Privacy Policy

1. Information We Collect

Vitality365 collects information you provide directly when using the app, including:

• Your name and email address (if you create an account)
• Health and wellness data you enter, such as mood, energy levels, pain, sleep, medications, exercise logs, food and hydration records, and journal entries
• Appointment details and caregiver contact information you choose to add
• Device and usage information to improve app performance

If you use the app as a guest (without creating an account), your data is stored on our servers linked to an anonymous session identifier. No email address or name is required.

2. How We Use Your Information

We use your information solely to provide and improve the Vitality365 service:

• To display your health data back to you within the app
• To generate personalized AI-powered wellness insights based on your check-in history
• To send transactional emails (email verification, password reset) if you have an account
• To power the Caregiver Portal when you choose to share a read-only link with a family member

We do not sell, rent, or share your personal health data with third parties for advertising or marketing purposes.

3. Health Data

Health data you enter into Vitality365 is treated with the highest level of care. It is stored securely, used only to power the features you choose to use, and is never shared with insurance companies, employers, pharmaceutical companies, or data brokers. Medication interaction information is provided for general awareness only and is not a substitute for advice from your pharmacist or physician.

4. Data Security

All data is transmitted over HTTPS. Passwords are stored using bcrypt hashing and are never stored in plain text. We implement industry-standard security practices to protect your information from unauthorized access.

5. Data Retention and Deletion

You may delete your account at any time from the Settings page. Upon deletion, all your personal data and health records are permanently removed from our systems within 30 days. Guest session data is retained for 12 months of inactivity before automatic deletion.

6. Third-Party Services

We use Resend to deliver transactional emails. Your email address is shared with Resend solely for this purpose. We do not share health data with any third-party services. Our AI-powered insights use a language model API; health data sent to generate insights is not stored or used to train external models.

7. Children's Privacy

Vitality365 is designed for adults aged 55 and older. We do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. You may export your data or request deletion by contacting us or using the Delete Account feature in Settings. If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA).

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice within the app. Continued use of Vitality365 after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at [email protected]