Versione italiana · Version française
Version 1.1 — effective from 10 November 2026
Vitae is an app that helps you record, remember and visualise your health values: blood glucose, blood pressure, weight and more. This policy explains what data we process, why, where it goes and how you stay in control.
In short:
- your health data stays in Europe, on our servers;
- we do not sell it and do not advertise: the app contains no advertising or third-party trackers;
- you can export it and delete your account directly from the app, at any time.
Vitae is not a medical device and does not replace your doctor's advice. In an emergency, call 112 (or your local emergency number).
The app is available in Italian and French. The Italian version of this policy is the binding one.
1. Who processes your data
Data controller
VitaeChek di Charlene Edwina Nyangon Ella, sole proprietorship (ditta individuale)
Via Bruno Buozzi 90, 20099 Sesto San Giovanni (MI), Italy
VAT IT13036180969 · REA MI-2703201
Email: vitaechek@gmail.com
2. What data we process
2.1 Your account
- Email address and password (stored only in encrypted form).
- First name, if you choose to provide it.
- Language, plan (free or Premium), VitaeCoins earned.
2.2 The health data you record
These are special categories of data (Art. 9 GDPR) and we process them only with your explicit consent. Depending on what you choose to use, they include:
- readings: blood glucose, blood pressure and pulse, weight and body composition, ketones, body measurements;
- profile: year of birth, sex, height, target weight, whether you have diabetes;
- medications and intakes, including GLP-1 and insulin (medicine, dose, time, injection site);
- menstrual cycle: flow, symptoms, basal temperature, ovulation tests, stated goal;
- symptoms, mood, sleep, hydration, nutrition, physical activity;
- care pathway: conditions, facility, names of your doctor or caregiver, visits and notes.
2.3 Data from other sources, if you allow it
- Bluetooth devices (glucose meter, blood pressure monitor, scale): readings are read by the phone. Body composition is calculated on the phone.
- Apple Health / Health Connect: we read only weight and sleep. Vitae never writes to these apps.
- Reading the display with the camera: the photo of your device's screen is analysed on the phone and deleted right after the reading.
2.4 Data that stays only on your phone
We never receive:
- the GPS route of your activities: location is used only during an activity you start, including with the screen locked until you tap "Termina" (Finish), and never outside an activity;
- your profile photo;
- the list of your devices, your notification preferences, your intake history.
2.5 Usage data — only if you agree
If you tick the optional "usage statistics" box, we record a few events (for example "app opened", "reading saved"), with date, time and app version, linked to your account. Never a health value. If you don't tick it, we record nothing.
You can turn it on or off at any time in Profile → Privacy and sharing → Internal statistics.
2.6 Sharing with a relative or a doctor
If you invite someone to follow your data, you give them a code valid for at most 7 days. We keep neither their email nor their number. They see only the categories you choose (for example blood glucose, blood pressure, weight, medications, cycle) and your first name; your notes are never shared. You can change or revoke access at any time. Every access, change and revocation is logged.
3. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create and manage your account, sync your data across devices | Performance of a contract (Art. 6.1.b) |
| Process your health data to show it to you, remind you, export it | Explicit consent (Art. 9.2.a) |
| Share it with the people you invite | Explicit consent (Art. 9.2.a) |
| App usage statistics | Consent (Art. 6.1.a), optional |
| Credit VitaeCoins and activate Premium | Performance of a contract (Art. 6.1.b) |
| Comply with legal obligations | Legal obligation (Art. 6.1.c) |
We make no automated decisions that produce legal effects concerning you, and we do not profile your data for commercial purposes.
4. Where your data goes
| Recipient | What it receives | Where |
|---|---|---|
| Supabase (database hosting) | Account and health data | European Union — Frankfurt |
| Clerk, Inc. (account access) | Email, encrypted password, technical session data. No health data | United States — see below |
| Expo (app updates) | IP address, operating system, app version, installation identifier. No personal account data | United States — see below |
| Open Food Facts (only if you scan a food) | The barcode and the phone's IP address. No identifier of yours | France |
| The people you invite | Only the categories you choose | — |
Access to your account. To create your account and sign you in, we use Clerk, Inc. (United States), which processes on our behalf your email address, your password (in encrypted form) and, if you provide it, your first name. Clerk receives neither your readings nor any other health data, which stay on our servers. The transfer to the United States is based on the European Commission's adequacy decision on the EU‑US Data Privacy Framework, to which Clerk adheres; failing that, on the standard contractual clauses approved by the Commission. When you delete your account, we also delete your sign-in data at Clerk.
App updates. At launch, the app checks with Expo (United States) whether an update exists. This request contains technical data about the phone but no account or health data. The transfer is based on the standard contractual clauses approved by the European Commission, provided for in Expo's data processing agreement.
Apple and Google receive only what their own apps (Health, Health Connect) already store on your phone: Vitae sends them nothing.
We do not sell your data and do not pass it on to advertisers.
5. How long we keep it
- As long as your account is active.
- When you delete your account from the app, we erase your data from our servers and your sign-in data at Clerk.
- Invitation codes expire after at most 7 days.
- Backups: today we keep no database backups beyond the active data.
- A reading you delete stays on the server, marked as deleted, until the account is deleted: this keeps your devices in sync.
6. Your rights
At any time you can:
- access your data and take it with you: in the app, Profile → Privacy and sharing → Export your data (PDF or CSV);
- correct it directly in the app;
- delete your account and all your data: Profile → Privacy and sharing → Delete my account;
- withdraw your consent: withdrawal does not make earlier processing unlawful;
- object to processing or ask for it to be restricted;
- lodge a complaint with a supervisory authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it); in France the CNIL (cnil.fr); in Belgium the Data Protection Authority (autoriteprotectiondonnees.be); or the authority of your country of residence.
For any other request, write to vitaechek@gmail.com. We reply within one month.
7. How we protect your data
- Each user can read and change only their own data: this is enforced by the database itself, not just by the app.
- Communications are encrypted (HTTPS).
- The session is stored in the phone's secure storage (Keychain / Keystore).
- You can lock the app with Face ID or the phone's passcode.
- VitaeCoins credits and plan changes happen only on the server.
8. Minimum age
Vitae is intended for people aged 16 and over. The Community, once available, will remain reserved for people aged 18 and over.
9. Changes to this policy
If we substantially change how we process your health data, we will ask for your consent again in the app. The date of the version in force is shown at the top.
