Privacy Policy
Vita records your weight, your mood and the reason behind every meal. This page says exactly what we keep, where, for how long, and how to erase it.
Last updated
Who we are
Vita is a weight-loss app focused on emotional hunger, built and operated by LUME DESENVOLVIMENTO DE SOFTWARES LTDA, a company incorporated in Brazil under company ID (CNPJ) 65.806.764/0001-14.
Under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) we are the controller of the personal data processed in the app: we decide which data is collected and what it is for. Under the GDPR we act in the equivalent role of controller.
For anything concerning this policy, your personal data, or the exercise of your rights, contact us:
The honest summary
If you only read one section, read these five lines:
- We keep what you record: profile, weight, meals and the trigger behind each one, mood check-ins, water, movement, menstrual cycle and your conversations with Vita.
- We do not keep photos of your meals. The image is sent, read and discarded — it is never stored on any server of ours.
- We never receive your card details. Billing and refunds are handled entirely by Apple and Google.
- No push token leaves your device: every reminder is scheduled locally, on the phone itself.
- You can erase everything whenever you want, from inside the app, and the deletion is permanent.
Who sees your data: you, and the service providers listed under Who we share with, each restricted to one specific technical function. We do not sell personal data to anyone, under any circumstances.
What we collect, and why
Every row in this table matches a field that actually exists in the Vita database. None of it is boilerplate.
| Data | What for | Legal basis | Retention |
|---|---|---|---|
| Email and name | Creating and keeping your account | Performance of a contract | Until you delete it |
| Sex, date of birth, height | Calculating your energy needs | Consent (health data) | Until you delete it |
| Weight, target weight, BMI | Setting your goal and tracking progress | Consent (health data) | Until you delete it |
| Onboarding quiz answers | Building your initial plan | Consent | Until you delete it |
| Meals and the trigger behind each one | The core of Vita: telling physical hunger from emotional hunger | Consent (health data) | Until you delete it |
| Mood and craving intensity | The Hunger Test and your patterns over time | Consent (health data) | Until you delete it |
| Menstrual cycle | Putting hunger and weight swings in context | Consent (health data) | Until you delete it |
| Pregnancy, menopause, eating disorder history, medication | Adapting the plan and avoiding unsuitable advice | Consent (health data) | Until you delete it |
| Water, movement, steps and sleep | Adjusting your daily energy expenditure | Consent (health data) | Until you delete it |
| Meal photo | Estimating what is on the plate | Consent | Not stored |
| Conversations with Vita | Keeping the coaching continuous | Consent | Until you delete it |
| Subscription status | Unlocking the access you paid for | Performance of a contract | While the account exists |
| App usage | Understanding what works and improving the product | Legitimate interest | 24 months |
| Advertising identifier | Measuring campaign effectiveness | Consent (ATT) | 24 months |
Your quiz answers are kept as a raw record of what you replied, so your plan can be rebuilt later. That record is never sent in plain text to analytics tools — a design decision written into the database itself.
Sensitive data, and what changes
Article 11 of the LGPD — and Article 9 of the GDPR — treat health data as sensitive. Much of what Vita records falls into that category, and we treat it accordingly, not as ordinary data:
- weight, height and BMI;
- menstrual cycle, pregnancy and menopause;
- eating disorder history;
- use of medication;
- mood, craving intensity and the emotional trigger behind each meal;
- steps and sleep read from the Health app.
The legal basis for processing this data is your specific, explicit consent, given at the moment you enter each piece of information. None of it is mandatory — the app works with less data, just with less precision.
Health app and HealthKit
If you allow it, Vita reads exactly two things from the Health app (HealthKit): steps and sleep. They feed your movement adjustment and help put the Hunger Test in context — being tired changes hunger.
You grant the authorisation in the operating system itself and can revoke it at any time under Settings → Health → Data Access & Devices → Vita, without affecting the rest of the app.
Artificial intelligence
Vita uses Claude Haiku 4.5, by Anthropic, at three moments: building your plan from the quiz, talking with you, and interpreting images of meals, fridges and menus.
Calls to the model always leave from our servers, never from your phone. The Anthropic API key exists only on the server: the app installed on your device never talks to Anthropic directly.
The content you send is not used to train third-party models. Anthropic’s processing is limited to handling the request and returning the response, under the commercial terms applicable to the service.
We keep a per-user counter of AI usage in order to apply rate limits and prevent abuse. That counter records volume, not content.
Photos of your meals
When you photograph a plate, your fridge or a menu, the image is sent to our server, passed to the model to be read, and discarded straight afterwards.
The image is not written to disk, never reaches any storage service, and is not attached to your account. What remains is only the result: the identified food and its nutritional values, which you can edit or delete like any other record.
Notifications
Every Vita reminder is scheduled locally on your device. There is no push server on our side.
In practice that means no notification token ever leaves your phone, we store no push identifier, and no system of ours knows what was notified or when. You can turn notifications off at any time in your system settings.
Who we share with
We do not sell personal data. We share the minimum necessary with service providers, each restricted to one technical function:
| Who | What for | Policy |
|---|---|---|
| Supabase | Database and authentication — where your account and records live | supabase.com/privacy |
| Anthropic | Processing the AI features (plan, chat and image reading) | anthropic.com/legal/privacy |
| Superwall | Displaying subscription screens and gating paid content | superwall.com/privacy |
| Mixpanel | App usage metrics | mixpanel.com/legal/privacy-policy |
| AppsFlyer | Marketing campaign attribution and measurement | appsflyer.com/legal |
| Expo | Delivering app updates and crash reports | expo.dev/privacy |
| Apple | Sign in with Apple, billing and delivery through the App Store | apple.com/legal/privacy |
| Google Sign-In, billing and delivery through Google Play | policies.google.com/privacy |
We may also share data where required by law, court order or a request from a competent authority, and to exercise or defend rights in legal proceedings.
Tracking and advertising
Vita uses Mixpanel to understand how the app is used and AppsFlyer to measure how effective the campaigns that bring new people to the app are.
On iOS, before any cross-app tracking, the system shows the App Tracking Transparency prompt. On Android, the app declares use of the advertising identifier (AD_ID).
If you decline, nothing in the app stops working. You keep access to every feature; we simply cannot link your install to the campaign that led to it. You can change your mind later under Settings → Privacy & Security → Tracking on iOS, or in the Android ad settings.
This policy website itself uses no cookies, has no analytics and tracks nobody.
Your rights
Under the LGPD (art. 18) you may, at any time and free of charge:
- confirm that we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary or excessive data;
- request portability of your data to another provider;
- delete data processed on the basis of your consent;
- find out who we share your data with;
- be informed that you may refuse consent, and what follows from that;
- withdraw consent at any time.
If you are in the European Union or the United Kingdom, the GDPR (arts. 15–22) grants equivalent rights, including objection to processing and restriction. If you are a California resident, the CCPA/CPRA grants you the right to know, delete and correct your data, and not to be discriminated against for exercising those rights — and we reiterate that we do not sell personal data.
Most of these rights you can exercise yourself, inside the app. For the rest, write to us from the email address registered on your account. We reply within 15 calendar days.
You may also lodge a complaint with the Brazilian data protection authority (ANPD) or with the supervisory authority in your own country.
Security
- All traffic between the app and our servers is encrypted in transit (TLS).
- Every database table enforces row-level security: by construction, an account can only reach its own records.
- The Anthropic API key exists only on the server, never in the distributed app.
- Your subscription status is read-only to the app: only the internal process that receives the store’s signed confirmation can change it.
- Our team’s access is limited to what is needed to operate the service and provide support.
No system is infallible. Should a security incident occur with material risk to your rights, we will notify you and the ANPD within the statutory deadlines.
Minimum age
Vita is intended for people aged 16 or over. We do not knowingly collect data from anyone under 16.
Between 16 and 18, the app should be used with the knowledge and involvement of a parent or legal guardian. An app that records weight and eating behaviour should not be used by a teenager without that conversation.
If you are a guardian and have found that someone under 16 created an account, write to our email: we delete the account and the associated data as soon as we confirm the situation.
International transfers
Some of the providers listed above run servers outside Brazil, which means your data may be processed in other countries — notably the United States.
These transfers rely on the grounds set out in art. 33 of the LGPD and, where the GDPR applies, on standard contractual clauses — contractual commitments requiring a level of protection compatible with the applicable law.
How long we keep it
The general rule is simple: for as long as your account exists. The per-item periods are in the table under What we collect.
When you delete your account, we erase the personal data attached to it. What remains is only: records the law requires us to keep, information needed to defend legal claims, and aggregated, anonymous metrics that cannot identify you. Tax records of your purchase stay with Apple or Google, for the periods the law requires of them.
The full step-by-step is on the Account Deletion page.
Changes to this policy
We may update this policy when the app changes or when the law requires it. The update date at the top of this page always reflects the version in force.
If a change is material — a new purpose, a new category of data or a new recipient — we will tell you inside the app before it takes effect, and ask for fresh consent where that is required.