Vitals Privacy Policy

Last updated 30 August 2026

Vitals is a fitness tracker. Almost everything it records stays on your phone. This page says exactly what is stored, what leaves the device, and when.

What stays on your device

Your food log, bodyweight, workouts, routines, supplement schedule, water and electrolyte intake, and your profile (height, age, sex, activity level, goals) are stored only on your iPhone. There is no account, and this data is not uploaded anywhere by default.

The database files are marked so iOS keeps them encrypted while your phone is locked. They are included in your device backups, which are controlled by your own iCloud or computer backup settings.

Apple Health

If you turn on Apple Health syncing, Vitals writes the food, water, bodyweight and workouts you log into Health, and reads your bodyweight, steps, active energy, VO2 max, resting heart rate and body fat percentage to keep your targets accurate. This exchange happens entirely on your device. Health data is never sent to our servers, never used for advertising or marketing, and never shared with anyone.

The AI features

Some features send text or an image to Anthropic's Claude API through a small server we run:

• Describe what you ate sends the description you type, and any photos you attach. Those can be photos of the meal itself, not only of a label, and they carry whatever the camera saw.
• Photograph a nutrition label sends the photo of the label.
• Photograph a supplement sends the photo of the bottle or label.
• Estimating micronutrients runs automatically after a meal is analysed, and sends the names and serving sizes of the foods in that meal.
• Check a claim sends the claim you type, plus abstracts retrieved from the public research literature.
• Opening a research topic sends the topic and its abstracts, without you tapping anything further.

Nothing else is attached. Your name, your weight, your workouts, your check-ins and the rest of your log are never included. Our server forwards the request, returns the answer, and does not store the content of either.

The description and the claim are free-text fields, so they carry whatever you actually type into them, and a label photo carries whatever the camera sees, including any text printed on the packet. Don't type anything into these fields you wouldn't want read by Anthropic's API.

Anthropic processes these requests to produce a response. Anthropic does not train its models on data submitted through its API. See theAnthropic Privacy Policy.

To stop one person from exhausting the shared service, each request carries a random identifier generated on your device the first time the app runs, and, once you subscribe, the Apple-signed receipt for that subscription. Neither is your name, your email or your Apple ID, and neither is a device identifier issued by Apple. They do travel together, so requests from one subscriber can be counted as one subscriber. Our server and its hosting provider also see your IP address, as any web request does.

Those counters are kept in a hosted key-value store. Before you subscribe, the counter still has to tell one caller from another, and for that it uses your IP address put through a salted one-way hash. The address itself is never written to that store, only the hash, and the hash cannot be turned back into it. Once you subscribe the counter is keyed on the subscription instead. The subscription counter expires after 62 days and the per-caller counter after 48 hours, both automatically.

Barcodes and research

Scanning a barcode sends the barcode number toOpen Food Facts, a public food database, at up to three of its servers. Checking a claim or opening a research topic sends search terms to Europe PMC, a public research database. Neither request carries your name, your device identifier or your subscription, but both, like any web request, reveal your IP address to whoever operates that database.

Your subscription

Vitals is a subscription. Apple processes the payment and we never see your card, your billing address or your Apple Account.

To check that a subscription is active, the app sends our server the signed receipt Apple issues for it. That receipt contains an identifier for the subscription, which we store to count your monthly AI actions and to stop one person using the shared service without limit. It is not your name, your email or your Apple ID, and it is not linked to anything you log.

Offer codes. After a purchase, the app sends our server the App Store's signed receipt once, so we can count which offer, if any, was used. We keep the subscription identifier, the offer name, the product and the date. No name, no email. This happens on every subscription, not only the ones that used a code, because the receipt is what tells us whether a code was used at all. The record is kept while the app is on sale, so the person whose code it was can be paid for the referral. It contains no name, email or Apple ID and is never linked to anything you log.

What we do not do

• No accounts, no passwords, no email collection.
• No analytics, no tracking, no advertising, and no third-party SDKs of any kind.
• No selling or sharing of your data. There is nothing to sell.
• No health or fitness data used for marketing, ever.

Deleting your data

Delete all data in Me, Settings removes your profile, food log, favourites, weight history, supplements and their logs, workouts, routines, hydration, daily check-ins, mobility history, your training schedule and your saved research, along with this app's own settings.

Deleting the app removes the rest of what is stored in its container. Data you wrote to Apple Health stays in Health and has to be removed there, in the Health app. If you shared a workout file with someone, that copy is theirs and we cannot reach it.

The AI usage and rate-limit counters expire on their own. The affiliate record does not. To have any of them removed, email us with roughly when you subscribed or last used an AI feature and we will delete them.

Cancelling your subscription is done in the App Store, under your Apple Account, not in Vitals. Apple holds the subscription; we never see your payment details.

Children

Vitals is rated 17+ and is not intended for anyone under 17. We do not knowingly collect information from anyone under that age. Its nutrition targets are adult reference intakes and do not apply to children. If you believe a child has been using the app, email us and we will help remove what is on the device.

Changes

If this policy changes in a way that affects what leaves your device, the date at the top will change and the app will be updated to point here.

Terms of Service

The Terms of Service cover the health disclaimer and the rest of what you're agreeing to by using the app.

Contact

Questions about this policy: benjamin8james@gmail.com