1. Information We Collect
We collect personal, medical, and application data to provide a comprehensive, preventative wellness experience:
1.1 Authentication & Profile Data
- Authentication: Encrypted passwords (via bcrypt) and JWT tokens.
- Profile Details: Name, age, biological sex, phone number, email address, and country.
1.2 Health, Vitals & Program Data
- Manual Entry: Blood pressure, blood glucose, cholesterol, weight, and BMI logs.
- Integrations: Heart rate, step count, and sleep telemetry from Apple HealthKit and Google Fit.
- Programs: Active wellness enrollment history, progress tracking, and exercise adherence log.
1.3 Conversational AI & Telemetry
- VITA AI: When you use our VITA AI chatbot, we collect your chat messages and relevant health context from your profile. This data is securely transmitted to the Google Gemini API (a third-party AI service) solely to generate personalized health responses. Google processes this data for inference only and does not use it for tracking or advertising. We confirm that Google provides the same or equal protection of your user data as stated in this Privacy Policy.
- Analytics & Logs: Performance telemetry, screen durations, crash reporting, and device specs.
2. Google Cloud Platform (GCP) Storage
Your health and personal data are stored securely on Google Cloud Platform:
- All stateless application servers are containerized and deployed on Google Cloud Run with strict IAM policies.
- Health data and credentials are kept in a secure database cluster managed via MongoDB Atlas, hosted in the GCP India (Mumbai) region.
- Media assets and static documents are served via encrypted, private Google Cloud Storage buckets.
- Data is encrypted in transit using TLS 1.3 and at rest using AES-256 standards.
3. How We Use Data
Your data is used solely to calculate your CVITAL Score™, provide VITA AI health feedback, generate warning alerts for abnormal vitals, and coordinate your enrolled programs. We will never sell your health metrics or share them with unauthorized advertisers.
4. Your Rights
You have the right to request a machine-readable export of all your data, ask to correct inaccuracies, or permanently delete your account (which purges all associated records from our cloud database within 30 days). Contact us at socialmedia@preventvital.com to exercise these rights.