Consumer Health Data Privacy Policy

Consumer health data (Washington, Nevada, Connecticut and other states)

This section is our consumer health data privacy policy.

• What we collect and why: when you use an AI feature, the health information that request needs (section 4) passes through our server to Anthropic, to produce the answer you asked for. It can include health conditions, symptoms you describe, medications, test results and medical documents, measurements such as weight, blood pressure and glucose, nutrition, exercise, sleep, mood and wellbeing check scores, and reproductive or sexual health information only if it's in what you entered, the documents you added or the health records you connected. We don't keep it. If you turn on sync, we also keep a sealed copy of your records, which can hold all of that (section 2), only to keep your devices in step and back them up for you; it's sealed on your device with keys we don't have, so we can't read it. We don't collect consumer health data in any other way.
• Where it comes from: you, Apple Health (with your permission), your health care providers, whose records reach Vitaspan through Health Records in Apple Health (also with your permission), the documents you add, and the files you import.
• Who we share it with: only Anthropic, our service provider, to answer the request (section 4). Cloudflare, our service provider, stores the sealed sync copy and can't open it. We never sell it.
• Your consent: the AI features run only after you allow them, and you can take that back at any time in Settings → Account and plan. Sync runs only after you turn it on, on a screen that says what's sent; you can turn it off and delete the copy at any time in Settings → Your devices.
• What the app keeps on your device (section 2) stays there, and reaches us only sealed, through sync, if you turn it on.
• We don't use your location or geofencing.
• Your rights: you can ask us to confirm whether we collect, share or sell your consumer health data, to see it, and to delete any we have, at privacy@vitaspan.app. The sealed sync copy holds your own records, which you see in the app; we can't open it, but you can delete it yourself in Settings → Your devices, or ask us to. Appeals work as in section 8.