1. Who We Are
VitaTrail is an AI wellness companion that helps users organize health records, understand wellness trends, track concerns, and manage family care permissions. In this Privacy Policy, "VitaTrail," "we," "us," and "our" refer to the operator of the VitaTrail mobile application and website.
Contact: privacy@vitatrail.app. Support: support@vitatrail.app. Before launch, replace these addresses with your verified domain email and legal mailing address.
2. Scope
This policy explains how VitaTrail collects, uses, stores, shares, and protects information when you use our mobile app, website, support channels, AI analysis, health record vault, daily logs, subscriptions, and family sharing features.
3. Important Health and Medical Boundary
VitaTrail provides educational wellness information and organizational tools only. VitaTrail does not diagnose disease, provide medical treatment, prescribe medication, predict death, or replace advice from licensed healthcare professionals. If you have urgent symptoms or a medical emergency, contact local emergency services immediately.
4. Information We Collect
| Category | Examples | Main purposes |
|---|---|---|
| Account information | Name, email address, Apple or Google sign-in identifier, app user ID, profile photo, language, country or region. | Account login, identity, profile display, support, security, and family permissions. |
| Health profile | Age or age range, sex, height, weight, units, wellness goals, family profile labels, and user-entered context. | Personalization, record organization, vitality insights, and safer explanations. |
| Health records and user content | Uploaded photos, PDFs, lab reports, checkup reports, original files, extracted markers, dates, units, reference ranges, notes, and AI summaries. | Health vault, report analysis, trend summaries, abnormal marker explanations, and user review. |
| Daily wellness logs | Blood glucose, blood pressure, sleep, movement, symptoms, weight, habits, and other values you choose to record. | Calendar records, trends, reminders, vitality score context, and concern tracking. |
| Family sharing information | Invites, requests, user IDs, permission level, shared profiles, managed family profiles, access history, and revocation status. | Caregiver access, consent management, audit trail, and family record organization. |
| AI and support interactions | Questions, prompts, uploaded report text or images sent for analysis, feedback, corrections, and support messages. | Answer questions, extract structured data, improve safety controls, and provide support. |
| Subscription and purchase status | Product ID, entitlement status, renewal state, receipt or purchase token handled by Apple App Store or Google Play. | Provide premium features, restore purchases, prevent fraud, and support billing questions. |
| Device, diagnostics, and usage data | Device model, operating system, app version, crash logs, performance data, coarse usage events, IP-derived region, and security logs. | Reliability, debugging, security, abuse prevention, compliance, and product improvement. |
5. Permissions
VitaTrail may request camera access to scan health records, photo or file access to import reports, notification permission for reminders, and health data permissions only if you enable related integrations. You can change permissions in your device settings. If you deny a permission, related features may not work.
6. How We Use Information
- Provide account login, profile, health vault, daily logging, AI companion, concern tracking, family care, and subscription features.
- Extract and organize health markers from uploaded records after user action.
- Generate educational, non-diagnostic explanations and vitality trends.
- Show why a result may need attention and suggest safer next steps such as rechecking a value or discussing it with a clinician.
- Maintain family permissions, access logs, managed profiles, and revocation controls.
- Provide customer support, security monitoring, fraud prevention, analytics, crash reporting, and legal compliance.
7. AI and OCR Processing
VitaTrail may use third-party AI, OCR, cloud hosting, or document processing providers to extract text from uploaded reports and generate summaries. AI outputs can be incomplete or inaccurate. Users should review extracted information before saving it and should consult qualified healthcare professionals before making medical decisions.
We do not permit AI providers to use your health data for third-party advertising. Production service contracts should restrict providers from using health data except to provide the requested service, unless you separately consent.
8. How We Share Information
We do not sell health data. We do not use health data for third-party advertising. We may share limited information with:
- Cloud hosting, database, storage, security, and backup providers.
- AI, OCR, and document processing providers used to analyze records and answer questions.
- Authentication providers such as Apple or Google when you choose those sign-in methods.
- Apple App Store, Google Play, or subscription infrastructure for purchase validation and entitlement management.
- Crash reporting, analytics, customer support, email, and operational vendors.
- Family members or caregivers only when you invite them, approve their request, or create a managed profile for them.
- Legal, safety, or compliance recipients when required by law or necessary to protect rights, users, and security.
9. Family Sharing and Managed Profiles
If you share your health data with a caregiver or family member, they may see the records and insights allowed by your permission level. You can revoke access. If you create a managed family profile, you are responsible for having the appropriate authority or consent to upload and manage that person's information.
10. Retention
We keep account and health data while your account is active or as needed to provide the service. Deleted records are removed from active systems within a reasonable period, typically up to 30 days, unless a longer period is required for security, fraud prevention, backups, tax, accounting, legal obligations, or dispute resolution. Backup copies may take up to 90 days to expire.
11. Security
Health information is sensitive. VitaTrail is designed to use encryption in transit, encryption at rest for production storage, short-lived file access links, access controls, audit logs for family sharing, and least-privilege internal access. No system is perfectly secure, and you should protect your device, account credentials, and shared access permissions.
12. Your Choices and Rights
- Access, review, correct, export, or delete your records where the app provides those controls.
- Delete uploaded files, extracted markers, daily logs, and family profiles.
- Withdraw family sharing, revoke caregiver access, or remove managed family profiles.
- Change device permissions for camera, photos, files, notifications, Apple Health, or Health Connect.
- Request account and data deletion through the app or the public deletion page.
- Contact us to exercise privacy rights available under your local law, such as GDPR, UK GDPR, CCPA/CPRA, or similar laws.
13. Children
VitaTrail is not intended for children under 18 and should not be used by children without appropriate guardian involvement. We do not knowingly collect personal information from children where prohibited by law. If you believe a child provided information, contact us.
14. International Transfers
If you use VitaTrail outside the country where our providers operate, your information may be processed in other countries. We use appropriate safeguards where required by law, such as contractual protections for international data transfers.
15. California and Similar Privacy Notices
Depending on your location, you may have rights to know, access, correct, delete, obtain a portable copy, opt out of certain processing, or limit the use of sensitive personal information. VitaTrail does not sell personal information and does not share health data for cross-context behavioral advertising.
16. HIPAA Notice
VitaTrail is generally a consumer wellness application and is not itself a healthcare provider, health plan, or healthcare clearinghouse. Unless we separately enter into a written agreement stating otherwise, VitaTrail is not acting as a HIPAA-covered entity or business associate. You should not upload information you are not authorized to share.
17. Changes
We may update this policy as the product, legal requirements, or service providers change. Material changes will be communicated through the app, website, email, or other appropriate notice.
18. Contact
Privacy requests: privacy@vitatrail.app
Support: support@vitatrail.app
Security reports: security@vitatrail.app