Last updated: November 11, 2026
VitaVault, provided by Captain Intelligence LLC
This policy takes effect on the date shown above, the day it was published.
If your iPhone is signed in to iCloud and the iCloud Sync switch is on, VitaVault stores four things in your own private iCloud account, using Apple's iCloud key-value storage: your medications, lab results, journal entries and daily check-ins. This is health information, kept in your iCloud storage. It can then show up on your other devices signed in to the same Apple Account. The switch is in Settings, Your Data & Privacy, and it is on by default.
AI agent sync is optional and off until you set it up. There are three ways to connect.
This is in Settings, Connect to your AI agent.
How you connect. You scan the QR code from your own server, paste its link, or type its address and pairing code. The address must start with https://. Before anything is sent, a screen shows the server address your data will go to and the list of what is sent. Nothing is sent until you tap Connect and send.
What is sent:
What is not sent: lab results, medications, journal entries and check-ins.
When it is sent:
Where it goes.
Disconnecting. When you disconnect, or use Delete All App Data, VitaVault forgets the connection, its token, the queue and its delivery record on your iPhone. Data already on your server stays there until you delete it on your server.
This is in Settings, Other connections. Your daily summary goes straight from your iPhone to the web address and token you enter. It does not pass through our server, and we never see it. The address must start with https://. The token is kept in the iPhone Keychain.
Since November 9, 2026, VitaVault Cloud does not accept new devices. It appears in Settings, Other connections only on an iPhone that was already connected. iPhones that were already connected can keep using it until VitaVault Cloud storage ends in a future update. We will tell you in the app first, before that happens and before we delete data stored on VitaVault Cloud. We have not set a date.
What it sends. One day's summary of 12 Apple Health numbers: steps, active energy, heart rate, resting heart rate, HRV, blood oxygen, breathing rate, walking distance, exercise minutes, flights climbed, weight and last night's sleep. It sends when you open the app or tap the Dashboard sync button. It does not send blood pressure, medications, lab results, journal entries or check-ins.
What VitaVault Cloud stores, plainly.
Moving to your own server. When you move to your own server, VitaVault turns off the old connection on your iPhone after your server confirms its first full delivery. Copies already on VitaVault Cloud are not moved or deleted by moving.
Disconnecting and deletion. Disconnecting stops new uploads but does not delete what is already stored. To have your VitaVault Cloud data deleted, email support@vitavault.io. Include your device ID if you have it; if not, tell us roughly when you connected and we'll find it. Never send your connection key. Your device ID is in Settings, About, Device ID. Once your agent has your data, that agent's own privacy terms also apply.
AI features run only after you accept the AI consent prompt. One consent covers all AI features, and the prompt lists what they can send. You can turn it off at any time in Settings, Your Data & Privacy, AI Data Processing.
What each feature sends to our server:
Where it goes. Our server, which runs on Cloudflare Workers, passes the request to Claude, made by Anthropic. Claude is the only AI provider, and we do not use any other. Our server does not save the content of these requests or the label photos, and it does not write request content to its logs. Anthropic processes the requests under its API terms.
Usage limits. To apply monthly AI limits, each AI and scan request also carries:
Neither includes your name, email or Apple Account. Our server keeps only usage counters keyed to these IDs, plus counters keyed to your IP address if you have not bought Premium or AI Insights. If no valid install ID is supplied, the IP address is also used for longer-lived counters. The counters expire automatically (see the table below).
If you don't use AI features, scans or AI agent sync, no health data is sent to us or to any AI provider.
When you export your health data (JSON or CSV), the file is saved on your iPhone, inside the VitaVault app. VitaVault keeps your 5 most recent exports there and removes older ones. Doctor Visit Prep reports are made on your iPhone. If you tap Share, the file goes only where you send it. It does not go to our server.
Apple's App Store handles purchases and payment. VitaVault never receives your payment details. To check your AI access, the app sends Apple's signed purchase record to our server, as described under AI features above.
| What | Kept by VitaVault? | How long |
|---|---|---|
| Data sent to your own server (Connect to your AI agent) | No. It goes straight from your iPhone to your server. | Not kept by VitaVault |
| Data sent to your webhook | No | Not kept by VitaVault |
| Medications, lab results, journal and check-ins in iCloud Sync | No. Stored in your own iCloud account. | Until you delete them |
| AI request content and medication label photos | No. Passed to Anthropic and not saved by our server. | Not kept by our server |
| VitaVault Cloud daily summaries (only iPhones connected before November 9, 2026) | Yes, on Cloudflare | 365 days after each day was last uploaded |
| Your most recent VitaVault Cloud summary, and the list of dates you synced | Yes | Until you ask us to delete them or VitaVault Cloud storage ends |
| Shared VitaVault Cloud copies written before November 9, 2026 | Yes | 365 days for each date; the newest until we delete it |
| VitaVault Cloud registration (your device ID and connection key) | Yes | Until you ask us to delete it or VitaVault Cloud storage ends |
| AI usage counters keyed to your install ID or purchase | Yes | About 40 days, or until your paid period ends plus about a day, if that is later |
| First-use date for free AI queries | Yes | About 400 days |
| Rate-limit counters keyed to your IP address (if you have not bought Premium or AI Insights) | Yes | 2 hours (hourly) and 26 hours (daily) |
| IP-based usage and first-use counters when no valid install ID is supplied | Yes | About 40 days for usage and 400 days for first use |
| Paywall counters (monthly totals, no ID of any kind) | Yes | About 400 days |
We do not sell your data or use it for advertising. Data goes to these places, and only in the cases described above:
The app contains no third-party analytics, advertising or crash-reporting code.
VitaVault does not require an account, email address or any personal information. We do not track you across other apps or websites, and the app has no advertising code. The app does send a few counts to our server:
On your iPhone. Use Settings, Delete All App Data.
On your own server. Data you sent to your own server or webhook stays there until you delete it there. Disconnecting in VitaVault, or Delete All App Data, does not delete it.
On VitaVault Cloud. Delete All App Data does not remove data stored on VitaVault Cloud, and there is no way to delete it from inside the app yet. To have your VitaVault Cloud data deleted, email support@vitavault.io. Include your device ID if you have it; if not, tell us roughly when you connected and we'll find it. Never send your connection key. Anyone who has it can read your VitaVault Cloud data, and we will never ask for it. You can ask us the same way to remove AI usage records linked to your iPhone. AI usage counters also expire on their own, as listed in the table above.
VitaVault is not directed at children under 13 and does not knowingly collect data from children.
We may update this policy from time to time. Any changes will appear on this page with a new date. Before VitaVault Cloud storage ends, and before we delete data stored on VitaVault Cloud, we will tell you in the app.
Questions or deletion requests: email support@vitavault.io, or use the support form at https://vitavault.io/support. The support form is processed by Formspree, which receives what you type into it. Please don't include medical details in your message. Never include your connection key.
VitaVault is provided by Captain Intelligence LLC.