Vitora®
Notify me

Privacy policy

We collect as little data as possible. Here is exactly what we collect, why, and on what legal basis.

Controller

The controller responsible for personal data on this website is named on the Impressum page. For any data-protection request, please contact support@getvitora.com.

Applicable law

This site is operated from Switzerland and complies with the revised Swiss Data Protection Act (revFADP). Because the site is also used by people in the EU/EEA, the EU General Data Protection Regulation (GDPR) applies in parallel.

Visiting the site

When you visit getvitora.com, our host Netlify (Netlify, Inc., San Francisco, USA) records standard server logs (IP address, user-agent, requested path, timestamp) for a limited period to operate and protect the service. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR). Transfer to the United States is covered by the EU Standard Contractual Clauses that Netlify has in place. We do not use analytics or tracking tools.

Launch notification signup

When you submit the launch-notification form we store your email address, chosen language, and the timestamp of the submission. Data is stored on Supabase (Supabase Inc., EU region Frankfurt). We will send exactly one email — when the app launches — and delete the data afterwards. Legal basis: consent (Art. 6(1)(a) GDPR), which you give by submitting the form. You can withdraw this consent at any time by emailing support@getvitora.com; we will delete your address within 7 days.

Cookies

We do not use tracking or marketing cookies. The only cookie we set is a strictly necessary functional cookie ("NEXT_LOCALE") that remembers your chosen language. Strictly necessary cookies do not require consent under § 25 (2) TTDSG (DE) or revFADP (CH).

The Vitora app

Vitora has no backend server and no user accounts. There is no central database where your data is collected — everything the app stores lives locally on your device, protected by iOS. The sections below describe the only cases where data ever leaves your device.

Apple HealthKit

  • Data: steps, sleep, heart rate/HRV, respiratory rate, workouts, weight, water and nutrition entries.
  • Processing: entirely on-device, to compute dashboard scores (Recovery, Strain, Body Battery, etc.).
  • Transmission: none. This data never leaves your device.
  • Legal basis: not applicable — no data is transmitted to us or any third party.

AI-assisted food analysis

  • Text descriptions: you can choose between two engines (Settings → Profile → AI Integration).
  • On-Device (Apple Intelligence): processed entirely on your device, nothing is transmitted.
  • Vitora AI (optional for text, always used for photos — on-device models can't process images yet): your free-text description (e.g. "a plate of pasta with minced meat") or your photo is sent to Vitora AI, a lightweight server Vitora operates itself, which forwards the request to Google's Gemini API to estimate calories and macros and returns the result. No account and no API key are required. Photos are compressed before upload; no user ID or health context is attached to any request.
  • Rate limiting: Vitora AI allows a limited number of free requests per device per day. An optional bonus code, entered in your profile, removes this limit — it does not create an account or a subscription.
  • Processor: requests are relayed through Vitora's own server infrastructure (Cloudflare) to Google's Gemini API (Google LLC / Google Ireland Limited, USA/Ireland). Google's own privacy policy governs its part of the processing.
  • Legal basis: explicit consent (GDPR Art. 9(2)(a)), since this involves health-related data — the app requests this consent separately and it can be revoked at any time before either feature becomes usable.
  • Retention: Vitora itself does not store the request or the response at any stage of the relay. Any transient processing at Google is governed by Google's own API data policy.

Voice input

  • If you describe a meal by voice instead of text, the app uses Apple's Speech framework for transcription. Depending on device and language, Apple may process this audio either entirely on-device or on Apple's own servers.
  • Processor: Apple Inc., under Apple's own privacy policy — Vitora itself never receives or stores this audio.

Purchases (Tip Jar)

  • Optional in-app purchases to support development run through Apple's StoreKit and the service provider RevenueCat, Inc. (USA).
  • Data: purchase/transaction data and an anonymous device/app-instance ID assigned by RevenueCat. No name, no email address.
  • Legal basis: performance of a contract (GDPR Art. 6(1)(b)) — necessary to process the purchase you initiated.
  • International transfer: RevenueCat processes data in the USA under its own standard contractual clauses/privacy terms.

Local-only data (never leaves your device)

  • Profile name, profile photo, personal goals, journal entries, milestone history, dashboard settings. Stored using iOS's own protected storage mechanisms (including Keychain and encrypted files).
  • Crash/diagnostic data (MetricKit) is stored locally on-device only and never transmitted by Vitora. Separately, Apple may receive anonymized crash data from users who opted into "Share With App Developers" in iOS Settings — that flow is governed by Apple, not us.

Your rights in the app

Since there are no user accounts and no server, you have full control directly on your device: clearing app data or deleting the app permanently removes all locally stored information. For requests concerning the third parties named above (Google, RevenueCat, Apple), their own privacy policies and contact channels apply. For any questions, reach us as usual at support@getvitora.com.

Your rights

You have the right to access, correction, deletion, restriction of processing, data portability, and objection at any time — email us at support@getvitora.com. You may also lodge a complaint with a supervisory authority: in Switzerland with the FDPIC, in Germany with your state data-protection authority, in Austria with the DSB.

No profiling, no third-party sharing

We do not profile users, run no advertising, sell no data, and share your address with nobody outside the processors named above (Netlify, Supabase).

Changes to this policy

We may update this policy when services or law change. The current version is always at this URL.