Privacy Policy

Last updated: 12 October 2026

The short version

  • What you log stays on your phone. The app works fully offline, and your insights are worked out on the device.
  • Nothing is uploaded until you switch on cloud backup. That is a separate, explicit choice you can withdraw.
  • We never sell your data, never share it with advertisers, and show no ads.
  • You can export everything, and delete everything, whenever you like.

1. Who we are

VitaSync is a trading name of Azeon Software Ltd, a company registered in England and Wales under company number 17434044, with its registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Azeon Software Ltd is the data controller for the personal information described here and is registered with the Information Commissioner's Office as a data controller under reference ZC244980. Contact us at hello@vitasync.io.

2. Where your data lives

The VitaSync app is local first. Everything you log is written to your own device, into a store encrypted with a key held in the phone's secure hardware. The app never needs a network connection to work. The correlations and weekly reports are calculated on the device. No server has to see your numbers for you to get the value of the app.

Cloud backup is optional and off until you turn it on. When you do, we ask for your explicit consent first. We then store a private copy of your entries so you can restore them on a new phone. You can turn backup off, or delete the backup and the account behind it, at any time.

3. What we collect

If you join the waitlist: your email address, the time you signed up, the time you confirmed, and the IP address that confirmed. We keep that confirmation record as evidence that you opted in.

If you use the app: whatever you choose to log. Every metric is optional. That can include:

  • Health and fitness data: sleep, steps, resting heart rate, calories, weight, food and drink, water, workouts, supplements
  • Wellbeing data: mood, energy, stress, and a one-line journal
  • Financial data: daily spending and net worth
  • Behavioural data: screen time, focused work, habits, goals and any custom metric you create

Health and wellbeing data is special category data under the UK GDPR, and we treat it that way. If you turn on cloud backup we also hold an account identifier and, if you link one, your email address. If you consent to product analytics we receive event names and timings, never the values you logged. Crash reports are stripped of your data before they are sent.

4. Health Connect and Samsung Health

With your permission, the Android app reads six types of data from Health Connect. They are steps, sleep, resting heart rate, calories burned, weight and hydration (the drinks you record). Each one is a separate permission, and you can grant any of them without the others. Anything Samsung Health or another app writes to Health Connect can be read the same way. This is used for one purpose: to fill in your daily log and include those metrics in your own insights.

Health Connect data is read on your device. It is not sold, not shared with third parties, not used for advertising, and not transferred anywhere unless you have turned on cloud backup. You can withdraw the permission in Health Connect or in your phone settings at any time. You can also disconnect it in the app, which removes the data it supplied.

5. Why we are allowed to process it

  • Running the app for you: performance of our contract with you. While your data stays on your device, we do not have access to it.
  • Cloud backup and restore: your explicit consent, because it involves health data. You can withdraw it by turning backup off or deleting your account.
  • Crash diagnostics: our legitimate interest in a working app. Your logged values are removed before a report is sent.
  • Product analytics: your consent, given in Settings and withdrawable there.
  • Waitlist email: your consent, confirmed by clicking the link in the confirmation email.

6. Who else processes it

We use a small number of service providers, each under a data processing agreement, each receiving only what it needs. They are listed with their purpose and location on our sub-processors page. We do not sell, rent or share your personal data with third parties for marketing, and we do not show ads. Where a provider processes data outside the UK, we rely on the appropriate safeguards, such as the UK addendum to the standard contractual clauses.

7. How long we keep it

  • On your phone: until you delete it, use "Delete account and data", or uninstall the app.
  • Cloud backup: while your account exists. Deleting your account removes it, and copies in encrypted provider backups age out on the backup schedule rather than disappearing instantly.
  • Waitlist: while you are subscribed, plus a limited period afterwards to evidence that you consented and later unsubscribed.
  • Crash and analytics data: for a limited retention window set with each provider, and never tied to the contents of your logs.

8. How to delete your data

In the app, open Account, then "Delete account and data". That deletes your account and the entries and settings we hold for it. It also erases everything VitaSync has stored on your phone, so export a copy first if you want to keep one. Data in Health Connect itself stays there, because it belongs to Health Connect.

You can also email hello@vitasync.io from the address linked to your account and ask us to delete it. We will action it within 30 days. To leave the waitlist, use the unsubscribe link in any email, or email us.

9. Your rights

Under the UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Receive your data in a portable format. The app exports everything to CSV or JSON, at any time, for free
  • Restrict or object to processing
  • Withdraw consent at any time, without affecting what was lawful before you withdrew it
  • Complain to the Information Commissioner's Office at ico.org.uk

10. Age

VitaSync is not intended for children. You must be at least 16 to join the waitlist or use the app. If you believe a child has given us personal data, contact us and we will delete it.

11. Cookies

This website uses no tracking or advertising cookies. We use two cookieless, aggregated analytics tools: Plausible and Cloudflare Web Analytics. Neither sets a cookie, stores anything in your browser, or identifies you. The app stores data on your own device so that it works offline, which is not tracking.

12. Changes

We may update this policy as the product develops. The date at the top always says when. If a change materially affects how we handle your data, we will tell you by email or in the app before it takes effect.