Vitae

Vitae is a local-first nutrition logging app. Your food journal stays on your device. Limited server processing is used only when you choose Vitae Pro hosted AI features.

Short version: we do not sell your data, run ads, or use cross-app tracking. A photo, label, or meal description is sent to our service and OpenAI only when you request an estimate. We do not intentionally retain that submitted content after the request completes.

Scope

This Privacy Policy describes how the Vitae iOS app handles information. It is intended to support the privacy disclosures required for App Store distribution and to explain Vitae's actual app behavior in plain language.

Effective date: August 19, 2026.

Our Privacy Principles

Vitae does not include advertising SDKs, cross-app tracking, or developer-operated product analytics. We do not sell personal information or use nutrition information for advertising, marketing profiles, or automated decisions about you.

The manual nutrition tracker does not require an account. Vitae Pro uses your App Store subscription automatically, without a separate Vitae login.

Information Stored Locally

Vitae stores the information needed to provide nutrition tracking features on your device using iOS local storage and Keychain.

Information	How Vitae Uses It	Where It Is Stored
Profile and targets	Display name, calorie target, protein target, optional carb, net carb, fiber-related, and fat preferences are used to personalize nutrition totals and progress views.	On your device.
Food logs and saved foods	Food names, meal times, serving descriptions, calories, protein, carbs, fiber, sugar alcohols, fat, notes, favorites, source type, and timestamps are used to show logs, saved foods, and statistics.	On your device.
AI request logs	In development builds only, request status, input summaries, model name, results, warnings, and errors may be stored to troubleshoot requests.	On a developer test device.
Hosted feature session	A session token connects hosted features to a verified App Store subscription.	In Apple Keychain on your device.
Photos selected for AI analysis	A selected nutrition label or meal photo is submitted only when you ask Vitae to analyze it.	The photo is not added to a separate Vitae photo library. A local log may keep an input summary and the resulting estimate, but not the submitted image.

Information Used for Hosted Features

When you use Vitae Pro, our service at vitae-api.vaylent.com processes limited information needed to operate the feature:

An App Store original transaction identifier used to recognize the subscription across devices, mapped to a random Vitae identifier. Vitae does not receive your Apple Account email or password.
Session records needed to provide hosted access and honor deletion requests.
Subscription entitlement state from RevenueCat.
Usage metadata such as request type, time, approximate input size, status, token counts, and estimated cost, used for quotas, security, reliability, and cost control.
The specific image, label, note, net-carb preference, or meal description you submit for an estimate.

Submitted AI content is relayed to OpenAI to generate the estimate. Vitae is designed not to write submitted images, descriptions, prompts, or model responses to server storage. They are processed in memory for the request and returned to your device. Infrastructure and service providers may process limited logs and request data under their own security, retention, and legal obligations.

You can avoid this processing by using Vitae's manual logging features instead of hosted AI.

Service Providers

We use service providers only to deliver subscription, infrastructure, and AI functionality:

Apple provides App Store purchases, device backup, and platform services. See Apple's Privacy Policy.
RevenueCat processes subscription and entitlement information and receives a random Vitae account identifier. See RevenueCat's Privacy Policy.
Cloudflare hosts Vitae's API, database, queue, and security edge. See Cloudflare's Privacy Policy.
OpenAI processes content submitted for hosted nutrition estimates using its API services. See OpenAI's Privacy Policy.

We may also disclose information if required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Camera and Photo Access

Vitae asks for camera access only so you can scan nutrition labels or meal photos. Vitae also uses Apple's photo picker so you can choose specific images. It does not upload an image unless you explicitly start an AI analysis request.

Exports and Backups

Vitae can create a JSON backup at your request. That export can include your profile, settings, saved foods, food log entries, and weight history. It does not include AI provider API keys. Once you export or share a backup file, you control where that file goes and who can access it.

Information stored on your device may also be included in Apple device backups depending on your iOS settings. Apple handles those backups under Apple's own privacy terms.

Retention and Deletion

Vitae keeps local app data until you edit it, delete it, export it elsewhere, or remove the app. You can delete food logs, saved foods, and other app content using app controls. Deleting the app removes local data from that device, subject to Apple device backups.

You can delete hosted AI data from Profile in the app. Deletion removes Vitae's server-side identity, sessions, entitlement cache, and usage records. It does not cancel an App Store subscription; subscription management remains available through Apple.

Apple, RevenueCat, payment processors, and other providers may retain purchase, fraud-prevention, security, or legal records under their own policies and obligations. If you later use an eligible subscription again, Vitae creates a new random hosted identity.

Children's Privacy

Vitae is not directed to children under 13, or the minimum age required in their location, and we do not knowingly collect personal information from children. If you believe a child has provided account information, contact us so we can investigate and delete it.

Security

Vitae uses encrypted network connections, Apple-signed transaction verification, Apple Keychain for session credentials, authenticated webhooks, access controls, request limits, and service-provider security features. No system is perfectly secure, so protect your device with a passcode and current iOS updates.

Changes to This Policy

If Vitae's privacy practices change, this page will be updated with a new effective date. App Store privacy disclosures should also be kept consistent with the app version then available.

Contact

For privacy questions or account-deletion assistance, contact the app developer through the support contact provided on Vitae's App Store listing.