Effective July 27, 2026. Vitalize separates private health records, public sharing, and waitlist data.
The waitlist
When you join, we store your email address, coarse campaign labels, your consent version, and a one-way hash of your IP address for abuse prevention. The waitlist does not ask for health information. If you unsubscribe, we keep a suppression record so we can honor that choice.
Minimal analytics
When waitlist analytics is enabled, the public page uses a same-origin, cookieless endpoint backed by PostHog to count a small set of funnel events. We do not send your email, typed text, full URL, referrer, account identity, health profile, or lab data. Automatic click capture and session replay are not used, and browser privacy signals are respected.
Email delivery
Resend processes your email address to deliver early-access and account messages. Every waitlist email includes an unsubscribe link.
Your account
We store your email address and birth date to run your account and confirm age eligibility. Your birth date stays private and is not shown on your profile.
Device notifications
If you enable iOS notifications, Vitalize stores your APNs device token in encrypted form with limited app and device-registration metadata. Apple receives generic notification text, an interaction type, and opaque routing identifiers. We do not put health values, post text, names, or usernames in the notification payload. Disabling a registration erases its encrypted token. Registrations that do not refresh for 180 days are disabled, disabled registrations are removed after 90 more days, and completed or canceled delivery records are removed after seven days.
Before you publish
You choose the fields and see an exact preview. Omitted results and raw reports remain private.
Your public identity
You choose the display name and username people see. They do not have to be your real name. Your email is never shown on your public profile, but Vitalize can still link the profile to your account for security and moderation. Health details, timing, and prior copies may still identify you.
Public sharing
Only information you explicitly publish appears publicly. Public information can be copied or redistributed by other people. Adding a report and publishing from it are separate actions.
Discover preferences
If you choose Show more like this or Show less like this, Vitalize privately stores that choice to adjust your Discover feed. It can affect posts from the same public account or with the same author-written hashtags. We do not infer health conditions or use private records, searches, or bookmarks for this.
Your choices
You can unsubscribe from waitlist email, unpublish updates, remove private reports, export your data, temporarily deactivate your profile, or permanently delete your account. Account deletion removes sign-in access and associated public, social, and private health data.
After account deletion
We keep only limited, non-public consent, security, moderation, and deletion receipts for required retention. They no longer link to an auth account or public profile, and retained receipts do not contain your email, username, birth date, filenames, profile media, copied posts, or health values. If you previously unsubscribed, your email remains in an isolated suppression record so we do not contact it again.
Pilot legal review
This notice describes the current pilot implementation. Final public-launch wording and retention periods still require privacy counsel review.