Privacy Policy

Effective November 13, 2026

The short version: Vitalis keeps your health data on your phone, encrypted. We have no accounts, no servers that hold your data, no analytics and no ads. We never see, sell or share your health information. If you turn on Family care, the medicines, doses and readings you choose to share are end-to-end encrypted on your phone before they leave it, so only the family members you invite can read them.

This policy explains how the Vitalis mobile app ("Vitalis", "we") made by AMDAN HOLDINGS LLC handles information. It applies to every version of the app: Google Play, Samsung Galaxy Store, Amazon Appstore, Apple App Store and the version downloaded from this website.

1. Information stored on your device

Everything you log or measure in Vitalis stays on your device in an encrypted database (SQLCipher, AES-256). The encryption key lives in your phone's secure hardware keystore and never leaves it. This includes:

Migraine entries, triggers, daily check-ins and barometric pressure readings
Breathing test results, peak-flow readings and inhaler logs
Pulse, heart-rate variability and recovery scores
Tremor test results and medication or caffeine timing logs
Sleep sessions, snore events and sleep stage estimates
Blink-rate checks, break history and streaks
Your profile name and app settings

We cannot access this data. It is not uploaded, synced or backed up to us, and Android cloud backup is turned off for the app.

2. Camera, microphone and motion sensors

Sensor	Used for	What happens to it
Camera	Fingertip pulse/HRV scans, blink-rate checks	Frames are analyzed live in memory and discarded. No photos or video are saved.
Microphone	Breath-sound checks, snore detection, sleep tracking	Sound is analyzed live in memory and discarded. No audio is recorded or saved; only results (for example, "12 snore events") are stored.
Motion sensors & barometer	Tremor tests, sleep movement, pressure alerts	Readings are processed on the device; only results are stored.

Each permission is requested only when you start the feature that needs it, and you can revoke it at any time in your phone's settings.

3. Information that leaves your device

Purchases. Subscriptions are processed by Google Play, the Apple App Store or the Amazon Appstore under their own privacy policies. We receive only what the store shares with developers (for example, that a subscription is active). Purchases on this website are processed by our payment provider, which receives your payment details and email address so it can deliver your license key. We never receive your full card number.
Update checks (website version only). The version downloaded from this website asks vitalis.getonthejob.com twice a day whether a newer version exists. The request contains no personal or health data. Our web server keeps standard access logs (IP address, time, requested file) for up to 30 days for security. You can turn update checks off in Settings.
Check-in and access. About twice a day the app sends a random install id made on your phone (not linked to you or your phone's hardware ids), your phone model, the app version, your country setting and the first name you gave in your profile (if any), so the Vitalis team can grant you access and count active installs. When you redeem a code or tap Request access, the code and, if you add one, your email are sent too. Our server also sees the IP address each request comes from; we keep the latest one with your install record, and the one used for each code redemption for 90 days, only to stop abuse such as code guessing and to block networks that attack the service. No health data is ever included.
Family care (only if you turn it on). When you share with family, or join someone's circle, your phone sends sealed updates through our relay: your medicine list and times, each dose you mark taken or skipped, the blood pressure and glucose readings you choose to share, and the first name you gave in your profile. Each update is encrypted on your phone with XChaCha20-Poly1305 using a key that exists only inside the invite code you give your family. We cannot read these updates; we store them only so your family's phones can collect them, delete them after 90 days, and delete the whole circle when the person sharing taps Stop sharing. The relay also keeps a random member id for each phone, when each phone last checked in, and the IP address of requests for abuse prevention. Anyone holding a valid invite code can join, so only send it to people you trust; you can remove members at any time.
License keys (website and Galaxy Store versions). If you activated Pro with a license key, the app downloads a list of deactivated key IDs from vitalis.getonthejob.com about once a day. Nothing about you or your device is sent.
App integrity. To protect against tampered copies, the app checks on the device whether it has been modified, re-signed or is running under a debugging or hooking tool. These checks run locally and send nothing anywhere.
Crash reports. If the app crashes, it sends the technical error trace, the app version, the Android version and the phone model to vitalis.getonthejob.com so we can fix the problem. It never includes health data, your name, your install id or anything you typed. We keep at most the latest 500 reports and use them only to fix bugs.
Reports you share. When you export a PDF or data file, it is created on your device and handed to your phone's share sheet. You choose where it goes; we never receive it.

Vitalis contains no advertising, analytics or tracking SDKs, and no third-party crash-reporting SDK. It does not use your location, contacts or advertising ID.

4. Notifications

Reminders (for example, eye breaks or pressure alerts) are scheduled locally on your device. Vitalis does not use push notification servers.

5. Your choices and rights

Export: Settings → Export all data creates a portable copy of everything you've logged.
Delete: Settings → Delete all data permanently erases every record and destroys the encryption key. Uninstalling the app also deletes everything.
Because we hold no personal data on our servers, there is no account to delete. If you bought Pro on this website, you can ask us to delete your purchase record by emailing support@vitalis.health.

Residents of California and other US states with privacy laws, the EU/EEA and the UK have rights to access, correct and delete personal data. Since your health data never reaches us in readable form, these requests mostly concern website purchase records; contact us and we'll respond within 30 days.

6. Health information

Vitalis is a wellness and self-tracking tool. It is not a medical device and does not diagnose, treat or prevent any disease. We don't sell health information and we don't use it for advertising.

7. Children

Vitalis is not directed to children under 13, and we do not knowingly collect information from them.

8. Security

Data is encrypted at rest with a hardware-protected key, the app can be locked with your fingerprint or Face ID, and releases are code-signed. Website downloads are integrity-checked (SHA-256) before installing.

9. Changes

If this policy changes, we'll update the effective date above and, for material changes, tell you in the app.

10. Contact

AMDAN HOLDINGS LLC · support@vitalis.health