Your data, your rules.

vitae ("the App") is operated by Vitae Labs, LLC, a Delaware limited liability company ("we", "us", or "our"), which is the controller of your personal data. This policy explains what we collect, how we use it, and who we share it with.

01Information We Collect

Account Data

When you sign in with Apple, we receive your Apple user identifier. We may also receive your email address and name if you choose to share them. We store these securely to maintain your account.

Quiz & Profile Data

When you complete the onboarding quiz, we collect your responses (age, weight, chronotype, goals, activity level, stress level, devices, and focus areas) to generate your personalized protocol.

Health Data

If you connect Apple Health, we read the following data types:

• Step count
• Sleep analysis (duration and stages)
• Heart rate variability (HRV)
• Heart rate
• Active energy burned
• Walking + running distance
• Resting heart rate

Health data is synced to our servers to power your dashboard and enable cross-device access. We never sell health data, never use it for advertising, and never share raw Apple Health data with analytics or marketing providers.

Protocol Progress

We track which protocol actions you complete each day, your completion percentage, and streak data. This is used to display your progress and optimize your experience.

Subscription & Payment Data

If you purchase Vitae Pro, your payment is processed by Apple through the App Store. We never receive or store your payment-card details. We (and our subscription provider RevenueCat) receive non-sensitive subscription information such as your subscription status, plan, trial state, renewal date, and Apple/transaction identifiers, which we use to unlock paid features and keep your subscription in sync across devices.

Push Notifications

If you enable notifications, we and our provider OneSignal process a push token and a limited set of tags (such as your streak count and whether you are a subscriber) to send relevant reminders. You can turn notifications off at any time in the app or in your device settings.

Usage & Analytics Data

We use product analytics (Amplitude) to understand how the app is used and improve it. This includes in-app events (for example, screens viewed, features used, and the subscription funnel) along with a user/device identifier. We do not use this data for third-party advertising and do not send raw Apple Health data to analytics providers.

02How We Use Your Data

03Service Providers

We share limited data with the following providers solely to operate the app. They act as our processors and are not permitted to use your data for their own purposes:

• Apple — Sign in with Apple, App Store payments, and HealthKit.
• RevenueCat, Inc. — manages your subscription status and entitlements (receives your app user id and purchase data; no card details).
• OpenAI — generates your protocol from your quiz/profile answers. We do not send your name, email, or Apple Health data for this purpose.
• Amplitude, Inc. — product analytics on in-app usage events to help us improve the app.
• OneSignal — delivers push notifications (push token and basic tags such as streak and subscriber status).
• Cloud hosting — our application and encrypted PostgreSQL database run on managed cloud infrastructure.

04Data Storage & Security

Your data is stored on secure PostgreSQL databases hosted on encrypted infrastructure. All data in transit is encrypted via TLS. Authentication uses industry-standard JWT tokens with Apple's identity verification.

Health data from Apple Health is stored with per-user isolation. OAuth credentials for future integrations (Whoop, Oura) will be encrypted at rest.

05Data Sharing

06Your Rights

You have the right to:

• Access — View all data we hold about you
• Delete — Delete your account and all associated data from within the app (Profile → Delete Account)
• Export — Request a copy of your data in a portable format
• Disconnect — Revoke Apple Health access at any time from your device settings
• Manage subscription — View or cancel your subscription in your App Store account settings

To exercise any of these rights, use the in-app settings or contact us at privacy@vitaeapp.co.

07Data Retention

We retain your data as long as your account is active. If you delete your account, all data is permanently removed within 30 days, except where we are required to retain limited records (for example, transaction records held by Apple).

08Children's Privacy

vitae is not intended for users under 16 years of age. We do not knowingly collect data from children.

09Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app. Continued use of vitae after changes constitutes acceptance of the updated policy.

10Contact

Questions about this policy? Reach us at privacy@vitaeapp.co.

Vitae Labs, LLC
2261 Market Street STE 70458
San Francisco, CA 94114, United States