Back
Effective Date: March 2026

Privacy Policy

The "Stateless" Model

Our Privacy Philosophy

At Vitala.me, we believe your health data is your own.

We do not pull data from wearables (Apple Health, Oura, etc.) and only process what you manually share with us.

How Your Data is Processed (Stateless AI)

Inference Only

Your health data is sent to our AI engine (GPT-5.2 via Emergent LLM) only at the moment you request a recommendation.

No Training

We do not use your personal health data to train or "fine-tune" our AI models. Once the recommendation is generated, the AI "forgets" the specific interaction.

Storage

Your account details and quiz history are stored securely on a MongoDB instance via the Emergent Platform.

Device Permissions & Data Collection

Vitala may request access to certain device features to provide enhanced functionality. Here's exactly what we request and why:

Camera Access

Purpose: To scan barcodes on supplement bottles for instant product identification and interaction checks.

How we handle camera data:

  • • Images are processed locally on your device only
  • • We never upload, store, or transmit your camera feed
  • • Barcode data is converted to text for supplement lookup
  • • You can revoke camera access anytime in your device settings

Push Notifications

Purpose: To send you supplement reminders and health tips at times you choose.

What we send:

  • • Supplement intake reminders (times you configure)
  • • Optional weekly health tips (can be disabled)
  • • We never send promotional or advertising notifications
  • • You control all notification preferences in Settings

Local Storage (Offline Access)

Purpose: To cache your recommendations for offline viewing and save assessment progress.

What we store locally:

  • • Your supplement recommendations (for offline access)
  • • Assessment progress (so you don't lose work)
  • • Login session (so you don't have to sign in repeatedly)
  • • All local data can be cleared by logging out or clearing browser data

Your Control: All permissions are optional. You can use Vitala's core features (assessment, recommendations, Ask AI) without granting any device permissions. Enhanced features like barcode scanning require camera access.

Your Rights (GDPR & Data Sovereignty)

Data Export

You may download a full JSON export of your profile at any time from your Account Settings.

Right to Erasure

Deleting your account permanently removes all health assessment data from our active databases.

No Third-Party Sale

We never sell your health profiles to supplement manufacturers or advertisers.

To exercise any of these rights, please visit your Account Settings or contact us at privacy@vitala.me

This Privacy Policy is effective as of March 2026.