Privacy Policy – VitalLog AI

Effective Date: [Month Day, Year]

1. Information We Collect

Depending on how you use VitalLog AI, we may collect the following categories of information:

1.1 Information You Provide to Us

Account & Contact Information

• Name or display name
• Email address
• Password or other Sign In credentials
• Country/region or time zone (if you provide it)

Profile & Goal Information

• Height, weight, target weight
• Activity level or similar profile details (if you choose to provide them)

Tracking & Log Data

• Weight entries and goal history
• Food and calorie logs
• Water intake logs
• Walking/jogging/step and other activity logs (entered manually or via integrations)
• Custom tracking items you create (e.g., sleep, habits, workouts, measurements)

AI Interaction Content

• Questions you ask the AI (e.g., “summarize my last week of calories”)
• Text you submit to log or explain your entries
• Feedback you write in free-form text fields

Communications

• Messages you send to us (support tickets, bug reports, feedback emails, social messages related to support)

1.2 Information Collected Automatically

When you use the Services, we may automatically collect:

Usage Data

• Pages and screens you visit
• Features you use (e.g., logging weight, generating summaries)
• Time and date of access
• In-app actions (e.g., creating a custom tracker, editing a log)

Device & Technical Data

• IP address
• Browser type and version
• Device type and operating system
• App version, language, and settings
• Error logs and diagnostic information

Cookies & Similar Technologies

We use cookies, local storage, and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand usage patterns and performance
• Support security and fraud prevention

You can control cookies through your browser or device settings. If you disable certain cookies, some features of the Services may not function properly.

1.3 Information from Third Parties and Integrations

If you choose to connect VitalLog AI to third-party apps or services (for example, a health/fitness platform or sign-in provider), we may receive information such as:

• Basic profile data from authentication providers
• Activity or health data from integrated services or devices (where you explicitly authorize the connection)

We only receive and use this information as described in this Privacy Policy and according to the permissions you grant within each integration.

2. How We Use Your Information

We may use your information for:

2.1 Providing and Maintaining the Services

• Creating and managing your account
• Logging and displaying your weight, calories, water, and other activities
• Showing progress toward your goals and generating charts and summaries
• Powering AI features that help you log, understand, and analyze your data
• Providing customer support and resolving issues

2.2 Improving and Personalizing Your Experience

• Suggesting features, tips, or insights based on your usage
• Customizing dashboards, trends, and AI feedback
• Running analytics on aggregated or de-identified data to understand how users interact with the product and where to improve

2.3 Security, Fraud Prevention, and Legal Compliance

• Monitoring, preventing, and detecting abusive or fraudulent activities
• Protecting the security and integrity of our systems
• Complying with applicable laws, regulations, and legal processes

2.4 Communications

• Sending you service-related messages (e.g., updates to this Privacy Policy or Terms, security alerts)
• Responding to your emails or support requests
• With your consent, sending optional announcements, product updates, or surveys (you can opt out at any time)

2.5 AI and Data Processing

VitalLog AI uses artificial intelligence models to provide summaries, insights, and logging assistance. To deliver these features, your inputs (questions, logs, and related context) may be processed by our own models and/or by trusted third-party AI infrastructure providers acting on our behalf, under appropriate data processing agreements and security safeguards.

Where possible, we minimize or de-identify the data used for AI training and evaluation.

3. Legal Bases for Processing (EEA/UK and Similar Regions)

If you are located in the European Economic Area (EEA), the United Kingdom, or other regions with similar laws, we process your personal data under one or more of the following legal bases:

• Contract – To provide the Services you request and fulfill our obligations under the Terms of Service
• Legitimate Interests – To improve the Services, maintain security, and understand usage, balanced against your rights and interests
• Consent – For certain uses of cookies, marketing communications, and optional data you choose to provide
• Legal Obligations – To comply with applicable laws, regulations, and lawful requests

Where we rely on consent, you can withdraw it at any time using available settings or by contacting us.

4. How We Share Information

We do not sell your personal information. We may share your information in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers that help us operate and improve the Services, such as:

• Hosting and cloud infrastructure
• Database and storage providers
• Analytics and error-logging tools
• AI infrastructure and processing services
• Email and notification providers
• Payment processors (for paid features, if any)

These providers are authorized to access your information only as necessary to perform services for us.

4.2 Legal and Safety

We may disclose information when we believe it is reasonably necessary to:

• Comply with applicable laws, regulations, or legal processes
• Respond to valid requests from public authorities
• Protect the rights, property, or safety of VitalLog AI, our users, or the public

4.3 Business Transfers

If we engage in a merger, acquisition, restructuring, sale of assets, or similar transaction, your information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy that provides equal or greater protection.

5. International Transfers

The servers and service providers we use may be located in countries other than your own. When we transfer personal data internationally, we take steps designed to ensure an appropriate level of protection.

6. Data Retention

We keep your personal data for as long as needed to provide the Services, maintain our legitimate business operations, comply with legal obligations, resolve disputes, and enforce our agreements.

• Data in your account (logs, goals, and associated entries) is retained while your account is active, unless you delete it or request deletion.
• Backup copies may persist for a limited time in secure archives.

7. Security

We use a combination of technical, administrative, and organizational measures to protect your information.

• Encryption of data in transit (HTTPS/TLS) and, where appropriate, at rest
• Secure password storage using industry-standard hashing algorithms
• Role-based access controls and logging for internal access
• Regular monitoring for suspicious activity, errors, and abuse
• Vendor security review and data processing agreements with key service providers

However, no method of transmission or storage is completely secure.

8. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

8.1 Access and Portability

• Confirmation of whether we process your personal data
• A copy of your personal data in a structured, commonly used, machine-readable format

8.2 Correction

You may request that we correct or update inaccurate or incomplete personal information we hold about you.

8.3 Deletion

You may request that we delete some or all of your personal information, subject to certain legal exceptions.

8.4 Restriction and Objection

• Request that we restrict certain processing of your data
• Object to processing based on our legitimate interests, including certain profiling activities

8.5 Rights Related to “Sale,” “Sharing,” and Targeted Advertising

In some jurisdictions, you may have the right to know whether we “sell,” “share,” or use your personal information for “targeted advertising,” and to opt out of those activities.

8.6 How to Exercise Your Rights

You can exercise certain rights directly in the app or account settings. For additional requests—such as obtaining a copy of your data or requesting deletion—please contact us using the details in Section 11.

9. Children’s Privacy

VitalLog AI is designed for general use. We do not knowingly collect personal information from children where applicable law requires parental consent.

10. Third-Party Sites and Services

The Services may contain links to third-party websites, apps, or services. We are not responsible for their privacy practices.

11. Contact Us

If you have any questions or would like to exercise your privacy rights, contact us at:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Effective Date” above and provide additional notice where appropriate. Your continued use of the Services after the updated Privacy Policy becomes effective means you accept the revised policy.