Privacy Policy

Open Vitals ("the App") syncs Apple HealthKit data from your iPhone to a destination of your choice — your own server, an AI agent, or a cloud relay. Your health data belongs to you.

Health Data (via Apple HealthKit)

• Activity metrics (steps, distance, calories, exercise)
• Heart metrics (heart rate, HRV, SpO2, respiratory rate)
• Sleep data (duration, stages, efficiency)
• Body measurements (weight, height, BMI, body fat)
• Workout data (type, duration, calories, heart rate)
• Other HealthKit categories you explicitly enable

We do NOT store your health data on our servers. Data is either:

• Sent directly to your own server (Local Sync mode), or
• Encrypted end-to-end and relayed through our cloud service (API Sync mode), where it is held only until your destination fetches it (deleted on delivery) and for a maximum of 24 hours, after which it is deleted automatically.

Relay Data (API Sync mode only)

• A unique device identifier (generated at pairing)
• Authentication tokens (stored as cryptographic hashes)
• Encrypted health payloads (deleted on delivery, or after 24 hours at most)

What We Do NOT Collect

• Your name, email, or contact information
• Your Apple ID
• Location data
• Advertising identifiers
• Usage analytics or tracking data

When using API Sync mode, your health data is encrypted on your device using X25519 key exchange and ChaCha20-Poly1305 before leaving your iPhone. The relay server cannot read your health data — it only passes encrypted blobs.

Open Vitals only transmits your health data after you explicitly (1) grant Apple HealthKit read access, (2) choose which health metrics to share, and (3) connect a destination and confirm an on-screen consent prompt that names that destination before any data is sent.

You choose the destination — Open Vitals does not. The app does not select, operate, or send your data to any third-party AI service on its own. Your data is transmitted only to the endpoint you connect: your own server, a relay you provision, or another service you choose. The only parties Open Vitals itself involves are Apple HealthKit (to read data, with your permission) and, in Relay mode, Cloudflare Workers (which only ever holds end-to-end-encrypted blobs it cannot read, for a maximum of 24 hours).

If you direct Open Vitals to a third-party service (for example, a third-party AI assistant, automation tool, or cloud service), that service's own privacy policy and terms govern how it handles your data once it arrives. Open Vitals does not control that service and cannot guarantee its protections. We encourage you to review the terms of any destination you connect. You can revoke sharing at any time by disconnecting.

We never sell or share your health data for advertising or analytics.

Health data is a special category of personal data. Open Vitals processes it only on the basis of your explicit consent, given in the app when you grant HealthKit access and confirm a destination (GDPR Art. 9(2)(a); LGPD Art. 11, I). Operating the relay you subscribe to is based on the performance of that contract (GDPR Art. 6(1)(b); LGPD Art. 7, V). You can withdraw consent at any time by disconnecting or revoking HealthKit access; this does not affect processing that already took place.

You have the right to access, correct, delete and receive information about the personal data we hold, and to lodge a complaint with your supervisory authority (for example the CNPD in Portugal or the ANPD in Brazil). Because the relay only holds encrypted blobs it cannot read, most requests are fulfilled by disconnecting; for anything else, write to privacy@exaptalabs.com.

If we become aware of a security incident affecting personal data, we will notify the competent authority and the affected users as required by applicable law.

• Apple HealthKit — Used to read health data with your explicit permission. We comply with Apple's HealthKit guidelines.
• Cloudflare Workers — Powers the cloud relay. Subject to Cloudflare's Privacy Policy.

We do NOT use analytics services, advertising networks, or social media SDKs.

• Disconnect anytime: Remove the pairing from Settings → Cloud Relay → Disconnect. Your phone stops sending immediately and the pairing is removed; any undelivered encrypted payloads expire automatically within 24 hours.
• Revoke HealthKit access: Go to iPhone Settings → Health → Data Access → Open Vitals → Turn Off All.
• Delete your data: Since we don't store health data, there's nothing to delete on our side. Local data is on your own server.

Open Vitals is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy. Changes will be posted here with an updated date.

For privacy questions: privacy@exaptalabs.com
For general support: support@exaptalabs.com

Operator address: available on request at the email above.