Privacy Policy

01 / Information we collect

Account information you provide (such as name and email address); health, activity, and performance data you choose to share, including data from Apple HealthKit and connected devices; and technical information about your device and app usage needed to operate the service.

02 / How we use it

To provide and improve the Vitalis application, generate the insights you request, maintain security, and communicate with you about the service. We do not sell personal or health data, and we do not use health data for advertising or marketing.

03 / Health data

Data obtained through Apple HealthKit is used only to provide features you enable within the app. It is never shared with third parties for advertising, data brokering, or any purpose other than delivering the service, in accordance with Apple's HealthKit requirements. You can revoke HealthKit access at any time in iOS Settings.

04 / Sharing

We share information only with service providers who process it on our behalf under contractual confidentiality obligations, when required by law, with your team as described below, or with your explicit direction.

Your team. If you are on a team in Vitalis, your team leader and your team's shared iPad can see your blast exposure readings and how many assigned tasks you have outstanding. Results from team activities, such as shooting drills, may appear on your team's boards. Your cognitive test scores appear there only if you turn this on in Settings → Privacy. Reports you create in the Share tab go to a provider only when you choose to send them.

05 / Retention and deletion

We retain information for as long as your account is active or as needed to provide the service. Some records are kept after you delete your account because our Cooperative Research and Development Agreement (CRADA) with U.S. Special Operations Command (USSOCOM) requires us to retain them, as described below.

You can delete your account in the app under Settings → Delete account, or by contacting us at privacy@vitalishealth.ai. Deleting your account signs you out and cannot be undone.

• Removed: your sign-in; your name, email address, phone number and DoD ID; and your notification registrations. You come off your team's boards and your team leader's view.
• Kept: your health, blast and task results, your survey answers and your signed consent form, which our CRADA with USSOCOM requires us to retain as records. They are no longer shown with your name, but they can still be linked to you.
• Connected wearables: a connected Oura or WHOOP account keeps sending data until you remove Vitalis in that app.
• Already sent: reports you sent to a provider from the Share tab before deleting your account are not recalled.

06 / Security

Data is encrypted in transit and at rest. Access is limited to personnel who need it to operate the service.

07 / Contact

Vitalis Health Systems, Inc.
2261 Market Street STE 67712
San Francisco, CA 94114
privacy@vitalishealth.ai