Privacy Policy

This policy explains how VivaLife AI Inc. (“VivaLife AI,” “we,” “us”) collects, uses, shares and protects personal information when you use the VivaLife AI app for iOS and Android, our website at vivalifeai.com, and our emails (together, the “Service”). We are responsible for the personal information we control. Our Privacy Officer is accountable for our compliance (Section 18). Only staff who need access to personal information to do their jobs have it, and they are bound by confidentiality.

The Service is offered to adults in Canada and the United States. Section 11 describes the rights you have under the privacy laws that apply where you live. Residents of Washington, Nevada and Connecticut should also read our Consumer Health Data Privacy Policy.

VivaLife AI provides general wellness information. It is not a medical device and does not provide medical advice, diagnosis or treatment. See our Terms of Service.

We collect information you give us, information from sources you connect, and some information automatically. Section 7 says how long we keep each kind.

2.1 Account and sign-in

• Email address and an account ID we create.
• How you sign in. The app has no passwords: you sign in with a one-time code we email to you, or with Apple or Google. If you use Apple or Google, we receive your name and email address (Apple may give us a private relay address instead), whether the provider has verified that address, and an identifier for your account with that provider. From Google we also receive a link to your profile picture. If your VivaLife AI name or photo is empty, we fill it in from Apple or Google; we never replace a name or photo you already have.
• Sign-in records: a log of account events (sign-ups, requests for a sign-in code, sign-ins and sign-outs, session renewals, account changes and account deletion, with your email, name, sign-in method and the time); a short-lived record of each sign-in with an emailed code, Apple or Google while it completes; and, for each device you are signed in on, its IP address and device or browser type.

2.2 Profile, settings and goals

• Your name and profile photo
• Your birthday and sex, if you choose to add them
• Your time zone, and your phone's language and region settings (the region chooses U.S. or Canadian health guidance, and is sent with food searches to pick the right food database)
• The health goals you pick when you join (for example blood pressure or blood sugar), and the targets and preferences you set later (for example nutrition and step goals, food preferences, and how often you want reports)
• Your consent choices and when you made them
• Waitlist and referrals. Your place on our waitlist and your own invite code. If you invite someone, we record that the invitation was used, the two accounts involved, and a coded (hashed) version of the invited person’s email address.

2.3 Health and wellness information in your account

With your consent, we collect and store in your account the health information you log, connect or create in the app:

• Activity and body measurements: steps, workouts and gym sessions, weight, body fat, water intake
• Vital signs: heart rate, heart rate variability, blood pressure, blood glucose, blood oxygen, sleep and sleep stages
• Food and nutrition: meals, food logs, saved meals, foods and recipes (including the search you used to create a recipe), meal plans, fasting
• Mind and symptoms: mood, stress (and any reason you give), mental-health check-ins, journal entries, symptoms, pain (and where it hurts), migraine logs, asthma logs (including rescue-inhaler use and puffs), breathing exercises
• Coaching: the habits and goals you set, the options you tap in check-ins, and the coach's suggestions and your responses
• The Bluetooth health devices you pair (type, name, identifier, the manufacturer data the device broadcasts, and when it last synced)
• Daily wellness summaries that earlier versions of the app recorded
• What our AI features produce for you: wellness and weekly reports, visit-preparation summaries (and notes you add after a visit), action plans, predictions, unusual-change alerts, correlations, risk and health scores, recovery scores, streaks, meal analyses and recommendations, and whether you acted on them. These can mention your medications and conditions.

Where it comes from: what you enter; Apple Health or Health Connect, if you allow it (Section 12); Bluetooth health devices you pair; and your phone’s motion sensor, for step counting.

Recipes our AI creates for your searches are also added to the shared recipe library that every user can browse. They are stored without anything that links them to you (the record of which account added a recipe’s picture is removed within an hour). When you add a recipe from your search to your favourites, the favourite is saved in your account without the picture created for your search, and no copy of that picture is made.

2.4 Information kept only on your phone

Your medications (names, doses, schedules, notes, reminders and the doses you log), the medical conditions and allergies you add, the height, weight, resting heart rate and other measurements in your health profile, your AI chat history and your AI memory are stored on your phone (in the app’s database and the phone’s secure storage), with names, doses, notes and other sensitive details encrypted. They are not stored in your VivaLife AI account, except:

• when you use an AI feature, the details that feature uses are sent to our backend and an AI provider to produce the answer (for AI chat, only the ones you choose; Section 4), and the report or answer it produces may be saved in your account;
• when a message to Viva or the coach names two or more medicines, or asks about taking a medicine (or your medications) with something else (in Spanish or French, just asking whether you can take it can be enough), or one of our reviewed rules finds an interaction, the names of up to eight medicines in total (the ones involved first, then, if Medications is switched on, others on your list), as written in your message or on your list with doses and similar details removed, are sent through our backend to the U.S. Food and Drug Administration's public drug-label database, with nothing that identifies you (Section 5), and the look-up can repeat for your next message in that conversation. The interaction check in the Medications section runs on your phone and sends nothing;
• when you create a weight-loss meal plan, the current weight it uses (which the app fills in from your latest logged weight or your health profile, and which you can change) is saved with the plan in your account;
• if you create an encrypted backup (Section 8), it contains this information, encrypted with a passphrase only you know.

Weights you log in the weight tracker, and medicine use you record in other logs (such as rescue-inhaler use in the asthma log), are stored in your account (Section 2.3). Medication reminders, including “Remind me in an hour”, show generic text and never name the medication.

When you sign out, this information stays on your phone for when you sign back in. Your AI chat history and your AI, coach and goal settings are moved into encrypted storage that the app opens only for your account; anyone who signs in to another account on the same phone can’t see them. Reminders for your account stop while you are signed out and come back when you sign in again.

The app also keeps on your phone a log of its AI safety decisions for each account that signs in on it: the type of each question (for example, a medication question), which kinds of your information were used, and safety flags such as a detected emergency, never your messages (the most recent 1,000 entries). It stays when you sign out and when your account is deleted, and is removed when you uninstall the app. An encrypted backup you create includes yours. You can export yours in Settings → Export my data (Section 10).

2.5 AI chat, coaching and AI memory

• The messages you send to the AI assistant (Viva) and the coach, and the recent messages of that conversation
• The health details the AI uses to answer you (Section 4)
• AI memory. If you turn it on, the app keeps a small set of notes on your phone (the goals you chose when you joined, the health goals in your health profile, your food preferences, notes you kept from coach check-ins, coach insights you were shown, and summaries of your reports) and uses them in later AI answers. It is off unless you turn it on, either when the app asks (Section 8) or in Settings → AI memory, where you can also view it, edit the coach notes you kept, or clear it. When a note changes, or the app removes one by itself, the app keeps its earlier versions on your phone (Section 7). When you delete a note, its history is deleted with it, and clearing AI memory deletes all of it. If you have Pro or Ultra, AI memory can also keep short things you tell Viva or the coach in chat, such as a preference, a goal or a correction, in your own words. To find them, the app sends your recent chat messages to Google (Section 4). The app leaves out medication, condition, allergy and other medical details, and conversations about a crisis. You can view and delete these notes like any other, and clearing AI memory also stops the app from looking at your earlier messages again.
• Your feedback on AI answers: thumbs up or down, reports of a bad answer, and which kind of your information the answer used. We don't store the message itself with it.

2.6 Voice input

We never receive audio from voice input. When you dictate a message, your phone’s own speech recognition turns it into text: on the phone where possible, otherwise on Apple’s or Google’s servers under their privacy policies. The text appears in the message box and is sent only when you tap send. Answers read aloud use your phone’s built-in voice.

2.7 Photos

• Profile photo: stored at a public web address (anyone with the link can open it). When you replace it, the old photo is deleted from storage (if that fails, it is deleted with your account).
• Meal photos: a photo you add when logging food is sent to an AI provider for analysis and not stored. A meal photo you send in the AI chat is analyzed by an AI provider; the photo is not stored, but the analysis is saved in your account and added to your conversation.
• Gym photos: a photo you add to a piece of equipment in your gym list is stored privately in your account and not sent to an AI provider; when you delete or replace it, it is deleted from storage. A photo you take to recognize a piece of equipment is sent to an AI provider and not stored.

2.8 Community videos and comments

If you use the community feed, we collect the videos you record or upload (including their sound), captions and topics, your comments, and your likes, follows, bookmarks, shares, the videos you hide, the videos you watch and for how long, and the reports and blocks you make. Before a video is published, an automated service checks its images (not its sound), and the published copy is re-encoded without the location and other details your phone may have embedded in the file. Captions and comments are checked against a list of blocked words, and one that contains a blocked word is not saved. A video that fails moderation is not published, and the result is recorded against your account. Repeated failures automatically suspend your ability to post videos: for 7 days at the third, 30 days at the fourth, and permanently at the fifth. See Section 5.2 for who can see what.

2.9 People you add: contacts and appointments

You can add care and emergency contacts (name, phone, email, address, relationship and notes) and medical appointments (doctor, location, room, date and time, notes, and whether you want a reminder). These are stored in your account. Please add someone’s details only if they are happy for you to do so.

2.10 Purchases

You can subscribe in the app through the Apple App Store or Google Play. If you subscribe on our website, Stripe handles the payment and receives your email address, account ID and chosen plan, and collects your IP address and device details to prevent fraud. Apple, Google and Stripe collect your payment details directly; we never see or store your card number. We receive your subscription status and purchase history through RevenueCat, our subscription service.

2.11 Device, technical and diagnostic information

• IP address, device type, operating system, app version, language and time zone
• A Firebase installation identifier and a push-notification token, created for every installation of the app (notifications are shown only if you allow them)
• An installation identifier used to deliver app updates
• A log of the push notifications we send you (including their text)
• Crash and performance reports (through Sentry): device and app details, the steps leading up to an error, and performance timings for a sample of sessions. The app doesn’t tag them with your account, and it cuts the addresses of its network requests down to the server and the first part of the path (for example our database’s address followed by “/rest”), so they don’t include your account ID or what you looked up. An error’s own description can still include details of what failed. When the app hits an error, Sentry also records a replay of the screens involved, with all text and images masked.
• Usage records of our AI features (which feature and model, how much text was processed, the cost, your plan and a request ID), and alerts when an account's usage is unusually high, used for plan limits and cost control
• Short-term usage and rate-limit records, which can include your IP address
• Our hosting provider's request logs, which include IP address and the approximate location derived from it
• Logs of our cloud functions, which can include your account ID and excerpts of AI responses
• Video delivery logs, which include the IP address of anyone who watches a video

2.12 Our website and emails

• If you join our newsletter on the website: your email address. Our email provider for website sign-ups (Brevo) also records your IP address and browser when you confirm, and whether you open its emails and click their links.
• If you join our waitlist on the website: your email address
• If you sign in on the website: the sign-in cookies described in Section 16
• For newsletter emails our app sends you, whether they were delivered, bounced or marked as spam. We don't track whether you open or click emails our app sends.

2.13 What we don’t collect

• Your precise location. On Android 10 and 11, the app asks for location permission because Android requires it for Bluetooth scanning; we use it only to find your devices and never record your location.
• Your address book or calendar
• Your browsing history outside the app, or the list of apps on your phone
• Advertising identifiers

We use your information to:

• Provide the Service: tracking, trends, reminders, reports, coaching and the community feed
• Answer your questions and create reports with AI (Section 4)
• Sync your data across your devices, and import data from Apple Health or Health Connect when you allow it
• Manage your account and subscription, including referral rewards on the waitlist
• Send sign-in codes and service messages (for example waitlist emails and report-ready notifications), and the marketing emails you choose
• Moderate community content, and record the reports you make about it
• Keep the Service secure: prevent abuse and fraud, apply usage limits, and investigate security issues
• Find and fix bugs and improve performance, including using your feedback on AI answers
• Respond to your requests and comply with the law

Things that happen automatically

• Scheduled reports. Off until you turn them on in Coach settings → Scheduled reports, on the Ultra plan. When they are on, a report is created on a schedule if you have used an AI feature or opened a report in the last 5 days. If you leave Ultra, they pause; if you come back to Ultra, they resume with the switch where you left it.
• Ultra extras. On Ultra, with scheduled reports on, a visit-preparation summary is created automatically when you have a medical appointment in the next 48 hours, and each day we check the daily wellness summaries in your account for unusual changes and trends; when something stands out, an AI provider prepares a risk summary for you. With scheduled reports off, neither runs.
• Coach insights. When you open the Coach screen, the app may ask an AI provider for insights about your recent data (for example weight, glucose, medication adherence and mental-health scores), with the switchable sources limited to the ones you chose for AI chat (Section 8).
• Coach reports. On Ultra, if you have turned on scheduled reports, opening the Coach screen requests a new report when your last one is older than the frequency you chose. The request includes the medication details (name, dose, schedule and notes) and condition names stored on your phone, whatever you chose for AI chat.
• Safety screening. Messages you send to the AI, and some other AI requests, are automatically screened for signs of risk, such as self-harm or a medical emergency: first by our own rules, then by OpenAI’s moderation service. When a risk is detected, the app shows safety resources, the AI is told to address the risk first, and we record the type of risk and what the app did (never your message).
• Video moderation. Videos are checked automatically before they are published (Section 2.8).

Automated decisions. These decisions are made by automated processing: not publishing a video that fails moderation; suspending your ability to post videos after repeated failures (Section 2.8); refusing a caption or comment that contains a blocked word; applying your plan’s usage limits for AI features (for example the free plan’s daily question limit, after which the app offers a paid plan) and fair-use limits on paid plans; holding new accounts on the waitlist while we open places; and withholding calorie targets in the meal planner and in AI answers when your conditions, medications, age or weight mean the app can’t safely give one. When one of these affects you, the app shows you the result and says it was decided automatically. You can ask our Privacy Officer what information was used and the main reasons for the result, ask us to correct that information, and send your comments to a member of our staff who can review the decision. Apart from a video-posting suspension, usage limits and the waitlist, none of these decisions affects your access to the Service, your price or your legal rights.

Profiling. Reports, predictions and coaching analyze your health data and how you respond to suggestions, because that is how those features work. Your phone also keeps simple tallies of the coach tips you act on, to order your tips; they aren’t sent to us. We don’t build any other profile of you: your news feed isn’t ordered by the topics you read, and a separate engagement profile we used to calculate has been switched off and deleted.

What we don’t do

• We don't sell your personal information or share it for advertising.
• We don't use your information to train AI models, and our AI providers may not either.
• We don’t use your information for research. The app’s Privacy settings currently include Research participation and Analytics switches; your choice is saved with your account, but neither changes what we collect, use or share.

The app never contacts an AI provider directly; requests go through our backend. For AI chat, the app decides which of your details to include. For reports, our backend reads the data in your account and adds any medication and condition details your phone includes with the request. What is sent depends on the feature:

• AI chat (Viva and the coach conversation). Your message, earlier messages of the conversation (up to 20 with Viva, 10 with the coach), your first name, age and sex, and the health details relevant to your question: your recent activity, sleep and workouts, nutrition, water and fasting, mood, stress (including any reason you gave), symptoms, pain (including where), breathing exercises, recovery score, 7-day trends and patterns, action-plan progress, meal plans and saved recipes, analyses of meal photos you sent in chat, your chosen voice, language and AI preferences, and your AI memory if you turn it on (Section 2.5). It also includes these sources, but only the ones you have chosen (Section 8; to change them, open AI preferences → What Viva is using from the settings icon in AI chat): your conditions (with your mental-health check-in scores, migraine and asthma logs, and the focus areas in AI preferences that name a condition), medications (name, dose, schedule, notes and adherence), allergies, height, weight, vital signs and blood-sugar readings (including asthma peak flow), health goals, appointments (doctor, date, time, address and room) and care-team contacts (name and role only); and your weekly report when conditions, medications, vitals, goals and appointments are all chosen. When a source is off, it is left out, and earlier messages sent while it was on aren’t sent again. If the app can’t read your choices, it treats every source as off. With medications off, your medication list isn’t sent; if you name a medicine in a message, that message is sent like any other, and the medicines you name are checked on your phone against our reviewed interaction rules and, when a message names two or more medicines or a rule finds an interaction, looked up in the FDA’s drug-label database (also in the message after it). Anything you type is sent as written, and so are messages the app writes for you when you tap a shortcut. Safety checks that run on your phone use your full record but don’t send it; when they stop the app from giving you a calorie target, an AI provider is asked to check answers for calorie advice, without being told why.
• AI memory (Pro and Ultra). If AI memory is on, after a conversation the app sends the messages you and Viva or the coach have exchanged since it last looked (at most the latest 40), with the same sources left out as for AI chat, to Google, which points to short statements you made about yourself. The reply contains only positions in your messages: the app copies your own words from your phone and checks them there, leaving out medication, condition, allergy and other medical details and conversations about a crisis. The notes are kept only on your phone (Section 2.5).
• Reports, visit preparation and predictions. The health data in your account for the period covered, including workouts, sleep stages, heart rate variability, recovery and correlations; your profile (name, birthday and sex); your appointments and notes; mood and journal notes; your coach habits and check-in answers; earlier AI results; the focus areas you pick in Coach settings; and the medication details (name, dose, schedule and notes) and condition names your phone adds when the app requests a report, including automatically when you open the Coach screen on Ultra with scheduled reports on (Section 3). The switches above don’t apply to reports, visit preparation, predictions and risk summaries, coaching check-ins, meal plans, or photos and foods you send for analysis.
• Coach check-ins. Your habits and what you wrote about them, your coach goal and target, the options you tapped (including reasons for skipping, such as feeling unwell, and what got in the way, such as a pain flare), recent steps, sleep, mood, stress and water, your weekly averages (including nutrition and blood pressure), your past suggestions and how you responded, patterns we calculate from them, and, if AI memory is on, your coach notes and the goals you chose when you joined. Broad health categories worked out on your phone (for example “cardiac”) are used by our backend to rule out unsuitable suggestions and are not sent to the AI provider.
• Photos, food and recipes. The photo or food description you submit; for recipe search, the words you search for; for meal plans, your calorie and protein targets, goal and diet type. When few saved recipes match a meal plan, search words based on the health conditions you pick in the meal planner (for example “low sodium”) are sent to OpenAI to find recipes.

AI answers can be wrong. They are wellness information, not medical advice. Medication interaction checks come from reviewed rules and public drug labels, not from an AI; an AI explains the result, and a second automated check reviews that explanation. If that check finds a problem, the app shows the rule-checked result instead.

We do not sell personal information and do not share it for advertising. We share it only as described here.

5.1 Service providers and other recipients

Service providers process information for us, on our instructions and under their service agreements with us, to run the Service. They may not use it for their own purposes, with two exceptions: OpenAI may keep the requests it receives for a limited time to detect abuse (Section 4), and Stripe also uses payment information for its own fraud prevention and legal obligations, under its privacy policy.

Other recipients receive limited information when you use a feature that involves them. They are not our service providers, and their own privacy policies apply:

When you open one of our emails, your email app may load fonts from Google and images from the sites that host them.

5.2 Other users and the public

• Approved community videos, with their captions, topics and the poster's account ID, can be viewed by anyone, including people without an account. The video files are at public web addresses.
• Your comments are visible to other signed-in users until you delete them or the video they are on is removed.
• Your name and profile photo are shown to other signed-in users only if you have a published video, or a comment on one.
• Which accounts you follow, and which videos and comments you like, can be seen by other signed-in users.
• Your health information, medications and AI conversations are never shown to other users.

5.3 Legal requests

We disclose personal information to a government or law-enforcement body only when the law requires it: for example a valid court order, warrant or subpoena, or a report the law obliges us to make, such as a report of child sexual abuse material. We push back on requests that are unclear or too broad, disclose only what is legally required, and notify you before disclosing unless the law, a court order or the nature of a mandatory report forbids it. The one exception is an emergency involving an imminent risk of death or serious harm, where we may disclose the minimum needed to prevent it, and we tell you afterwards unless the law forbids it.

5.4 Business transfers

If VivaLife AI Inc. is involved in a merger, acquisition or sale of assets, personal information may be transferred to the new owner, who must keep protecting it as this policy describes, and you are notified before your information becomes subject to a different privacy policy. We have no affiliates that receive personal information.

5.5 At your direction

When you share something from the app (for example a data export or a chat transcript) using your phone’s share menu, or open a contact’s address, phone number or email in another app, it goes to the app or person you choose.

Our main database, and the photos stored with it, are in Canada (Montreal). Community videos and the encrypted backups you create are stored with Amazon Web Services in the United States (Oregon). Our backend functions run in the data centre nearest to you, which is often in the United States. Most of our other providers process information in the United States; Brevo processes website newsletter sign-ups in the European Union, videos are also cached in Europe and Israel (and in Canada and Mexico within North America), and barcode lookups that fall back to Open Food Facts go to France (Section 5.1). While your information is outside your province or country, our agreements with the providers that work for us require them to protect it, but courts and authorities there may be able to access it under local law. Questions about our providers outside Canada go to our Privacy Officer (Section 18).

Quebec residents: your personal information may be communicated outside Quebec, to the providers and places listed in Section 5.1.

• What AI chat can use: nothing is chosen for you. The app asks which sources AI chat may use (conditions, medications, allergies, height, weight, vitals and blood-sugar logs, health goals, appointments, care team) and whether to turn on AI memory, with nothing selected. It asks when you join. If your account was created before the app asked this, it asks the next time you open the app, and it doesn’t carry over earlier settings. Your choice is saved only on your phone (and kept there, encrypted, while you are signed out), so the app asks again on a phone that doesn’t have your choice saved. Until you answer, AI chat and the coach’s AI insights use none of these sources. You can change them any time in AI preferences → What Viva is using. Your choice applies to AI chat (Viva and the coach conversation) and the coach’s AI insights, not to reports, visit preparation, predictions and risk summaries, coaching check-ins, meal plans, or photos and foods you send for analysis (Section 4).
• AI memory: off unless you turn it on. Turn it on or off, view it, edit the coach notes you kept, or clear it, in Settings → AI memory. While it is off, the coach doesn’t offer to remember anything.
• Scheduled and automatic reports: off until you turn on Coach settings → Scheduled reports. The same switch controls the reports the Coach screen requests when you open it, and Ultra’s automatic visit preparation and risk summaries (Section 3). You can still ask for a report yourself at any time.
• Focus areas: none is chosen for you, and the app never adds one on its own. You can pick focus areas for AI chat in AI preferences and for reports in Coach settings. Focus areas chosen in earlier versions of the app were cleared once, so you may need to pick yours again.
• Apple Health and Health Connect: change what the app can read in your phone’s Health settings.
• Notifications: turn off push notifications in Settings → Push notifications, turn off each reminder where you set it (for example a medication reminder), or turn off all notifications in your phone’s settings.
• Marketing emails: turn off Marketing communications in Settings → Privacy settings, or use the unsubscribe link in any newsletter.
• Encrypted backup: off unless you create one in Settings → Backup & restore. A backup copies the app’s data on your phone, including your medications, conditions, allergies, chat history and AI memory and the keys that protect them, and encrypts it with a passphrase you choose (Argon2id and AES-256-GCM) before it leaves your phone. We can’t read it, and we can’t recover it if you forget the passphrase.
• App Lock: require Face ID, fingerprint or your passcode to open the app.

Withdrawing consent

Processing your health information is what the app does, so your consent to it can’t be switched off while you keep using the Service. To withdraw it, delete your account (Section 9). You can withdraw the optional choices above at any time without affecting the rest of the app.

• How: in the app, go to Settings → Delete account, type the confirmation phrase, and pass your phone’s security check if it has one. If you can’t use the app, see our Account & Data Deletion page.
• About 30 days to change your mind: deletion normally runs 30 to 31 days after your request; if a step fails, we retry it daily until it completes. To cancel before then, open the app, go back to Settings → Delete account, tap Cancel deletion and pass your phone’s security check if it has one. Signing in again does not cancel it. When you ask in the app, or once we record a request you send by email, scheduled and automatic AI reports (including visit preparation and risk summaries) are switched off, and they stay off if you cancel. Until deletion runs, your account and data still exist, and anything you do in the app is processed as usual.
• What is erased: your account and everything stored in it, your uploaded files and videos (including copies on our video delivery network), your encrypted backups, your sign-in log and sessions, your safety-screening records, and your subscription record at RevenueCat. Comments other people left on your videos, and their replies to your comments, are deleted too.
• Subscriptions: deleting your account doesn’t cancel a subscription. Cancel it first in your App Store or Google Play settings, or, for a subscription bought on our website, on the website’s account page; otherwise you may still be charged.
• What remains: the record of your deletion request, for 3 years; logs, crash reports and our hosting provider’s backups until their periods run out (Section 7); summary tables that are refreshed within 7 days; copies OpenAI keeps for a limited time (Section 4); copies of your public videos or photos that other people already downloaded; records Apple, Google and Stripe keep of your purchases; the records Apple and Google keep of your sign-ins with them; the installation records our notification and app-update providers (Firebase and Expo) keep until they expire; our email provider’s list of addresses that bounced or complained; for up to 14 days, a failed video-moderation message that names the video and your account ID; for up to an hour, copies of your videos kept by devices that already played them; if your email address is on our list of reviewer and team accounts, that entry; and, if you signed up on our website, your newsletter subscription (until you unsubscribe) and waitlist sign-up (until you ask us to remove it).
• Your phone: deleting your account does not erase the data stored on your phone. To remove it, sign out of the app first, then uninstall it. On iPhone, some copies (for example of your medications, appointments and contacts used by the AI) are kept in the phone’s secure keychain, which uninstalling alone does not clear; signing out first does. The keys that encrypted your phone’s data can stay in the keychain after that; without the data, they reveal nothing.

Settings → Export my data creates a file with your profile (name, email address, birthday, sex, height and activity level, and the health profile on your phone), medications (with their schedules and reminder settings) and medication log, conditions, allergies, the health goals stored on your phone, appointments, AI chat history, AI memory and its earlier versions, food logs, saved meals and foods, nutrition goals, consents (except your acknowledgements of the AI disclaimer), daily wellness summaries recorded by earlier versions of the app, your videos and follows, AI wellness reports, a record of the app’s AI decisions (no message text), AI usage records and notification tokens. Where something stored on your phone can’t be read (for example after its encryption key was lost), the file says so rather than leaving it out silently.

The in-app export is not complete. It leaves out other information we hold, including most of your vital signs and activity (steps, sleep, heart rate, blood pressure, glucose, weight and so on), water, fasting, mood, symptom, pain, migraine, asthma and journal logs, mental-health check-ins, gym workouts and photos, paired Bluetooth devices, coaching data and coach goals, contacts, meal analyses and meal plans, favourite recipes, visit-preparation summaries and other AI results, the profile photo, time zone and bio stored on our servers, community activity, safety and moderation records, the notification log, subscription and sign-in records, and the files themselves. For a copy of the information in your account on our servers, email privacy@vivalifeai.com and we will send it within 30 days, in a structured, commonly used format (JSON), together with your photos and video files; encrypted backups are sent as they are, and only your passphrase opens them. We can’t include information kept only on your phone (Section 2.4), because we don’t have it; the in-app export includes it.

11.1 Everyone

Wherever you live, you can ask to access, correct, get a copy of, or delete your personal information, and to withdraw consent. Much of this you can do in the app (Sections 8–10). Requests are free, and we will not treat you differently for exercising your rights.

11.2 Canada

Under PIPEDA and the private-sector privacy laws of British Columbia, Alberta and Quebec, you can access your personal information, ask us to correct it, withdraw consent (we will explain the consequences), and challenge our compliance by contacting our Privacy Officer. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Information and Privacy Commissioner for British Columbia, or the Information and Privacy Commissioner of Alberta.

11.3 Quebec

Quebec residents also have the right to receive computerized personal information they provided in a structured, commonly used technological format; to be told about technology that profiles them (Section 3, “Profiling”); to ask us to stop disseminating their information or to de-index it; to be informed of decisions based solely on automated processing (Section 3); and to complain to the Commission d’accès à l’information du Québec. We acknowledge privacy complaints within 5 business days and answer them within 30 days.

11.4 United States

Depending on your state (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), you may have the right to:

• know what personal information we collect, use and disclose, and access it
• get a list of the specific third parties we have disclosed it to (Section 5.1 names them)
• correct it
• delete it
• receive a portable copy
• opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects (we do none of these, so there is nothing to opt out of)
• limit the use of sensitive personal information (we use it only to provide the Service you ask for and for the other purposes the law permits, such as keeping the Service secure and fixing errors)
• not be discriminated against for using these rights

California notice at collection. In the past 12 months we collected these categories of personal information: identifiers (name, email, account ID, IP address, device identifiers); customer records (contacts and appointments you add); characteristics of protected classifications (age and sex); commercial information (subscriptions); internet and app activity (including approximate location derived from your IP address); audio and visual information (photos and videos); biometric information (sleep, heart-rate and exercise data, as California law defines it); inferences (AI predictions, risk and health scores); and sensitive personal information (health information and account sign-in). The sources, purposes, recipients and retention periods are in Sections 2, 3, 5 and 7. We disclosed these categories to our service providers for business purposes; to other users and the public when you post in the community (Section 5.2); and to the other recipients listed in Section 5.1. We have not sold personal information. Earlier versions of our app included Meta’s Facebook software kit, for Facebook sign-in; when the app opened, the kit sent Meta the phone’s IP address and basic device and app details, even if you didn’t use Facebook sign-in. It did not send health information, and the current version of the app doesn’t include it. Apart from that, we have not shared personal information for cross-context behavioral advertising, including that of anyone under 16.

Appeals. If we decline your request, you can appeal by emailing privacy@vivalifeai.com with the subject “Appeal”. We will answer within 45 days and explain our decision. If you disagree, you can contact your state attorney general; our answer will include a link to your attorney general’s complaint page.

Authorized agents. Someone can make a request for you if you give them signed permission. We may ask you to confirm your identity with us directly.

Nevada. Our designated address for requests under Nevada law is privacy@vivalifeai.com. We do not sell personal information.

11.5 Consumer health data (Washington, Nevada, Connecticut)

Our Consumer Health Data Privacy Policy describes the consumer health data we collect and your rights under Washington’s My Health My Data Act, Nevada’s consumer health data law and Connecticut’s data privacy law.

11.6 How to make a request

Use the tools in the app, or email privacy@vivalifeai.com (see also our Data & Privacy page). To protect your account, we act only on requests we can link to it: we will reply to your account’s email address (including an Apple private-relay address) and ask you to confirm the request from there. If you have no account, we match the email address you gave us. We complete requests within 30 days, or, for requests under Washington, Nevada or Connecticut consumer-health-data law, 45 days. If we need longer, as the law allows in some cases, we will tell you why within that time, and you can complain to a privacy regulator about the extension. Deletion requests made by email are carried out without the 30-day waiting period.

With your permission, the app can read these types from Apple Health (iPhone) or Health Connect (Android): steps, walking and running distance (on Android, all distance), floors climbed, active calories, workouts, sleep, heart rate variability, blood oxygen, blood pressure and blood glucose. It does not write anything to them. Steps, workouts, sleep, heart rate variability, blood oxygen, blood pressure and blood glucose are copied into your VivaLife AI account so that the app can show your trends and create your reports. Your daily distance and active calories are shown on your phone and not uploaded; on iPhone, each imported workout’s distance and calories are uploaded with it. Floors climbed is read but not currently used. Data copied into your account is included in the AI requests described in Section 4.

• We use information from Apple Health only to provide the app's health features to you. We never use it for advertising or marketing, never sell it, and never share it with anyone except the service providers that help us provide those features (Section 5.1), when the law requires it (Section 5.3), or when you choose to share it (Section 5.5). We do not store it in iCloud.
• VivaLife AI's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
• Our staff don't look at information from Apple Health or Health Connect, or other health information in your account, except at your request (for example a support or privacy request), to investigate a security problem or abuse, or when the law requires it.

VivaLife AI Inc. is not a healthcare provider or health plan, and does not provide the Service on behalf of one, so the U.S. HIPAA privacy rules do not apply to the Service. The laws described in this policy do apply. If a security breach affects your personal information, we will notify you and the regulators as the law requires: in Canada, when it creates a real risk of significant harm (in Quebec, a risk of serious injury), including the Office of the Privacy Commissioner of Canada, the Information and Privacy Commissioner of Alberta and the Commission d’accès à l’information du Québec; and in the United States, under the Federal Trade Commission’s Health Breach Notification Rule, whenever someone acquires your health information without authorization. We keep a record of every breach.

• Information is encrypted in transit (TLS). Emails are encrypted in transit when the receiving email service supports it.
• On your phone, medication, condition, allergy, AI chat and AI memory details are encrypted (AES-256-GCM) with keys kept in your phone's secure storage; the times of the doses you log, and whether you took or skipped each one, are not encrypted. The keys are never sent to us, except inside an encrypted backup you create, which only your passphrase unlocks. The app's database and its local settings store are excluded from iCloud and computer backups. On Android, cloud backup is turned off for the app. A transfer to a new phone carries only the small settings files the app's components keep, never its database, its local settings store or its secure storage. Those files hold app settings, permission records, installation identifiers and housekeeping data; the times and generic wording of scheduled reminders (never a medication name); up to the last 100 push notifications and the notification token; if you signed in with Google, your Google account ID, name, email address and photo link, and a Google sign-in token that expires within about an hour; and the subscription service's copy of your account ID and purchase records (plan, store and store country, and purchase and expiry dates). Items in the phone's secure storage can be part of an iPhone backup, but they can be restored only to the same iPhone. They reach another phone only inside an encrypted backup you create.
• Our database enforces access rules so that the app can reach only your own private records; community content is visible as Section 5.2 describes. Our backend services can access data to operate the Service. Our staff don't look at your health information except at your request, to investigate a security problem or abuse, or when the law requires it (Section 12).
• Profile photos and community videos are stored at public web addresses, so anyone who has a link can open them.

No system is completely secure.

The Service is for adults. You must be at least 18, and the app asks you to confirm this before you consent to the processing of your health information. If you add your birthday, the app won’t accept one that makes you under 18; it doesn’t otherwise verify your age. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has given us personal information, contact privacy@vivalifeai.com.

Our website sets no advertising or analytics cookies and loads no analytics tools. If you sign in on the website, it stores cookies that keep you signed in. The main one holds your session (including your account ID, email, name, profile-photo link and sign-in providers); it lasts up to 400 days, is renewed while you stay signed in, and is removed when you sign out. A second cookie is set while you sign in with an email code; if you never enter the code, it can stay for up to 400 days. These cookies can be read by the website’s own scripts. The app uses no cookies of its own.

Do Not Track and Global Privacy Control. We don’t sell or share personal information or use it for advertising, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off, and we don’t change our practices when we receive one. Other companies can collect information about your online activity over time and across websites, for example when you open a news article: the publisher’s website (and any advertising or analytics services it uses) loads inside the app under the publisher’s policies, and the cookies it sets stay in the app until you uninstall it. When you subscribe on our website, Stripe’s checkout page is run by Stripe under its own policies.

We will post any update here and change the “Last updated” date. For a material change, we will tell you in the app or by email. If a change requires your consent, for example a new use of your health information, the app will ask you to agree to the updated policy before you continue. If you don’t agree, you can sign out and email us to delete your account (Section 11.6).

Questions, concerns, requests or complaints about your personal information go to our Privacy Officer, who is responsible for VivaLife AI Inc.’s compliance with this policy:

Privacy Officer, VivaLife AI Inc.
privacy@vivalifeai.com
508-546 Beatty Street
Vancouver, BC V6B 2L3
Canada

For help with the app itself, contact support@vivalifeai.com.