Privacy Policy
Last updated 28 September 2026
We hold medical information about you. That deserves a plain description rather than a long one, so this says what we collect, who can see it, and what we will do if you ask.
What we collect
Your account: name, email address, phone number, and the password or Google sign-in you use. Passwords are handled by our authentication provider and are never visible to us.
Your health profile: date of birth, gender, height, weight, any chronic conditions, family history, health goals and activity level you choose to enter. All of it is optional, and the product works without it — it is used to interpret your results, not to gate access.
Where to find you: the address you give for the blood draw, and its map coordinates, so the clinician can reach you.
Your results: the biomarker values from each draw, the lab's own report file, and anything derived from them such as your score and recommendations.
Your payments: what you bought, when, for how much, and the reference our payment provider gives the transaction. We never see or store your card number — it is entered on Kashier's hosted checkout and stays with them.
Who can see it
You, in full, at any time.
The lab partner handling your visit, and only for the appointments that are theirs. They see who they are visiting, where, and which tests to draw. A partner cannot open the record of someone who is not their patient — that is enforced by the system, not by policy.
Our own staff, where they need to in order to run the service — answering a support message, correcting a result, investigating a payment.
Our processors: our hosting and database provider, our authentication and file-storage provider, and our payment provider. They hold data on our behalf and are not permitted to use it for anything else.
We do not sell your data, and we do not share it with insurers, employers or advertisers. No exceptions, and no version of this page will say otherwise.
Automated interpretation
Parts of the app explain your results using an AI model, which means the relevant biomarker values and the health profile you entered are sent to that provider to generate the explanation. They are not used to train anyone's model.
Nothing it produces is a diagnosis or a substitute for a doctor, and no decision about your care is made automatically. If the feature is unavailable your results still show in full, with their reference ranges.
How long we keep it
Results are medical records and we keep them for as long as you have an account, so that a value measured this year can still be compared against one from three years ago. That comparison is most of what the product is for.
Account and payment records are kept for as long as we are required to keep them for tax and accounting purposes.
What you can ask us to do
See it: your results and profile are in the app. Ask us and we will send you everything else we hold.
Correct it: you can edit your profile yourself. If a result is wrong, tell us and we will check it against the lab's report.
Delete it: we will close your account and remove your profile. Be aware of one honest limit: results already filed against you are medical records, and our systems deliberately refuse to delete them along with the account, so that a record cannot be erased by accident or to cover a mistake. Tell us if you want them removed too and we will handle that separately and confirm when it is done.
Write to support@getvital.health for any of these. We will reply within two working days.
Security
Everything travels over an encrypted connection and is stored on managed infrastructure with access limited to the people and services that need it. Lab report files are held in private storage and are reachable only through short-lived links issued to you.
No system is perfect. If we ever find that your data has been exposed, we will tell you what happened and what we did about it rather than wait to be asked.