Last updated: 24 September 2026
VitaSync brings your health, fitness, money and mind into one place. That only works if you trust us with sensitive data. So the design starts from a simple position: the less that leaves your phone, the less there is to protect. This page explains how the app and this site are built. It will keep changing as we move from waitlist to launch.
Entries are written to your device and the app works fully offline. Insights, including every correlation, are calculated on the device, so no server needs to see your numbers for the app to be useful. Nothing is uploaded until you switch cloud backup on, which is an explicit choice recorded in the app.
The app's database is encrypted with a random 256-bit key generated on your phone. The key is held in the platform's secure storage, which is backed by the Android Keystore. It is never derived from anything guessable, never shipped in the app, and never sent to us. Android's own automatic backup is switched off for the app. So the operating system does not copy your history to Google either.
If that key is ever lost, for example after certain device restores, the app tells you plainly. It does not open an empty history and silently overwrite your backup with it.
Anything that does leave the device travels over TLS and is encrypted at rest by our infrastructure providers. End-to-end encryption, where even we could not read a backup, is on the roadmap and is not in place today.
If you turn on cloud backup, we store your entries and your settings so you can restore them. Database access rules deny everything by default and allow each account to reach only its own rows. Deleting your account removes those rows, and the deletion runs under your own identity rather than an administrative one.
Crash reports are stripped of your data before they are sent. Free text, payloads and anything that could carry a logged value are removed, leaving the structure of the error. Product analytics are off until you allow them. They are limited to a fixed list of event names and timings, never the values you logged.
We host with established providers operating certified data centres. Data is processed only by the vetted providers listed on our sub-processors page, each under a data processing agreement.
Access to systems holding personal data is restricted to people who need it, protected by strong authentication, and logged. We follow the principle of least privilege internally. Administrative keys are held by the small number of services that require them, never by the app on your phone.
Every metric in VitaSync is optional, and the app reads only six types of data from Health Connect, each behind its own permission. We do not sell, rent or share your personal data with third parties for marketing, and we do not show ads. See our Privacy Policy for the full detail.
You can export everything at any time, as a complete JSON copy or a CSV summary. You can also delete your account and data from inside the app.
If you believe you have found a security vulnerability, please email us at security@vitasync.io. We welcome reports and will work with you to verify and resolve genuine issues. Please give us a reasonable opportunity to fix an issue before any public disclosure.
For general security or data-protection questions, contact us at hello@vitasync.io.