Privacy Policy

To use Founding Members you sign in with your email address and a one-time verification code. No password is required.

We use a hosted account service (Supabase) to:

• authenticate your email and keep your signed-in session

• record Founding Member status

• administer Founding Access (the temporary 90-day complimentary access window)

• issue, redeem, and prevent reuse of Founding Member invitations

Founding Members access is invitation-only. Downloading the app or verifying an email address does not by itself open the main experience. An invitation issued for the same email address must be redeemed before Founding Member access is available.

Founding Member recognition stays with that account while the account is retained. It ends if the account is deleted.

After you acknowledge the required legal documents and verify your email, Vitakai stores a record that those documents were accepted, including the document version and the time of acceptance. Those records are removed when you delete your account.

Optional profile details such as name, age range, or gender, if you enter them, stay on this device in the current release.

In this Founding Members release, the following are stored primarily on this device and are not generally uploaded to Supabase:

• Safety Profile, including medications, health conditions, allergies, and pregnancy or nursing status

• Quick Health Check answers and Wellness Focus

• Supplement Plan, custom supplements, and completion tracking

• Health Goals, goal tracking, and progress or streak information

• shopping list, reminder settings, and Smart Scan or OCR results

If you delete the app or this device’s data without deleting your account first, those on-device wellness records can be lost.

Quick Search may send the text you enter, which can include health-related details, to Vitakai’s backend so results can be returned. That backend is hosted using Render and may use OpenAI-backed processing. Supplement name lookups can use the same backend. Ordinary Quick Search does not send your complete Safety Profile.

Intelligent Search recommendations and safety processing in this Founding Members release run on this device. This release does not send your complete Safety Profile to a cloud recommendation service.

Do not type unnecessary sensitive details into search.

Vitakai may send email to the address you use to sign in.

Account verification

Supabase handles email-based account verification and sign-in. The one-time verification code is part of signing in. It is not optional news email.

Essential account emails

Vitakai may send necessary account emails about Founding Access, including when access is activated and when it is ending or has ended. These account emails do not require you to opt in to optional news and updates.

Optional news and updates

Vitakai may send occasional optional emails such as product updates, wellness insights, Vitakai Life content, and invitations to share feedback. Optional emails are switched off unless you enable “Vitakai news & updates” in Settings → Notifications. You can switch them off again at any time.

Unsubscribe

Optional emails include an unsubscribe link. Unsubscribing turns off optional news and updates only. Essential account emails may still be sent. You can opt in again in Settings → Notifications.

Delivery

Supabase Auth delivers the one-time verification message using Resend SMTP. Vitakai does not compose that verification message in its account or optional email outbox. Account and optional emails, when sent, use a separate Resend outbox. Those emails must not include your Safety Profile or Supplement Plan. Resend processes the recipient email address and the delivery information needed to send the message.

Delivery protection

If an email cannot be delivered or is reported as unwanted, Vitakai records that so we do not keep sending mail to an address that bounces or has been marked as spam. That delivery protection is separate from your optional news preference. Turning optional emails back on in Settings does not clear a bounce or spam-complaint record.

Email records we keep

• Your current optional-email preference is stored with your account and is removed when you delete your account.

• A history of opt-in and opt-out changes is kept so we can show that a preference changed. After account deletion, that history is kept without your account identifier.

• Unsubscribe requests are recorded so optional emails stay off until you opt in again.

• Delivery-protection records store a one-way hash of the email address, not the address itself.

• Delivery-event receipts record that a bounce or complaint was received, without storing the full provider message.

These operational email records do not include your Supplement Plan, Health Goals, Safety Profile, or other wellness data. No automatic deletion period is currently configured for them. Any future retention period will be set after legal review.

We use the information described above to:

• create and maintain your Founding Members account

• provide Founding Member status and Founding Access

• personalise on-device recommendations and keep your Daily Plan and Health Goals

• schedule local reminders you choose

• return Quick Search or supplement-lookup results when you ask for them

• send essential account emails about Founding Access

• send optional news emails only if you enable them in Settings

We do not sell your personal information.

We use service providers only as needed to operate Vitakai, including:

• Supabase for account, session, and Founding Member administration

• Render to host Vitakai’s search and supplement-lookup backend

• OpenAI-backed processing for that backend when Quick Search or a supplement lookup is requested

• Resend SMTP for Supabase Auth one-time verification messages, and a separate Resend outbox for Vitakai account and optional emails

• Vercel to host the public website. Vercel may keep technical logs needed to operate and secure the site

We may also disclose information if required by law or to protect user safety. The app may link to external sites such as research references. Those sites have their own privacy practices.

You can delete your account in Profile → Settings. After a successful deletion:

• your sign-in account, customer-owned server records, and stored legal-acceptance records are removed

• Founding Member recognition, membership, and Founding Access for that account end and are removed

• wellness information stored on this device, including your Supplement Plan, Health Goals, Quick Health Check, and Safety Profile, is cleared

Limited administrative records of issued or consumed Founding Member invitations may be kept so an invitation cannot be reused and so necessary operational and security records remain. Those records are not your Supplement Plan, Health Goals, Safety Profile, or other wellness data.

Your optional-email preference and queued emails for that account are removed with the account. Some operational email records may remain:

• consent-change history without your account identifier

• hashed delivery-protection records

• bounce or complaint delivery receipts

Those email records are not your wellness data. No automatic deletion period is currently configured for them. Any future retention period will be set after legal review.

For privacy-related questions: privacy@vitakai.app

For support: support@vitakai.app

Website: https://vitakai.app