Privacy Policy

1. Who we are

VytalStack ("VytalStack", "we", "us") provides a supplement-tracking and wellness-insight application. This policy applies to the VytalStack mobile app and this website. The data controller is [Company legal entity], [registered address]. For data-protection questions, contact privacy@vytalstack.app.

2. Data we process

• Account data — name, email, and handle you provide (optional for local use).
• Health & wellness data — the supplements you add, doses, schedule, adherence logs, journal entries (mood, energy, sleep, focus, digestion), symptoms, and any lab/bloodwork results you upload.
• Profile data — optional sex, age, weight, height, activity level, and health goals used to personalise recommendations.
• Device & usage data — app version, device type, and anonymised diagnostics (if you opt in).
• Connected services — data you choose to sync from Apple Health or a wearable (e.g. HRV, sleep), processed only to power your insights.

3. Local-first storage

By design, your stack, logs, journal, and lab results are stored locally on your device. Features that require our servers (such as AI coaching or supplement search) send only the minimum data needed to fulfil that request, and we do not use it to build advertising profiles.

4. How we use data

• To provide core features — logging, reminders, adherence, and insights.
• To generate AI insights and correlations between your supplements and how you feel.
• To process subscriptions and restore purchases (via the Apple App Store / Google Play).
• To improve reliability and fix bugs (anonymised diagnostics only, with consent).

We rely on your consent and on the performance of our contract with you (providing the app) as our legal bases for processing.

5. Health data

Health and wellness information is sensitive. We process it only to deliver the features you ask for. Data synced from Apple Health is used solely on-device or for the insight you requested and is never sold or shared for advertising. VytalStack is a wellness tool and not a medical device; it does not diagnose, treat, cure, or prevent any condition.

6. Sharing & third parties

We share data only with service providers that help us run the app, under contract and only as needed:

• Cloud & AI processing — to generate coaching and insights (processed transiently, not used to train third-party models without your consent).
• App stores — Apple / Google handle payment and subscription management.
• Partner retailers — only if you choose to purchase or reorder; we share what's needed to complete that order.

7. Your rights

Depending on your region (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your data, to object to or restrict processing, and to withdraw consent. You can export or delete your data in-app under Profile → Data & privacy, or email privacy@vytalstack.app.

8. Retention & deletion

Local data persists on your device until you delete it or uninstall the app. Server-side data tied to a request is retained only as long as necessary to provide the service or meet legal obligations, then deleted or anonymised.

9. Children

VytalStack is not intended for anyone under 16 (or the age of digital consent in your country). We do not knowingly collect data from children.

10. Changes to this policy

We'll update this page when our practices change and revise the "Last updated" date. Material changes will be highlighted in the app.

11. Contact

Questions about privacy? Email privacy@vytalstack.app or visit our Contact page.