Effective September 9, 2026 · replaces the versions of August 12, August 10 and July 24, 2026
iVitalis needs an account, because your history is backed up and because coaching assumes a real identity. Sign-in is passwordless — Sign in with Apple, or a 6-digit code sent to your email address. There is no password field anywhere in the app. We store the email address (or the identifier Apple gives us, which may be a private relay address) and nothing else about who you are.
Logging never waits on the network. Once you are signed in, the app works fully offline and syncs when it can.
The records you create in iVitalis are stored in your own account on our backend (hosted on Supabase) so that you can restore them on a new device: workouts, sets and weights, programs, food and protein logs, hydration, supplements, body weight, sleep and movement figures, mood and gratitude notes, meditation and Mind sessions, cardio, holiday periods, and the daily recovery summary the app calculates. Every row is protected by row-level security — only your authenticated account can read your rows.
The things you write — your mood notes, your why-notes and your gratitude entries — are end-to-end encrypted. They are sealed on your phone before they are backed up, with a key that is generated on your device and stored in your Keychain. That key travels to your other devices through iCloud Keychain, encrypted end-to-end by Apple, and it is never sent to us. What sits in our database is unreadable text that nobody with access to it — including us — can open.
What is not encrypted is the structure around them: that a note exists, the day it belongs to, and a mood rating of 3 out of 5. That is what your weekly score is calculated from, and it is what a coach you have connected to can see. The words underneath are yours alone.
Two honest limits. If you lose every device and have iCloud Keychain switched off, those notes cannot be recovered by us or by anyone — there is no copy of the key. And encryption protects your writing from a breach, a backup, a legal demand and our own curiosity; it cannot protect you from a future version of this app, because we write the app. That is true of every end-to-end encrypted product, and we would rather say it than imply otherwise.
With your permission, iVitalis reads steps, sleep, body weight, workouts, heart rate and mindful minutes to fill your day automatically, and writes your manual weigh-ins back to Apple Health. Health data is never used for advertising and is never sold or shared with third parties. The app is fully usable if you decline Health access.
If you connect an Oura Ring, iVitalis uses Oura's official API to fetch your nightly sleep and readiness scores. The authorisation exchange runs through our server so that the app never carries Oura's client secret; your Oura access and refresh tokens are then stored only in your device's Keychain. The scores themselves are kept with your iVitalis data. You can disconnect Oura in the app at any time, and revoke access at cloud.ouraring.com.
Nothing is shared with anyone until you enter a coach's connection code and accept the link. From then on, seven switches decide what that coach can read, and each one is yours to change or switch off at any moment. The switches are enforced on the server, not just in the app — turning one off makes that data unreadable to your coach immediately, not merely hidden.
For each category your coach also sees the day-by-day record for the targets in it, which is how they see whether a week actually happened. Anything outside those seven categories is not served at all — including any custom trackable you create, your private why-notes, and your progress photos.
A coach can change your targets, add an item to track, or send you a program. Every change lands with a reason they are required to write, and you see the change and the reason on your Home screen. You stay free to adjust or switch off anything a coach sets. Disconnecting ends their access to everything.
If you are the coach, the same applies in reverse: you only ever see what each athlete has consented to share.
None of them is permitted to use your data for their own purposes.
You can export everything you have logged from the You tab, as a file you keep.
You can delete your account from the You tab. That permanently removes your synced records from our servers, ends any coach's access, and deletes the progress photos on that device. Deleting the app removes local data from that phone. Because photos have no cloud copy by design, they are the one thing that cannot be recovered afterwards — the app says so before you confirm.
Signing out does not delete anything. It files your data away so the next person to sign in on that phone sees none of it, and restores it when you sign back in.
iVitalis is not directed at children under 13 and we do not knowingly collect data from them.
If this policy changes, the new version will be posted here with a new effective date, and the date it replaces will be named.
Questions about privacy: hello@ivitalis.ai