Privacy Policy - VITA Devices

1. Data Sovereignty (The "Local First" Rule)

We cannot sell your health data because we do not possess it.

Your personal health database (init.sql) lives on your VITA hardware, not on our servers. This includes:

Nutrient logs and meal history
Activity patterns and biometric data
Personal preferences and goals
All health-related calculations and insights

Technical Implementation: Data is stored locally via SQLAlchemy in a standard SQLite database. The schema is open and can be queried through our Query Interface at any time.

2. The Stateless Parser Clause

Voice data is processed, not stored.

When you speak to VITA:

Your Voice

Stateless LLM Processing

Local Storage

1. Voice is transmitted to a cloud-based LLM solely for intent parsing

2. This request is stateless and anonymized - no user identification is included

3. Once speech is converted into a command template, the cloud "forgets" the interaction

4. The parsed command returns to your device where it's executed and stored locally

No Health Data in Cloud: Your nutrient information, meal logs, and health metrics never leave your device during voice processing.

3. Payment & Membership Data

Minimal data collection for Founding Members.

For Founding Members, we collect and store:

Email address: For order confirmation and shipping updates
Shipping address: For 2027 delivery of your VITA device
Transaction reference number: To verify your deposit and honor our refund guarantee
Revolut payment screenshot: Temporarily stored for manual verification (deleted after 30 days)

Payment Processing: All payments are processed externally via Revolut. We never see or store your full payment details.

4. Company Continuity & Your Data

Your data remains yours, regardless of our company's status.

The "Company Failure" Clause: In the event that VITA Devices ceases operations, the cloud-based parsing service will be terminated. However, your local data remains on your device and can be exported at any time.

Data Portability: Because we use a standard SQL schema, your entire health history can be:

Exported as CSV or JSON through our Query Interface
Queried directly using standard SQL tools
Migrated to any SQL-compatible system

Open Source Commitment: Should the company cease operations, we will open-source the core database schema and Query Interface to ensure your continued access to your data.

5. Your Rights (GDPR Compliance)

As a European company, we fully comply with GDPR regulations:

Right to Access: Request all data we have about you (minimal - see Section 3)
Right to Deletion: Request deletion of your membership data
Right to Data Portability: Export your health data from your device at any time
Right to Rectification: Update your membership information

To exercise any of these rights, email privacy@vitadevices.com.

6. Contact & Updates

Privacy Officer Contact: privacy@vitadevices.com

Policy Updates: This policy is effective for all Founding Members through 2027. Any updates will be communicated via email and will not reduce your existing privacy protections.