use for advertising targeting
- ❌ Never give to pharmaceutical companies without consent
5. When We Share Information
5.1 With Third-Party Services
RevenueCat (Payment Processing):
- Handles subscription payments securely
- Only receives purchase info, not your health data
- Has their own privacy policy: RevenueCat Privacy
Apple Services:
- Apple ID authentication (if you choose this option)
- App Store for downloads and payments
- Apple's privacy policy: Apple Privacy
5.2 Only When Required by Law
We may share information if:
- Required by a court order
- Requested by law enforcement with proper legal authority
- Necessary to prevent serious harm to you or others
We'll notify you when legally possible if this happens.
6. Your Control Over Your Data
6.1 What You Can Do
- View all your data: Export everything we have about you
- Correct information: Update or fix any incorrect data
- Delete everything: Permanently remove your account and all data
- Control sharing: Choose what to share and with whom
- Manage notifications: Turn reminders on/off anytime
6.2 Authentication Choices
- Apple ID: Convenient sign-in, but shares your name/email
- Anonymous: No personal info shared, just a random ID
- Switch anytime: You can change authentication methods
6.3 Data Export & Deletion
7. How Long We Keep Your Data
7.1 Active Users
- While you use the app: We keep all your data to provide insights
- Backup retention: 30 days of backups for data recovery
- Inactive accounts: Deleted after 2 years of no activity
7.2 When You Delete Your Account
- Personal data: Permanently deleted within 30 days
- Anonymized insights: May be kept for research (no way to identify you)
- Legal requirements: Some data kept longer only if required by law
7.3 Subscription Data
- Payment records: Kept as long as legally required for tax purposes
- Handled by RevenueCat: They have their own retention policies
8. International Users
8.1 Where Your Data is Stored
- Your data may be stored on servers in different countries
- We ensure the same protection standards everywhere
- EU users: We comply with GDPR requirements
- All transfers use approved security frameworks
8.2 Your Local Rights
Depending on where you live, you may have additional rights:
- EU residents: GDPR rights including data portability
- California residents: CCPA rights
- Other regions: Rights under local privacy laws
9. Children & Teen Privacy
- Under 13: We don't knowingly collect data from children under 13
- Ages 13-17: May need parental consent depending on local laws
- Parents: Contact us if you believe your child is using the app
- Data deletion: We'll immediately delete any child data we discover
10. Changes to This Privacy Policy
We'll update this policy occasionally. When we do:
- In-app notification: You'll see a notice about changes
- Email alert: For major changes (if we have your email)
- What changed: We'll highlight the key updates
- Your choice: Keep using the app means you accept changes
11. Contact Us About Privacy
Your privacy is important to us. We're committed to being transparent about how we handle your health data. 🔒