Vida Sana
Log in / Open app

Privacy Policy

Last updated: 11 September 2026

Our legal documents are maintained in English for now.

Vida Sana (“we”, “us”) is a health and wellbeing app. This policy explains what personal data we process, why, and the choices you have. Vida Sana is a wellbeing tool and does not provide medical advice.

1. Data we process

  • Account & identity: your email, and (if you use them) your name and phone number. Authentication is handled by Firebase Authentication; we never see or store your password.
  • Health & wellbeing data: the entries you choose to log: food and nutrition, weight, glucose, cycle and perimenopause, body metrics, targets, and any device samples (steps, sleep, heart rate, weight) you sync. This is special-category health data and receives our highest level of care.
  • Subscription data: if you purchase Premium, we hold the entitlement and store transaction state (via RevenueCat). We never see your card details.
  • Operational data: app preferences, locale, and pseudonymous request/audit logs keyed to your account, used to run and secure the service.

2. How we use it

We use your data to provide the app’s features, to compute your trends and coach insights, to operate and secure the service, and to meet legal obligations. Our legal basis for processing health features is your explicit consent, given when you use them; you can withdraw it at any time by deleting the relevant data or your account.

3. AI features

For AI food-photo analysis and coach insights we send the minimum necessary to Anthropic (a food image, or an aggregate numeric summary) with no identity and no raw records attached. This data is processed under Anthropic’s commercial API terms and is not used to train models.

4. Where your data lives

Your app data is stored and processed in the European Union (Frankfurt) on Neon (database) and Render (backend). The website is served via Vercel (London). We use the following subprocessors:

  • Neon: database (EU/Frankfurt).
  • Render: backend compute (EU/Frankfurt).
  • Vercel: web hosting (London); no access to your health data.
  • Firebase / Google: authentication only (identity, not health data).
  • Anthropic: AI analysis on minimized, de-identified inputs.
  • RevenueCat: subscription/entitlement management.
  • Open Food Facts: food-search and barcode lookups (EU/France). Receives the search text or barcode you enter, not your identity or health data.
  • FatSecret: web food search (US). Receives the search text you enter, not your identity or health data.

Where a subprocessor is outside the EEA/UK, transfers rely on an adequacy decision or Standard Contractual Clauses.

5. We do not sell your data

We never sell your personal data and never use your health data for advertising. Coach and photo features exist only to serve you within the app.

6. Retention & deletion

You can permanently delete your account at any time from Settings → Delete account. Deletion erases your records from our database and removes your Firebase identity. Billing records are de-linked from you and purged after the legally required retention window.

7. Your rights

Subject to applicable law (including the GDPR), you have the right to access, rectify, export, restrict, and erase your data, and to object to processing. You can exercise access and erasure directly in the app, or contact us for anything else.

8. Security

Data is encrypted in transit (HTTPS). Access to your data is scoped to your account and enforced server-side. Health values are never written to application logs. Administrative access to any account’s data is limited and recorded in an append-only audit trail.

9. Children

Vida Sana is not intended for children under 16.

10. Contact

Questions or requests? Email support@vida-sana.health.

← Back to home