Vitaspan Privacy Policy

2. What the app keeps on your iPhone

Everything below is kept in the app's private storage on your iPhone, which iOS encrypts, and in your iPhone's backups (iCloud Backup or your computer) if you've turned them on. Vitaspan doesn't copy it to iCloud or anywhere else by itself.

• Apple Health data you allow, type by type: medications and doses; workouts, steps, distance, exercise minutes and active energy; weight, body fat, lean mass, BMI and waist; sleep, with overnight blood oxygen, breathing rate, breathing disturbances and wrist temperature; heart rate, resting and walking heart rate, heart rate variability, heart rate recovery and VO2 max; blood pressure; blood glucose; nutrition and water; height, sex and date of birth.
• Your profile and health background: name, goals, conditions, surgeries and injuries, allergies, family history, smoking and alcohol.
• What you log: medications and doses, meals with their photos, water, fasting, workouts, mood and other wellbeing entries.
• Appointments and visits: your doctors and care team, your questions and concerns, notes and action items.
• Medical documents you add (from Files, Photos, the camera or other apps) and what's read from them.
• Your care circle: the names, emails and phone numbers you enter or pick from Contacts. When you pick a contact, the app sees only that contact.
• Your questions in Ask and the answers.
• Files you import, such as a Vitaspan records file someone sends you, or a health data export from your Oura account.
• Your Anthropic API key, if you enter one, kept in the iPhone's Keychain.

Vitaspan saves to Apple Health the meals (calories and nutrients) and the water you log and, when you ask, data another device recorded but didn't save there, such as sleep and heart rate from an Oura export. What's in Apple Health is kept by Apple Health, under Apple's privacy policy.

Widgets show the numbers and items you choose on your Home Screen and Lock Screen, where anyone who can see your iPhone can see them.

3. What we receive

We don't receive anything you enter in Vitaspan or anything it reads from Apple Health. We receive only:

• Messages you send us: your email address and what you write, to answer you. They're kept in our email, which Google Workspace provides.
• Beta testing: if you test Vitaspan with TestFlight, Apple gives us the name and email you were invited with, your device model and iOS version, crash reports, and the feedback and screenshots you choose to send.
• App Store statistics: Apple gives us download and sales figures in aggregate, and crash reports and usage statistics only from people who chose in iOS Settings to share analytics with app developers.

We don't use advertising or analytics tools from other companies, and we don't track you across other apps or websites.

4. AI features: what's sent, and to whom

Vitaspan's AI features use Claude, made by Anthropic, PBC. They're optional and work only with an Anthropic API key entered in Settings → Claude. Everything else in the app works without one.

When you use an AI feature, the app sends what it needs directly from your iPhone to Anthropic, under the Anthropic account the key belongs to. It doesn't pass through us, and we don't see it. A document you add is read as soon as the app can, so it's sent then.

Anthropic handles these requests under its own terms and privacy policy. Under its commercial terms, Anthropic doesn't train its models on them.

To stop all AI requests, remove the key in Settings → Claude.

Voice questions. Apple's speech recognition turns what you say into text, on your iPhone when your language allows it and otherwise on Apple's servers, under Apple's privacy policy. We don't receive the audio. Spoken answers are produced on your iPhone.

5. Other services the app uses for you

• Open Food Facts, a public food database: when you scan a food barcode, only the barcode number is sent, to find the product.
• Your calendar: when you add an appointment to your calendar, iOS's own calendar screen saves it. Vitaspan doesn't read your calendar.
• Reminders and notifications are scheduled on your iPhone. There's no notification server.
• Updates to your care circle go out through your own Mail, Messages or WhatsApp, from your accounts, not ours.
• Calls and links open your Phone app or your browser.

6. Accounts and paid AI, not available yet

A later version of Vitaspan will offer an optional account (Sign in with Apple) and AI credits sold through the App Store, so the AI features work without a key of your own. They aren't running yet: there's nothing to sign up for or buy, and nothing is sent to us. Before they start, we'll update this policy and tell you in the app.

7. How we use and share information

We don't sell your information or share it for advertising. We don't use health information, including Apple Health data, for advertising, marketing or data mining, and we don't use it to train AI models.

We use what we receive (section 3) only to answer you, to fix and improve the app, and to meet legal obligations. We'd disclose it only when the law requires it, to protect someone's safety, or as part of a sale of Vitaspan, where the new owner must keep the promises in this policy and we'd tell you first.

8. Your choices and rights

• Delete any entry, document or conversation in the app, or delete the app to remove everything it keeps on your iPhone. Copies in your backups remain until those backups are replaced, and what Vitaspan saved to Apple Health stays there until you delete it in the Health app.
• Stop the AI features by removing the key in Settings → Claude.
• Stop sharing Apple Health data at any time: iPhone Settings → Privacy & Security → Health → Vitaspan.
• Turn notifications off in iPhone Settings → Notifications → Vitaspan.

You can also ask us to confirm what we hold about you (section 3), and to give you a copy, correct it or delete it. Write to privacy@vitaspan.app. We answer within 45 days, and we won't treat you differently for asking. If we turn down a request, you can appeal by replying to our answer; if we deny the appeal, you can contact your state's attorney general.

9. Consumer health data (Washington, Nevada, Connecticut and other states)

This section is our consumer health data privacy policy.

• We don't collect, share or sell consumer health data. The health information Vitaspan keeps stays on your iPhone (section 2), and what an AI feature sends goes straight from your iPhone to Anthropic, under the Anthropic account of the key entered in the app (section 4).
• What the app keeps on your iPhone can include health conditions, symptoms you describe, medications, test results and medical documents, measurements such as weight, blood pressure and glucose, nutrition, exercise, sleep and mood. It includes reproductive or sexual health information only if you enter it.
• Where it comes from: you, Apple Health (with your permission), the documents you add, and the files you import.
• We don't use your location or geofencing.
• Your rights: you can ask us to confirm whether we collect, share or sell your consumer health data, and to delete any we have, at privacy@vitaspan.app. Appeals work as in section 8.

10. This website

vitaspan.app is a static website hosted by Cloudflare, which processes visitors' IP addresses and browser details to deliver and protect it. The site sets no cookies, has no analytics or trackers, and loads nothing from other companies.

11. Children

Vitaspan is meant for adults 18 and older and isn't directed to children. We don't knowingly receive information from children under 13, or under 16 where the law sets that age; if we learn that we have, we delete it.

12. Outside the United States

Vitaspan keeps your information on your iPhone wherever you live. The little we receive (section 3) is handled with Google Workspace and Apple, which may process it in the United States and other countries. If you live in the European Union, the United Kingdom or another place with data protection laws, we rely on your choice to use each feature, and on our legitimate interest in answering your messages and fixing the app. You have the rights in section 8, and you can complain to your data protection authority; in Argentina, that's the Agencia de Acceso a la Información Pública (Law 25,326).

13. Security

iOS encrypts the app's storage, the API key stays in the iPhone's Keychain, and requests to Anthropic and Open Food Facts are encrypted in transit. A passcode or Face ID on your iPhone protects all of it. No system is completely secure; if a breach affected information we hold, we'd notify you and the authorities as the law requires.

14. Changes and contact

If we change this policy, we'll post the new version with a new effective date, and the app will ask you to agree again before a significant change takes effect.

Questions and requests: privacy@vitaspan.app. Vitaspan is made by Julio Hartstein.