Privacy Policy

Privacy Policy

Last updated: March 27, 2026

Vitarego Fit (“we”, “our”, “the app”) is a nutrition coaching application operated by SIA Vitarego, registered in Latvia (EU). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Latvian data protection law.

1. Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, password (hashed)
  • Health profile: age, gender, height, weight, activity level, health goal, allergies, medications, conditions, symptoms, food preferences
  • Nutrition data: meal plans, food diary entries, calorie calculations, barcode scans
  • Progress data: weight logs, body measurements, progress photos, mood/energy/sleep scores
  • AI interactions: chat messages, meal suggestions, photo analyses, AI-generated memories
  • Payment data: processed by Stripe — we store only transaction IDs, never card numbers
  • Device data: push notification tokens, device platform (iOS/Android)

2. How We Use Your Data

  • Provide personalized nutrition plans and calorie calculations
  • Enable AI-powered meal suggestions and photo analysis
  • Track your health progress over time
  • Facilitate coach supervision programs and consultations
  • Send push notifications (meal reminders, program updates, streaks)
  • Process payments for premium services

3. Photo Privacy (EXIF Stripping)

All photos uploaded to the app (diary photos, progress photos, documents) are processed with EXIF metadata stripping before storage. GPS coordinates, device information, and timestamps embedded in photos are permanently removed to protect your location privacy.

4. Private File Storage

Client photos and documents are stored in a private directory that is not accessible via direct URL. They are served exclusively through authenticated API endpoints that verify your identity and access permissions.

5. AI Data Processing

We use two AI providers:

  • Anthropic Claude: for conversational AI chat, meal suggestions, and diary analysis
  • Google Gemini: for meal photo nutritional analysis only

AI conversations are not used to train AI models. AI-generated memory facts about your preferences can be viewed and deleted via the app.

6. Data Sharing

We do not sell your personal data. Data is shared only with:

  • Your assigned coach — health profile, diary entries (with your consent), supervision program data
  • Stripe — payment processing (PCI DSS compliant)
  • Firebase — push notification delivery
  • AI providers — as described above, for app functionality

7. Data Retention

  • Account data: retained until you delete your account
  • Diary entries: automatically deleted after 6 months (supervision-linked entries preserved longer)
  • Water logs: deleted after 30 days
  • AI chat history: deletable at any time via the app
  • Expired tokens and verification codes: cleaned weekly

8. Your Rights (GDPR)

As an EU resident, you have the right to:

  • Access: View all your data (Settings → Export My Data)
  • Portability: Download your data as JSON (Settings → Export My Data)
  • Deletion: Permanently delete your account and all data (Settings → Delete Account)
  • Rectification: Update your profile information at any time
  • Object: Opt out of push notifications (Settings → Notification Preferences)

9. Data Security

We implement appropriate technical measures: encrypted connections (TLS/SSL), hashed passwords (bcrypt, 12 rounds), JWT-based authentication, role-based access controls, connection pooling, and regular security reviews.

10. Children

Vitarego Fit is not intended for users under 16 years of age. We do not knowingly collect data from children.

11. Contact

For privacy questions or GDPR requests:

SIA Vitarego
Email: info@vitarego.fit
Website: vitarego.fit