Vitra Privacy Policy

Privacy summary

• No Vitra account is required.
• Vitra keeps your health history, journal entries, and personal tags on your devices rather than in a Vitra account. Ask Vitra AI is optional; after you consent, it sends your question and selected compact summaries to its hosted model. Follow-ups may include up to three recent chat exchanges for context.
• Vitra does not sell health or personal data and does not use HealthKit data for advertising or marketing profiles.
• To measure its own advertising, Vitra uses Apple’s privacy-preserving install attribution for everyone, and shares device identifiers with its measurement partner Tenjin only if you choose Allow on Apple’s tracking prompt. No health information is ever part of this.
• Apple processes App Store purchases; Vitra does not receive payment-card details.

Apple Health and HealthKit data

With your authorization, Vitra may read available Apple Health categories used to provide its wellness features. These can include:

• Heart and recovery information, such as heart rate, heart rate variability (SDNN), resting heart rate, walking heart rate, heart-rate recovery, and cardio-fitness estimates
• Sleep, respiratory rate, blood oxygen, and sleeping wrist temperature
• Activity information, such as active energy, steps, exercise time, workouts, walking or running distance, stand time, flights climbed, workout effort, and daylight time
• Mobility information, such as walking speed, step length, asymmetry, double-support percentage, stair speed, six-minute walk distance, and Apple Walking Steadiness
• Environmental sound exposure levels or events; Vitra does not receive audio recordings
• Measured blood pressure and supported health-event information, where available
• Date of birth and, if you have set it, biological sex from Apple Health, used only to compare your data with age- and sex-specific reference values for the Vitra Age wellness estimate

Availability depends on your device, region, Apple Health history, and the categories you choose to authorize. Vitra uses this information to calculate and present personal wellness summaries, baselines, scores, trends, advanced insights, and forecasts.

If you explicitly choose to save a manually entered cuff blood-pressure reading, Vitra requests separate permission to write that reading to Apple Health. Vitra does not otherwise modify your existing Apple Health records.

Processing, storage, and retention

Health calculations are performed on your devices. Raw HealthKit samples are processed transiently and are not copied into Vitra’s local database. Vitra stores calculated daily summaries, personal comparisons, scores, wellness insights, forecasts, journal entries and tags, settings, update history, and subscription status locally so the app can function and retain history.

Compact calculated presentation snapshots may be shared through Apple’s local app-group and WatchConnectivity mechanisms so Vitra’s Apple Watch app, widgets, Smart Stack, and complications can display current values. These snapshots do not contain raw HealthKit samples or journal notes.

Vitra has no cloud account and no Vitra-operated server-side copy of your personal health history. If you intentionally enable Offers & Updates, Vitra stores a random installation identifier, an Apple Push Notification service delivery token, bundle and app/build information, Apple notification-authorization state, your marketing preference, and operational timestamps. These delivery records never contain HealthKit samples, health-derived measurements or scores, journal entries, or personal tags. Invalid APNs tokens are disabled. You can edit or delete journal entries inside Vitra. Deleting Vitra and its companion components removes remaining local Vitra app data according to Apple’s platform behavior. Deleting Vitra does not delete source records already stored in Apple Health.

Anonymous usage counts

To learn which parts of Vitra help people, the app can add one to simple weekly counters, such as how many people finished Apple Health setup, came back on a second day, opened the Weekly Review, started a trial, or experienced a crash or hang.

• Each count contains only the step’s name, the calendar week you first opened Vitra, and the app version. It has no installation, device, or account identifier, and Vitra keeps only totals, not a record per person.
• Counts never include Apple Health data, scores, journal entries, tags, or Ask Vitra content. Crash and hang counts never include call stacks.
• A one-way hash of your IP address is kept briefly to limit abuse of this service, as it is for other Vitra requests, and is not stored with the counts.
• You can turn this off anytime in Profile with Share anonymous usage counts.

Advertising measurement

Vitra advertises on platforms such as TikTok and measures whether those ads lead to new installs, free trials and subscriptions. It does this in two ways:

• Apple SKAdNetwork and AdAttributionKit (all users): on a new installation’s first launch, Vitra tells Apple’s on-device attribution system that the app was installed and opened, and later updates it once if you start a free trial or a paid subscription. That update is only a number (0 for installed, 8 for a free trial, 16 for a paid subscription). If an ad led to the installation, Apple later sends the ad network an anonymous, delayed report about the campaign, not about you. Vitra sends no data of its own for this and does not ask for tracking permission for it. Apple may send Vitra’s measurement partner, Tenjin, an anonymous copy of that report.
• Tenjin (only if you allow tracking): on new installations, Vitra may show Apple’s App Tracking Transparency prompt. Only if you choose Allow, the Tenjin SDK sends Tenjin (Tenjin, Inc.) your device’s advertising identifier (IDFA), Vitra’s identifier for vendor (IDFV), your tracking-permission status, the app and SDK version, platform, a random analytics installation and session identifier, simple app-open counts and session durations, and timestamps. Tenjin also receives the network IP address of the request. Tenjin uses this to attribute the installation to an advertising campaign and forwards the installation, with your advertising identifier, to the ad network that may have shown you the ad (currently TikTok) so it can confirm whether its ad led to the installation. On those installations, Vitra also tells Tenjin, once each, when you start a free trial or a paid subscription, and Tenjin receives the details of your Vitra subscription purchases and renewals from Apple’s StoreKit (product, price, currency, purchase date and App Store transaction identifiers). Tenjin forwards trial and subscription events, including their value, to the ad network so it can measure and optimize its ads for people likely to subscribe.
• What is never shared: Apple Health and HealthKit data, health-derived measurements or scores (such as Readiness, sleep, heart rate, HRV, or stress), journal entries, tags, or Ask Vitra content. Subscription and purchase details are shared only as described above, only for new installations and only if you allow tracking. Vitra does not send Tenjin any user account identifier, and never sends your payment-card details, which Apple does not provide to Vitra.
• If you choose Ask App Not to Track, or tracking is restricted on your device, the Tenjin SDK does not send anything, and Vitra works exactly the same. You can change your choice at any time in Settings > Privacy & Security > Tracking; Vitra stops contacting Tenjin on its next launch after you turn tracking off.

Tenjin’s and TikTok’s own privacy policies govern how they process the information they receive.

Third parties and data sharing

Vitra does not sell health or personal data. Vitra uses the following platform and optional services:

• Apple Health: provides only the health categories you authorize and receives a cuff reading only when you explicitly save it with write permission.
• Apple StoreKit and App Store: provide products, process purchases, and return verified subscription-entitlement status. Apple does not provide your payment-card details to Vitra.
• Apple SKAdNetwork and AdAttributionKit: provide anonymous, campaign-level install attribution, as described under Advertising measurement.
• Tenjin and TikTok: Tenjin, Vitra’s mobile measurement partner, receives the device identifiers, app-open information and subscription purchase details described under Advertising measurement only if you allow tracking, and shares installation, trial and subscription information with TikTok for ad attribution and optimization. Neither receives health information.
• Apple WatchConnectivity, app groups, WidgetKit, and notifications: support Vitra features across your Apple devices. Apple Push Notification service delivers optional Offers & Updates after your explicit in-app choice and Apple notification authorization.
• Ask Vitra AI: this optional feature requires your in-app consent. When you submit a question, the app sends it with selected compact summaries to Vitra’s relay server, which forwards them to a third-party AI model provider (currently Fireworks AI, running the open-weight GPT-OSS 120B model) to write the answer. To confirm your subscription and protect the service from abuse, the request also carries your App Store subscription transaction proof and an Apple App Attest device-integrity assertion; the relay server keeps short-lived verification records and rate-limit counters keyed by one-way hashes of your installation credential and network address, not your questions or answers. A follow-up may also send up to three recent completed user-and-Vitra exchanges from the current chat so the model can understand references to earlier questions. Raw HealthKit samples and journal note text are not sent. Vitra keeps chat context in memory on your device and does not retain a server-side chat history. Fireworks AI applies zero data retention to these requests: according to Fireworks AI, prompts and generated answers exist only in temporary memory while the request is processed (short-lived prompt caches can stay in memory for several minutes) and are not written to persistent storage, and Vitra does not opt in to prompt logging. Fireworks AI keeps request metadata such as token counts to provide and bill the service. Fireworks AI’s own privacy policy governs its processing.

Support communication

If you contact Vitra Support by email, you voluntarily provide your email address and the information you include in your message. Email is handled by the external email providers used by you and Vitra. Support messages may be retained as reasonably needed to answer your request, maintain a support record, prevent abuse, or meet legal obligations.

Do not send Apple Health exports, medical records, or other sensitive health information. You may request deletion of a support conversation by emailing Vitrahealthapp@gmail.com, subject to information that must be retained for legitimate legal or security purposes.

Your choices

• Choose which requested Apple Health categories to authorize.
• Review or revoke Apple Health access in the Health app or system Settings. Revoking access stops future access to that category; previously calculated local Vitra records remain until removed through the app or by deleting Vitra.
• Choose whether to allow tracking when Apple’s prompt appears, and change it at any time in Settings > Privacy & Security > Tracking.
• Use Apple Account settings to manage or cancel Vitra Premium.
• Choose whether to contact support and what non-sensitive information to include.

Children

Vitra is a general consumer wellness app and is not designed to provide medical care for children. Vitra does not create accounts or knowingly solicit personal information from children. If you are not old enough to consent to the use of health information or purchases under the laws where you live, use Vitra only with permission and supervision from a parent or legal guardian.

Changes to this policy

This policy may be updated as Vitra’s features, legal requirements, or Apple platform services change. Material updates will be reflected by a revised “Last updated” date and, where appropriate, notice in the app.

Contact

Questions or privacy requests can be sent to Vitrahealthapp@gmail.com.