Privacy Policy

The data controller responsible for the processing of your personal data is:

VitaFit is committed to protecting your privacy and processing your personal data in accordance with applicable data protection laws, including, where applicable, the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

We may collect the following categories of personal data depending on how you use VitaFit:

If you use AI-powered features, we may also process prompts, food descriptions, uploaded images, and related context to provide nutritional estimates, recommendations, or other requested outputs.

Some of this information, especially nutrition, exercise, body measurements, and similar wellness information, may be considered sensitive personal data or special category data under certain laws. Where required by law, we will process such data on the basis of your explicit consent.

We use personal data for the following purposes:

• To create and manage your account.
• To provide the VitaFit app, website, and related services.
• To record and display your nutrition, hydration, exercise, and progress history.
• To generate AI-assisted estimates, suggestions, summaries, and recommendations you request.
• To personalize your experience, targets, and in-app content.
• To process subscriptions, payments, renewals, and customer support requests.
• To monitor app performance, fix bugs, improve functionality, and maintain security.
• To comply with legal obligations and enforce our legal terms.
• To send service-related communications, such as account, billing, or security notices.
• To send marketing communications where permitted by law or where you have consented.

Where the GDPR or equivalent laws apply, we rely on one or more of the following legal bases:

• Performance of a contract: when processing is necessary to provide the service you requested.
• Consent: where you have given consent, including where required for sensitive or health-related data.
• Legitimate interests: for service improvement, fraud prevention, security, analytics, and business operations, provided those interests are not overridden by your rights.
• Legal obligation: where processing is required to comply with applicable law, regulation, or lawful request.

Where we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

We do not sell your personal data. We may share your personal data only in the following circumstances:

• With service providers who help us operate the app and infrastructure, such as hosting, analytics, authentication, cloud storage, payment, customer support, and communications providers.
• With AI or machine learning providers strictly to the extent necessary to provide AI-powered features you use.
• With app stores or payment platforms, such as Apple App Store or Google Play, where relevant to purchases and subscription management.
• With authorities, regulators, courts, or law enforcement where required by law or necessary to protect rights and safety.
• With a purchaser, investor, or successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality measures.

All third parties that process personal data on our behalf are expected to do so under appropriate contractual and security safeguards.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the service, maintain business records, resolve disputes, enforce agreements, and comply with legal obligations.

Retention periods may vary depending on the type of data, the context in which it was collected, and applicable legal requirements. When data is no longer needed, we will delete it or anonymize it, unless we are required or permitted by law to retain it longer.

Your personal data may be processed in countries other than your country of residence, including countries that may not provide the same level of data protection under local law.

Where required, we take appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or other lawful transfer mechanisms recognized under applicable data protection laws.

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Request restriction of processing.
• Object to certain processing activities.
• Request portability of your data where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a competent data protection authority.

To exercise your rights, please contact us at cloud@venirse.com. We may need to verify your identity before responding to your request.

VitaFit is not intended for children under the age of 13. We do not knowingly collect personal data from children below the applicable minimum age without appropriate parental or guardian authorization where required by law.

If you believe that a child has provided personal data in violation of this Policy, please contact us so that we can take appropriate steps.

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices.

When we make material changes, we will update the “Last updated” date above and, where required, provide additional notice through the app, website, or by other appropriate means.

If you have questions, requests, or concerns about this Privacy Policy or the way your personal data is processed, you may contact us at: