Privacy Policy

Vitagami is a personal health-tracking project operated by a private individual, not by a company. For any question about your data — access, export or deletion — write to [email protected].

Only what the app needs to work:

• Your account: email address, the display name you give at sign-up, a profile picture URL if you sign in with Google, and your interface preferences (language, theme, units).
• The health data you enter: the markers you create, their numeric values, dates, optional notes, categories, and comparison cards.
• Your health profile, if you choose to give it: sex and date of birth. Both are optional, used only to pick reference ranges, never shown to people you share with, and can be cleared in Settings at any time.
• Your family history, if you choose to add it: conditions in your relatives, entered by you. It is shown to nobody else — not even people you share with — unless you include it in a doctor report or a share link, and you can delete it in Settings at any time.
• The files you upload: lab reports as PDF, image or CSV. They are kept on the server’s own disk, or in S3-compatible object storage when the deployment is configured for it.
• Sign-in sessions: a session token and its expiry, plus the IP address and browser user-agent of the device that signed in.

Vitagami never asks for your address or phone number. There are no advertising identifiers, no third-party analytics or tracking scripts, and no third-party cookies. An entry is a number, a unit and a date — it is not enriched, profiled, or linked to anything outside your account.

To know which pages are useful, the site counts page views itself, on its own server, without cookies. For each view it keeps the page’s general address (never the link token of a shared report or the id of a record), the site you came from, the kind of device and the country your connection comes from. To tell visitors apart within one day it keeps a one-way code made from your IP address, your browser and a random value that exists only in the server’s memory and is replaced every day — it is never written to disk or to a backup. Your IP address itself is never stored, and the codes of different days cannot be linked. Browsers that send Do Not Track or Global Privacy Control are not counted at all. These counts are kept for 13 months and are seen only by the operator and the people the operator gives access to.

Google sign-in requests only the basic sign-in scopes — openid, email and profile. That gives Vitagami your email address, display name and profile picture, and nothing else: no access to Gmail, Drive, Calendar or your contacts. The tokens Google returns are stored so you stay signed in. You can revoke Vitagami’s access at any time in your Google account’s permissions page.

Parsing happens on Vitagami’s own server. PDFs are read through their text layer; when a report is a photo or a scan, optical character recognition runs locally on the server. Your file is not sent to any external OCR or AI service, and it is deleted as soon as it has been read — normally within seconds of the upload. An upload that is started and never completed is removed within the hour.

Lab results are health data — a special category under the GDPR (art. 9) — and we process them only with your explicit consent, given when you press “Agree and create account” or “Agree and continue”. For a family profile, the person who keeps it gives that consent on the other person’s behalf, as a parent or carer would; when a profile is handed over, its person gives their own. You can withdraw consent at any time by deleting your account in Settings: without it we cannot keep your results.

Only you — unless you choose otherwise. Two features share data, and both are yours to start and to revoke: public share links, which can be given an expiry date, and connections with another Vitagami user, which grant read-only access to your charts. Nobody else is given access. The operator can technically reach the database for maintenance and backups, and does not read your health data.

When you write to us — in the app, on the contact page or to our Telegram bot — we keep your message and our replies so we can help you. Messages are also mirrored to a private Telegram group our team reads; the ticket card there shows your name and a masked email address. Messages you send through Telegram are processed by Telegram. Support conversations linked to your account are deleted with it and included in your data export.

Google, only if you choose Google sign-in. The hosting provider that runs the server, and S3-compatible object storage when the deployment uses it. Resend sends Vitagami’s emails (address confirmation, connection requests and invitations, and the result notifications you can switch off). It receives your email address, your name as the sender, and the text of the email; it processes messages in the EU and keeps delivery logs in the United States. Emails never contain test names, values or reports — only that there is something to look at after you sign in. Telegram, when you write to support: your message is mirrored to a private Telegram group our team reads, with your email address masked, and messages you send through Telegram are processed by Telegram. That is the whole list: no analytics providers, no ad networks, no data brokers. Fonts are served from Vitagami’s own domain, so your browser does not contact Google Fonts.

We do not keep your documents. An uploaded report is deleted from the server as soon as it has been read, and the values taken from it are cleared once you save them, or within 24 hours if you never do. The measurements you save stay until you remove them: in Settings you can reset your data, which deletes your markers, their entries, your share links and any files still being processed, or delete the whole account — confirmed by email, it removes everything in it, family profiles included. You can also write to [email protected] and it will be deleted.

In Settings → Your data you can download everything you keep here at any time: one JSON file with your results, notes, ranges, share links, access, support conversations and family history — yours and your family profiles’ — and your results alone as CSV for a spreadsheet. The file is built when you ask for it and is not stored.

Traffic is served over HTTPS, passwords are stored hashed, session cookies are signed, and the app sends a strict Content-Security-Policy. To be straightforward about it: Vitagami is a small, self-run project, not a certified medical system. Please do not upload anything you would not be comfortable having stored here.

Vitagami displays numbers you provide. It does not diagnose, interpret results, or replace a clinician. Discuss your results with a qualified professional.

If this policy changes in a way that affects how your data is handled, the updated text and a new date will appear on this page.