Privacy Policy

This Privacy Policy explains how VivaLife AI Inc (“VivaLife AI,” “we,” “us,” or “our”) collects, uses, shares, and protects your information when you use the VivaLife AI mobile application for iOS and Android and related services (together, the “Service”).

VivaLife AI is a health and wellness tracking app. Because health information is sensitive, we hold ourselves to a simple standard: we collect data only to provide the Service to you, we never sell your personal information, and we never share it for advertising. This policy is effective as of August 23, 2026. If you have any questions, contact us at support@vivalifeai.com.

We collect the following categories of information. All of it is collected to operate the Service; none of it is sold or shared with third parties for their own purposes.

Account & profile information

• Identity and contact details — your name, email address, phone number (for your profile and any emergency contacts you add), date of birth, and gender.
• User identifiers — an account ID we create to operate your account.
• Sign-in data — you can sign in with Google, Apple, or Facebook (all optional and user-initiated), or with email and password, or a one-time email code. We receive only the basic profile information needed to create your account.

Health & fitness information

The core of VivaLife AI is health tracking, so with your permission we collect the health data you choose to log or connect:

• Wellness and activity data processed on our servers — sleep, heart-rate variability, blood oxygen, blood pressure, blood glucose, heart rate, weight, exercise and activity, diet and nutrition logs, and menstrual-cycle tracking. This powers your tracking, trends, reports, and coaching.
• Symptoms and other wellness details you choose to log
• Readings from Bluetooth (BLE) health devices you pair with the app
• Data you choose to sync from Apple Health (HealthKit) or Android Health Connect

Kept on your device: your medications, medical conditions, and AI chat history are stored encrypted on your phone — not in your VivaLife AI account. When you check an interaction or run an AI report, only the details needed to answer that request are sent to our processors (Section 5); they are not stored on our servers.

Health data — including anything synced from Apple Health or Health Connect — is used only to provide the app’s features to you. It is never used for advertising and never sold.

Messages

• Your conversations with the AI health coach — chat history is stored on your device, not in your VivaLife AI account; messages are processed by our servers only to generate a response (Section 5)
• Comments you post on community videos

Photos, videos & audio

• Profile photos (avatars), meal photos, and videos you upload to the community feed
• Voice input — if you use voice features, your audio is transcribed to text and the recording is then deleted. We do not keep audio recordings.

Purchase information

If you subscribe, we receive your purchase history from our subscription-management provider (RevenueCat). Payment itself is handled entirely by Apple, Google, or — for purchases made on our website — Stripe. We never see or store your card number.

App activity

• How you interact with the app (for example which features you use)
• Searches you run inside the app
• Content you create in the app

Diagnostics & device identifiers

• Crash logs and performance diagnostics (via Sentry) so we can fix bugs
• A push-notification token (Firebase Cloud Messaging) so we can deliver notifications you enable
• A device identifier used by RevenueCat to manage your subscription
• Hardware identifiers of Bluetooth health devices you pair, so the app can reconnect to them

What we do NOT collect

• Your location
• Your device contacts (address book)
• Your calendar
• Your web browsing history or list of installed apps
• Advertising identifiers — the app contains no ads and no advertising SDKs, and advertising-ID collection is disabled

We use your information to:

• Create and operate your account and provide the app's features, including health tracking, trends, and reminders
• Power AI features — chat with the health coach, personalized insights, and analysis of the data you log (see Section 5)
• Sync your data across your devices and with Apple Health / Health Connect when you enable it
• Manage your subscription and process purchases made through the Apple App Store or Google Play
• Send push notifications you have enabled (you can turn these off at any time — see Section 9)
• Operate the community feed, including moderating uploaded videos and comments to keep the community safe
• Provide customer support and respond to your requests
• Diagnose crashes, monitor performance, and improve the Service
• Protect the security and integrity of the Service and comply with legal obligations

We do not use your data for third-party advertising, and we do not sell it — to anyone, ever.

Where the EU/UK General Data Protection Regulation (GDPR) applies, we process your personal data on these legal bases:

• Consent — for your health and fitness data (including Apple Health / Health Connect sync and Bluetooth device data), which is special-category data under the GDPR, and for push notifications. You can withdraw consent at any time in the app or your device settings.
• Performance of a contract — to create your account, deliver the features you use, and manage your subscription.
• Legitimate interests — to secure the Service, prevent abuse, moderate community content, and fix crashes and bugs, in ways that do not override your rights.
• Legal obligation — where we must retain or disclose information to comply with the law.

VivaLife AI’s AI features (the health coach chat, insights, and analysis) are powered by large-language-model providers: OpenAI, Google (Gemini), and Anthropic (Claude).

• Server-side only. The app on your phone never communicates with these providers directly. Requests go through our own backend, which controls exactly what is sent.
• Only what the request needs. AI requests include only the health details needed for your request — for example, medication and condition names for an interaction check, or wellness data (activity, sleep, vitals, and lab results you have logged) for chat and reports.
• No retention, no training. Your data is not stored on the AI providers’ servers and is not used to train their models — our provider agreements include zero-data-retention terms.
• Drug-label lookups. When you run a medication interaction check, the U.S. FDA’s public drug-label service receives the medication names — and nothing else — to retrieve label information.
• Service providers only. These providers process data solely on our instructions to generate responses for you. They are not permitted to use your data for their own purposes.
• Wellness information, not medical advice. AI-generated content is informational only and is not medical advice, diagnosis, or treatment. See our Terms of Service for the full medical disclaimer.

We do not sell your personal information, and we do not share it with third parties for their own use. We share data only in these limited situations:

Service providers (processors)

Companies that process data on our behalf, under contract, to run the Service:

• Supabase — database and authentication (our primary backend)
• Amazon Web Services — media storage and delivery (S3 / CloudFront) and transactional email (SES)
• Google Firebase Cloud Messaging — push notifications
• Sentry — crash reporting and diagnostics
• RevenueCat — subscription management
• Stripe — payment processing for purchases made on our website (never sees your health data)
• OpenAI, Google (Gemini), and Anthropic (Claude) — AI processing, server-side only (Section 5)

App stores

Apple and Google process your payments when you subscribe; their own privacy policies apply to that processing.

Other users

Content you post to the community — videos and comments — is visible to other VivaLife AI users (Section 7). Your private health data is never visible to other users.

Legal and safety

We may disclose information if required by law or where necessary to protect the rights, safety, or property of our users, the public, or VivaLife AI. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will notify you before your data becomes subject to a different privacy policy.

VivaLife AI includes a community video feed. Videos you upload and comments you post are visible to other users of the app, along with your profile name and avatar. Do not include personal or health information in a video or comment that you would not want other users to see. You can delete your videos and comments at any time in the app.

• While your account is active — we keep your data so the app can work for you.
• When you delete your account — deletion starts a 30-day grace period (you can cancel by signing back in). After that, all your personal data — including media and backups — is permanently erased.
• Voice audio — deleted immediately after transcription; we keep only the text.
• Operational logs (crash and diagnostic logs) — kept on a short automatic rotation, then deleted.
• Purchase records — Apple, Google, Stripe, and RevenueCat retain records we cannot delete where they are legally required to keep them (for example for tax and accounting). When you delete your account we also ask RevenueCat to delete your subscriber record.

• Delete your account — in the app under Settings → Delete Account, or via our public Account & Data Deletion page. Deletion is permanent after the 30-day grace period.
• Delete specific data — you can delete individual entries, media, and chat history in the app without closing your account.
• Export your data — download a free, complete copy of your data in JSON format in the app under Settings → Export My Data (GDPR data portability).
• Push notifications — turn them off at any time in the app’s notification settings or your device’s system settings.

All users

You can access, correct, export, and delete your data directly in the app, or email us at support@vivalifeai.com and we will action your request. See also our Data & Privacy hub.

European Economic Area, UK & Switzerland (GDPR)

You have the right to:

• Access your personal data and receive a copy (portability)
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict or object to certain processing
• Withdraw consent at any time, without affecting prior processing
• Lodge a complaint with your local data-protection supervisory authority

California (CCPA/CPRA)

California residents have the right to know, correct, and delete personal information we hold, and the right to non-discrimination for exercising these rights. We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined by the CCPA — so there is nothing to opt out of. To exercise any right, use the in-app tools or email us.

• All data is encrypted in transit using TLS
• Sensitive medical fields are additionally encrypted on your device before they are stored
• Our database enforces row-level security, so your records are only accessible to your account
• Photos and videos are delivered through signed, access-controlled CDN links

No system is 100% secure, but we design for defense in depth and review our security practices regularly. If we learn of a breach affecting your data, we will notify you as required by law.

Our infrastructure is hosted in the United States. If you use the Service from outside the US, your data is transferred to and processed in the US. Where required (for example for EEA, UK, or Swiss users), we rely on appropriate safeguards such as Standard Contractual Clauses with our service providers.

VivaLife AI is for adults. You must be at least 18 years old to use the Service, and the app asks you to confirm this before you can consent to health-data processing. Health data is sensitive, and a valid consent to process it must be your own — so we do not permit use by minors, even with parental involvement. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we will delete it. If you believe someone under 18 has provided us personal information, contact us at support@vivalifeai.com.

We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and update the “Last updated” date above. For material changes, we will give you additional notice in the app or by email before the changes take effect. Your continued use of the Service after an update means you accept the revised policy.

Questions, concerns, or requests about this Privacy Policy or your data? Contact:

VivaLife AI Inc
support@vivalifeai.com