← Back to VitalMind

Privacy Policy

Last updated: May 5, 2026

1. Who we are

VitalMind ("we," "us," "our") is a health intelligence platform operated by Zealr Enterprise Inc, a Washington State limited liability company. VitalMind helps women with chronic conditions understand patterns in their health data through AI-powered analysis.

For questions about this policy, contact us at privacy@vitalmindai.community.

2. What data we collect

Account information

When you create an account, we collect your email address, name, and a password. If you communicate via WhatsApp, we collect your phone number.

Health profile

During onboarding, you may voluntarily provide health conditions (such as endometriosis, PCOS, or thyroid conditions), dietary preferences, health goals, age, weight, and height. All health profile data is optional and provided at your discretion.

Wearable device data

If you connect a wearable device (such as WHOOP or Oura), we access your biometric data through that device's official API with your explicit authorization. This may include recovery scores, heart rate variability (HRV), resting heart rate, sleep stages and duration, workout strain, and respiratory rate. We only access data you authorize through the wearable device's consent flow. You can disconnect your wearable at any time.

Food and nutrition logs

When you log meals (via text, photo, or voice message on WhatsApp), we store the description, estimated nutritional content (calories, protein, carbohydrates, fat), meal type, and the time you reported eating.

Symptom data

If you participate in daily symptom check-ins, we collect self-reported scores for pain, bloating, energy, and mood on a 0-10 scale.

Communication data

Messages you send via WhatsApp (text, photos, voice notes) are processed to provide our service. Voice notes are transcribed using AI and the audio is not retained after transcription.

Usage data

We collect standard technical data such as your timezone, browser type, and general usage patterns to improve the service.

3. How we use your data

We use your data to:

• Provide personalized health insights: We analyze your wearable data, food logs, and symptoms together to surface patterns and correlations specific to you.
• Generate daily health briefs: AI analyzes your recent data to produce a morning summary connecting your food, sleep, activity, and biometric patterns.
• Investigate health anomalies: When our system detects unusual changes in your biometrics or symptoms, an AI agent investigates possible correlations and may notify you of its findings.
• Learn your personal patterns: Over time, the system identifies recurring patterns in your data (such as correlations between certain foods and recovery changes) to provide increasingly personalized insights.
• Improve our service: We use aggregated, de-identified data to improve our AI models and service quality.

4. AI processing

Your data is processed by AI models provided by third-party services (see Section 6). When AI processes your data:

• Your data is sent to AI model providers via encrypted connections for analysis.
• AI outputs are evaluated by a quality assurance system that checks for accuracy and medical safety.
• All AI-generated insights use correlational language ("associated with," "followed by") rather than causal claims, because individual health data cannot prove causation.
• The AI will never diagnose conditions, recommend medications, or provide emergency medical guidance.

5. How we store and protect your data

Your data is stored in a secure, hosted database with row-level security enabled, meaning each user can only access their own data. Sensitive credentials (such as wearable device tokens) are encrypted at rest using AES-256 encryption. All data transmission uses HTTPS/TLS encryption. Access to the database is restricted to authenticated service connections only.

6. Third-party services

We use the following third-party services to operate VitalMind:

• Supabase (database hosting): Stores your account and health data. Privacy policy.
• Anthropic (AI processing): Processes your data to generate health insights. Privacy policy.
• OpenAI (AI quality evaluation): Used to evaluate the accuracy of AI-generated content. Privacy policy.
• Twilio (WhatsApp messaging): Delivers messages between you and VitalMind. Privacy policy.
• WHOOP (wearable integration): Provides biometric data you authorize. Privacy policy.
• Resend (email delivery): Sends daily brief and notification emails. Privacy policy.
• Vercel (application hosting): Hosts the VitalMind application. Privacy policy.
• Upstash (rate limiting): Provides rate limiting to protect the service. Privacy policy.

We do not sell your personal data to any third party. Data shared with the services above is used solely to operate VitalMind.

7. Your rights

You have the right to:

• Access your data: You can view your health data, food logs, and symptom history through the VitalMind dashboard at any time.
• Delete your data: You can request deletion of your account and all associated data by emailing privacy@vitalmindai.community. We will delete your data within 30 days of receiving your request.
• Disconnect wearables: You can disconnect your wearable device at any time, which stops future data collection from that device.
• Export your data: You can request a copy of your data in a machine-readable format by emailing privacy@vitalmindai.community.
• Withdraw consent: You can stop using VitalMind at any time. Deleting your account removes all stored data.

8. Washington State health data

VitalMind is operated from Washington State. Under Washington's My Health My Data Act, consumers have specific rights regarding health data. We comply with these requirements by providing clear notice of data collection, obtaining your consent before collecting health data, honoring deletion requests within 30 days, and not selling health data or using it for purposes beyond providing the VitalMind service.

9. Data retention

We retain your data for as long as your account is active. If you delete your account, we delete all personal and health data within 30 days. De-identified, aggregated data used for service improvement may be retained indefinitely. AI-generated insights and evaluation logs are retained for quality assurance purposes and deleted when your account is deleted.

10. Children's privacy

VitalMind is not intended for use by individuals under 18 years of age. We do not knowingly collect data from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through the VitalMind app. The "Last updated" date at the top indicates when this policy was last revised.

12. Contact us

If you have questions about this privacy policy or your data, contact us at:

Zealr Enterprise Inc (operating as VitalMind)
Email: privacy@vitalmindai.community
Website: vitalmindai.community
State of incorporation: Washington, USA