Privacy Policy
Effective 3 October 2026
This policy explains what information the VitaGuard Android app and the VitaGuard online service (“VitaGuard”, “we”, “us”) collect, how we use and share it, how long we keep it, and how you can delete it. Questions: support@vitaguard.health.
In short
- You can use VitaGuard without an account; your records then stay on your phone.
- If you create an account and use cloud sync, your health records are stored on our servers in Germany.
- AI Doctor Reports send summaries of your readings — not your name or email — to Anthropic.
- A doctor sees your data only if you connect your account to that doctor yourself.
- We do not sell your data, show ads, or use advertising or analytics trackers.
- You can delete your account in the app or at vitaguard.health/delete-account.
1. Information you enter in the app
The app stores what you record on your phone:
- Blood pressure: systolic and diastolic values, pulse, body position, time and your comments.
- Glucose: values, reading type (for example fasting or after a meal), context and comments.
- Insulin: insulin type, units and timing.
- Medications and medication logs: medication names, dosages, schedules and reminder times, notes, start and stop dates, and whether each dose was taken, skipped or snoozed.
- Profile and health targets: name, age, date of birth, sex, nationality, weight, height, diabetes status, pregnancy status and week, gestational diabetes, your blood pressure and glucose targets, measurement units and standards, language, and alarm preferences.
Some readings you mark as incorrect are kept in your records, marked as invalid, and excluded from charts, statistics and reports.
2. Account information
If you create an account we collect your email address, first and last name, and password. Your password is stored only as a one-way cryptographic hash. We also store your time zone and preferred language, your subscription plan and its history, and any promotional code you redeem.
3. Cloud synchronization
When you are signed in on a plan that includes cloud sync (currently Plus or higher), the information in section 1 is copied to our servers so it can be backed up and restored. Each synced record carries a random identifier that the app creates for your installation. It is not your phone’s hardware identifier. Without an account, or without cloud sync, these records stay on your phone.
4. Device, app and connection information
- Requests from the app tell our servers the app platform (Android) and app version.
- Like any internet service, our servers see the IP address your connection comes from. Our web server and security systems log the IP address, time, requested address and browser or app identifier to protect the service against abuse. These access logs are kept for about 30 days.
- Sign-in attempts are recorded with the email address and time, but not your IP address, so that password-guessing can be stopped. These records are deleted after 24 hours.
5. Feedback and bug reports
When you send feedback from the app we receive the feedback type (bug or idea), your message, the app version, your Android version and your device model. If you are signed in, your account and email address are attached. We also store the IP address the report came from, to limit abuse. We keep that IP address for 30 days and then remove it from the record; the rest of the report may be kept to improve VitaGuard. A copy of each report (without the IP address) is emailed to our support mailbox. Feedback linked to your account is deleted when you delete your account.
6. AI Doctor Reports
If you ask for an AI Doctor Report, our servers calculate summaries of your records for the period you choose: for example counts, averages, ranges, distributions and trends of your blood pressure, glucose and insulin data. These summaries, together with your age and, where relevant, your diabetes status and targets, are sent to Anthropic, our AI provider, to write the commentary. We do not send your name, email address, date of birth or account identifiers. Medication names are not currently included. The finished report is stored with your account until you delete it or your account. AI-written commentary can be wrong and is not medical advice.
7. Sharing with a doctor you choose
When doctor connections are available in your version of the app, you can connect your account to a doctor who uses VitaGuard. We share your data with a doctor only after you authorize the connection yourself. While a connection is active, that doctor can see the health records stored in your VitaGuard account. This includes your readings, insulin and medication records, logs, AI Doctor Reports, your name and age, and the alerts and notes the doctor creates. A connection lasts until you or the doctor end it.
If your doctor sets up alerts, alert messages that include your name and the reading can be sent to the doctor by email and as browser notifications, through the doctor’s web browser’s push service. Messages already delivered cannot be recalled.
8. How we use information
- To run the app features you use: records, charts, reminders, cloud backup and restore, and AI Doctor Reports.
- To share data with a doctor when you have authorized it.
- To send account emails such as password resets and account-deletion confirmations.
- To answer support requests and feedback, and to fix and improve VitaGuard.
- To keep VitaGuard secure, prevent abuse, and meet legal obligations.
We do not sell your personal information, use it for advertising, or share it with data brokers.
9. Service providers
| Provider | What they do for VitaGuard | Location |
|---|---|---|
| Hetzner Online | Hosts our servers, database and encrypted backups | Germany (EU) |
| Anthropic | Writes AI Doctor Report commentary from the summaries described above | United States |
| Microsoft 365 | Hosts our email mailboxes, such as support@vitaguard.health | Microsoft cloud |
| Our outgoing email service | Sends account emails, and alert emails to doctors you are connected with | — |
| Distributes the app through Google Play and, where paid plans are sold through Google Play, handles payment |
Authorized VitaGuard administrators can access account information to provide support and manage subscriptions. Administrator sign-in requires multi-factor authentication, and administrative actions are logged. We may also disclose information when the law requires it.
10. Where your data is processed
Our servers and backups are in Germany, in the European Union. AI Doctor Report summaries are processed by Anthropic in the United States. You may live in a different country, so your information may be processed outside your country.
11. Data on your phone
The app keeps your records in its private storage on your phone, so the app works offline. Your sign-in tokens are encrypted with the Android Keystore. The app’s data is excluded from Android cloud backup and device-to-device transfer. If you export a backup file from the app, you decide where that file goes and who can see it.
VitaGuard does not use your location, contacts, camera or microphone. The app does not currently read data from Health Connect.
12. Security
Data travels between the app and our servers over encrypted HTTPS connections. Passwords are stored only as hashes. Access to production systems is restricted, administrator accounts use multi-factor authentication, and our database backups are encrypted before they are stored off-site. No system is perfectly secure, but we work to protect your information and fix problems quickly.
13. How long we keep information
| Information | Kept |
|---|---|
| Account, profile and health records, AI Doctor Reports | Until you delete them or your account |
| Feedback IP address | 30 days |
| Feedback message and device details | May be kept; deleted with your account if linked to it |
| Sign-in attempt records | 24 hours |
| Web server and security access logs | About 30 days |
| Encrypted database backups | Rolling schedule, up to 24 months |
| Deletion records (see section 14) | As described in section 14 |
14. Deleting your account
You can delete your account in the app (Cloud → Delete Account). If you can’t use the app, you can ask for deletion at vitaguard.health/delete-account, which emails a confirmation link to your account’s address. Deletion is permanent and cannot be undone.
When your account is deleted, we immediately remove from our active systems:
- your health records, profile and medications;
- your AI Doctor Reports;
- your doctor connections, and the notes and alerts linked to you;
- your subscription records;
- feedback linked to your account;
- your email address and password.
What remains:
- An anonymized account record for 30 days. It holds an internal account number and the deletion dates, with no name, email or health data. It is used to complete the deletion safely, and it is permanently removed after 30 days.
- A pseudonymous deletion record. It holds a keyed hash of the internal account number and the deletion dates, with no name, email or health data. We keep it so that your deletion is applied again if we ever have to restore a database backup.
- Encrypted backups. Backups made before your deletion may still contain your data until they expire on the rolling schedule (up to 24 months). They are not used for any other purpose, and any restore re-applies all recorded deletions first.
- Emails already sent. Emails already sent, for example alerts to a doctor you were connected with, cannot be recalled.
Deleting your account in the app also clears VitaGuard’s data from that phone. Uninstalling the app removes data stored only on your phone. If you bought a subscription through Google Play, cancel it in Google Play; deleting your account does not cancel it.
15. Your choices and rights
You can view and correct your information in the app, export a backup file, end a doctor connection, and delete your account at any time. Depending on where you live, you may also have rights to:
- access your information, correct it, or receive a copy of it;
- have your information deleted;
- object to or restrict how we use it;
- complain to a data protection authority.
To make a request, email support@vitaguard.health from the address on your account. We may need to confirm your identity before acting on a request.
16. Changes to this policy
We will update this page when our practices change and revise the effective date above. If a change is significant, we will make reasonable efforts to let you know, for example in the app or by email.
17. Contact
Email support@vitaguard.health.