Privacy Policy

Open Vitals ("the App") syncs Apple HealthKit data from your iPhone to a destination of your choice — your own server, an AI agent, or a cloud relay. Your health data belongs to you.

Health Data (via Apple HealthKit)

• Activity metrics (steps, distance, calories, exercise)
• Heart metrics (heart rate, HRV, SpO2, respiratory rate)
• Sleep data (duration, stages, efficiency)
• Body measurements (weight, height, BMI, body fat)
• Workout data (type, duration, calories, heart rate)
• Other HealthKit categories you explicitly enable

We do NOT store your health data on our servers. Data is either:

• Sent directly to your own server (Local Sync mode), or
• Encrypted end-to-end and relayed through our cloud service (API Sync mode), where it is held for a maximum of 15 minutes before automatic deletion.

Relay Data (API Sync mode only)

• A unique device identifier (generated at pairing)
• Authentication tokens (stored as cryptographic hashes)
• Encrypted health payloads (held max 15 minutes, then auto-deleted)

What We Do NOT Collect

• Your name, email, or contact information
• Your Apple ID
• Location data
• Advertising identifiers
• Usage analytics or tracking data

When using API Sync mode, your health data is encrypted on your device using X25519 key exchange and ChaCha20-Poly1305 before leaving your iPhone. The relay server cannot read your health data — it only passes encrypted blobs.

Open Vitals only transmits your health data after you explicitly (1) grant Apple HealthKit read access, (2) choose which health metrics to share, and (3) connect a destination and confirm an on-screen consent prompt that names that destination before any data is sent.

You choose the destination — Open Vitals does not. The app does not select, operate, or send your data to any third-party AI service on its own. Your data is transmitted only to the endpoint you connect: your own server, a relay you provision, or another service you choose. The only parties Open Vitals itself involves are Apple HealthKit (to read data, with your permission) and, in Relay mode, Cloudflare Workers (which only ever holds end-to-end-encrypted blobs it cannot read, for a maximum of 15 minutes).

If you direct Open Vitals to a third-party service (for example, a third-party AI assistant, automation tool, or cloud service), that service's own privacy policy and terms govern how it handles your data once it arrives. Open Vitals does not control that service and cannot guarantee its protections. We encourage you to review the terms of any destination you connect. You can revoke sharing at any time by disconnecting.

We never sell or share your health data for advertising or analytics.

• Apple HealthKit — Used to read health data with your explicit permission. We comply with Apple's HealthKit guidelines.
• Cloudflare Workers — Powers the cloud relay. Subject to Cloudflare's Privacy Policy.

We do NOT use analytics services, advertising networks, or social media SDKs.

• Disconnect anytime: Remove the pairing from Settings → Cloud Relay → Disconnect. All relay data is deleted immediately.
• Revoke HealthKit access: Go to iPhone Settings → Health → Data Access → Open Vitals → Turn Off All.
• Delete your data: Since we don't store health data, there's nothing to delete on our side. Local data is on your own server.

Open Vitals is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy. Changes will be posted here with an updated date.

For privacy questions: privacy@exaptalabs.com
For general support: support@exaptalabs.com

Operator address: available on request at the email above.