Privacy Policy

// 1. Information We Collect

We collect the following categories of information when you use VitaFlow:

• Account information: email address, display name, username, and profile photo.
• Health & fitness data: daily step count, water intake, sleep duration, and heart rate readings. This data is read from Google Health Connect with your explicit permission and is used solely to display your personal progress within the app.
• User-generated content: photos and videos you choose to post as Moments, and text you write in posts or comments.
• Social data: the list of accounts you follow or are followed by.
• Device contacts (optional): contact names and phone numbers, accessed only when you choose to find friends on VitaFlow. Contacts are hashed before being compared and are never stored on our servers.
• Push notification token: generated by Expo to deliver in-app notifications. You can disable notifications at any time in Settings.
• Usage data: app interactions and crash reports used to improve the service.

// 2. How We Use Your Information

We use your information to:

• Provide and personalise your VitaFlow experience (progress tracking, leaderboard ranking, achievements).
• Enable social features (feed, challenges, following).
• Send push notifications about activity you have opted into.
• Analyse aggregate, anonymised usage trends to improve the app.
• Prevent fraud and enforce our Terms of Service.

We do not sell your personal data or health data to any third party.

// 3. Health Data

VitaFlow integrates with Google Health Connect to read steps, sleep, and heart rate data. This data is:

• Read only — we never write to Health Connect on your behalf.
• Used only to show your personal progress inside the app.
• Not shared with advertisers, data brokers, or other third parties.
• Not used to diagnose, treat, cure, or prevent any medical condition. VitaFlow is a wellness tracking app, not a medical device.

You can revoke Health Connect permissions at any time via Android Settings → Health Connect → App permissions.

// 4. Data Sharing

We share data only in these limited circumstances:

• Supabase (our backend infrastructure provider) stores your profile, posts, and activity data in secure, encrypted databases.
• Expo (Expo Inc.) processes push notification tokens to deliver notifications.
• Legal compliance: we may disclose data if required by law, court order, or to protect the rights and safety of our users.

No health data is ever shared with third parties for advertising or commercial purposes.

// 5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data — including your profile, posts, health logs, and social connections — is permanently deleted within 30 days. Anonymised, aggregated statistics may be retained indefinitely.

// 6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via Edit Profile in the app.
• Delete your account and all associated data via Settings → Delete Account.
• Withdraw consent for Health Connect access via Android Settings → Health Connect.
• Withdraw consent for contacts access via Android Settings → App permissions.
• Opt out of push notifications via Settings → Pause notifications or your device notification settings.

To exercise any right not available directly in the app, contact us at ux.sharad@gmail.com.

// 7. Security

We protect your data using industry-standard measures including TLS encryption in transit, row-level security policies in our database, and secure credential storage on your device. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

// 8. Children

VitaFlow is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

// 9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notice or push notification. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

// 10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:
Email: ux.sharad@gmail.com