Consumer Health Data Privacy Policy
Effective date: June 12, 2026
This is a separate policy about the consumer health data that VitaSync ("we", "us") handles. We publish it on its own, and link it in the site footer, because laws such as the Washington My Health My Data Act and Nevada SB 370 ask for a distinct consumer health data privacy policy. It works alongside our main Privacy Policy. Where the main policy gives the full picture of everything we handle, this one focuses on health data and gives the same protections to everyone, no matter where you live.
If anything here is unclear, email us at support@vitasync.app.
What we mean by consumer health data
Consumer health data is information that is linked to you and that identifies your past, present, or future health status. In VitaSync, that includes the supplements and medications you track and how you use them. We treat the categories listed below as consumer health data.
Categories of consumer health data we collect
- Supplement and medication plans and schedules. The supplements and medications you add to a plan, their doses, and the times or days you set for taking them. This can reveal that you, or a person you care for, take a particular supplement or medication.
- Dose logs and adherence history. The doses you mark as taken or missed over time, your adherence statistics, and inventory counts you keep.
- Care profile descriptions. The name or label and the relationship on a care profile, for example "Mom" or "Dad". A profile can describe you, or it can describe another adult you care for, so this data may relate to a person other than the account holder.
- Label photos during the extraction flow. If you choose to add a product by photo, the label photo you submit and the supplement facts read from it. The photo is used for that extraction step and is not retained for other purposes.
We do not collect location data, and we do not infer health conditions about you beyond the supplements and medications you choose to enter.
Why we collect and use it
We use consumer health data only to provide the features you have asked for:
- To build and show your routine, plans, schedules, and statistics.
- To send dose reminders to you and missed-dose alerts to caregivers, when those features are turned on.
- To read a supplement label you submit and show you the facts so you can confirm them.
- To create the doctor-ready exports and share links that you choose to make.
- To provide support, keep the service secure, and meet legal obligations.
We do not use consumer health data for advertising, and we do not use it to build a profile of you for any purpose other than running the features above.
Categories of sources
We collect consumer health data directly from you, when you build a plan, log a dose, scan a label, scan a barcode, or create a care profile. If you are a caregiver, some of this data is entered by you about another adult in your care. We do not buy consumer health data about you, and we do not collect it from data brokers.
Categories of third parties and affiliates we share it with
We have no corporate affiliates. We share consumer health data only with the service providers below, and only as needed to run the service. Each one acts as our processor, meaning it handles the data for us and under our instructions, not for its own purposes.
| Third party | What it receives | Why |
|---|---|---|
| Supabase | Your account, care profiles, plans, schedules, dose logs, adherence statistics, and inventory counts. | Database, authentication, and backend functions that store and run the service. |
| Anthropic | Label photos you submit for scanning. | An AI vision model reads the supplement facts from the label so you can confirm them. The photo is used for that extraction and is not retained for other purposes. |
| OpenFoodFacts | The barcode number you scan, and nothing else. | Looks up a product by its barcode. We do not send your photos, account, plans, or profile data in a barcode lookup. |
| RevenueCat | Subscription and purchase events, and an app-specific identifier. | Manages your Pro subscription status across platforms. This is billing data, not health data, and is listed here so the picture is complete. |
| Apple | Your purchase and subscription details if you buy through the App Store. | Processes payment and runs auto-renewing billing. This is billing data, not health data. |
| Your purchase and subscription details if you buy through Google Play. | Processes payment and runs auto-renewing billing. This is billing data, not health data. |
We may share consumer health data when the law requires it, such as a valid legal request, or to protect the safety and security of the service. We will not share your consumer health data with anyone else without your consent.
We do not sell consumer health data
We do not sell consumer health data, and we will not sell it. We also do not share consumer health data for advertising of any kind, including cross-context behavioral advertising.
How you exercise your rights
You have the right to ask us to confirm whether we are collecting, sharing, or selling your consumer health data, the right to access it, the right to withdraw your consent to its collection and sharing, and the right to have it deleted, including from our records and from our processors.
Access. Email support@vitasync.app and ask us for a copy of the consumer health data we hold about you.
Withdraw consent. You can withdraw consent for future collection at any time. To stop a specific feature, remove the related data inside the app, or turn the feature off in your settings. To withdraw consent entirely, delete your account using the steps below. You can also email support@vitasync.app and we will help.
Delete. You can delete your account and the consumer health data with it at any time. In the app, on web or mobile:
- Open VitaSync.
- Go to Settings.
- Tap or click Delete Account.
- Confirm.
This runs a backend function that deletes your account and the data associated with it, including your profiles, plans, schedules, dose history, statistics, inventory, label photos and the facts extracted from them, and shares. If you would rather we do it, email support@vitasync.app from the address on your account and we will complete the request. After deletion, copies of your data may remain in routine backups for a short time before those backups cycle out on their normal schedule.
We will respond to your request within the time the law allows. We may need to verify your identity before we act, and you may use an authorized agent to make a request on your behalf.
If you are described in another person's VitaSync care profile and you want that information removed, email support@vitasync.app and we will work with you on the request. The account holder can also delete the profile, or their whole account, at any time.
Your right to appeal
If we refuse to act on your request, we will tell you why. You can appeal that decision by replying to our response, or by emailing support@vitasync.app with the word "appeal" in your message. We will review the appeal and tell you, in writing, whether we will change our decision and the reasons for it. If we deny your appeal, and you are a Washington resident, you may contact the Washington State Attorney General using the complaint form on its website.
No discrimination
We will not deny you the service, charge you a different price, or provide you a different level of quality because you exercised any right described in this policy. We will not retaliate against you for exercising any of these rights.
Changes to this policy
We may update this policy as the service grows or the law changes. When we do, we will change the effective date at the top, and for meaningful changes we will give reasonable notice. We will update this policy before we start doing anything it currently says we do not do.
Contact
Questions or requests about your consumer health data can be sent to: