Privacy Policy
Effective date: March 1, 2026
Vital Signal ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Vital Signal application ("the Service").
Information We Collect
Information you provide directly
- Email address and display name (when you create an account)
- Payment information (processed by Stripe — we do not store credit card details)
- Health data you share through the AI chat interface (meals, activities, symptoms, supplements, mood, etc.)
- Profile information such as your timezone and notes for the AI coach
- Communications you send to us (support emails)
Information collected automatically
- Your timezone (auto-detected to provide time-aware coaching)
- Basic usage data (account creation date, message counts, last active date)
How We Use Your Information
We use your information to:
- Provide the Service — your health data is sent to our AI provider to generate coaching responses and identify patterns
- Persist your conversation history so you can continue across sessions and devices
- Generate health insights based on your logged data
- Process subscription payments through Stripe
- Respond to your questions or support requests
- Improve the Service based on general usage patterns
We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not read your health conversations.
How We Store Your Data
Your data is stored in a Supabase-hosted PostgreSQL database. All data is encrypted at rest. Row Level Security ensures that you can only access your own data — no other user or administrator can view your health conversations or insights.
Third-Party Services
We use the following third-party services to operate the Service:
- Supabase — authentication and database hosting. Your account credentials and health data are stored on Supabase infrastructure. Supabase Privacy Policy
- Stripe — payment processing. Stripe handles your credit card information directly — we never see or store your full card number. Stripe Privacy Policy
- Google Gemini — AI service that processes your health data to generate coaching responses. Your conversation messages are sent to Google's API for processing. Google AI Terms
We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.
Data Retention
We retain your data for as long as your account is active. If you delete your account, all of your data — including profile information, conversations, messages, and health insights — is permanently deleted immediately. This action cannot be undone.
Your Rights
You have the right to:
- Access your health data through the Service at any time
- Clear your conversation history through your account settings
- Permanently delete your account and all associated data through your account settings
- Cancel your subscription at any time through the billing portal
- Request a copy of your data by contacting us
To exercise any of these rights, use your account settings or email us at support@myvitalsignal.com.
Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including encryption at rest and Row Level Security at the database level. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request deletion. We do not sell personal information. To exercise your CCPA rights, contact us at support@myvitalsignal.com.
International Users
If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Contact
For questions about this Privacy Policy, contact us at support@myvitalsignal.com.