Privacy Policy

Effective date: July 17, 2026

1. Overview

VitaraTech (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data when you use the VitaraTech service at vitaratech.com (the “Service”).

VitaraTech does not require account creation. We are designed to minimize data collection and to keep your health data under your control. Please read this policy carefully before uploading any health information.

2. Information We Collect

a) Lab result files you upload

When you upload a lab result file (CSV, PDF, or other format), it is parsed entirely within your browser. The raw file is never transmitted to or stored on VitaraTech’s servers.

b) Browser local storage

To provide a seamless experience across pages, your parsed lab data — including marker names, values, dates, and status ratings — is stored in your browser’s local storage on your own device. This data never leaves your device except when you explicitly trigger an AI feature (see section c). You can clear this data at any time by clearing your browser’s local storage or site data.

c) Data sent during AI requests

When you use AI features (the chat assistant, health summary, or meal and supplement plan), we transmit the following from your device to VitaraTech’s server:

Your typed question or request.
A portion of your parsed lab data (marker names, values, normal ranges, and status flags) to give the AI context for its response.

This data is forwarded to Anthropic’s Claude AI API to generate your response. VitaraTech does not store this data on its servers after the request completes.

d) Oura Ring data

If you choose to connect your Oura Ring account, we retrieve health metrics from the Oura API on your behalf, including sleep scores, HRV, readiness, SpO2, and activity data. This data is:

Displayed to you within the Service.
Included in AI requests when you use AI features, to give the AI a more complete picture of your health.
Not permanently stored on VitaraTech’s servers.

Your Oura authorization can be revoked at any time through your Oura account settings.

e) Server and infrastructure logs

Our hosting provider, Vercel, may collect standard server access logs, including IP addresses, browser type, pages visited, and request timestamps, as part of normal web infrastructure operation. We do not use third-party analytics or advertising trackers.

f) No account or identity data

We do not collect your name, email address, date of birth, or any other personally identifying information as part of normal Service use. There is no account creation, login, or user profile.

3. How We Use Your Information

We use the data described above exclusively to:

Display your lab results and health data within the Service.
Generate AI-powered responses, summaries, and recommendations via Anthropic’s API.
Maintain the functionality of the Service across page navigation via browser local storage.

We do not use your data for advertising, marketing, or any purpose other than providing the Service to you. We do not sell, rent, license, or otherwise share your health data with any third party other than as described in this Policy.

4. Third-Party Services

Anthropic (Claude AI)

Your questions and lab data excerpts are transmitted to Anthropic’s API to generate AI responses. Anthropic processes this data under its own privacy policy. We recommend you do not upload documents containing information you are not comfortable sharing with a third-party AI provider.

Oura Health

If you connect your Oura Ring, your data is retrieved from Oura’s API under Oura’s own privacy policy. VitaraTech is not affiliated with Oura Health.

Vercel (Hosting)

The Service is hosted on Vercel. Vercel may process request metadata as part of hosting infrastructure. See Vercel’s privacy policy for details.

5. Sensitive Health Data

Lab results and biometric data are sensitive health information. You should be aware of the following before using the Service:

VitaraTech is not a HIPAA-covered entity. Your data is not subject to HIPAA protections when processed by VitaraTech, Anthropic, or Vercel.
All data transmitted between your browser and VitaraTech’s servers is encrypted using HTTPS/TLS.
Data stored in your browser’s local storage is accessible to anyone with access to your device and browser. VitaraTech is not responsible for unauthorized access to data stored locally on your device.
You use the Service at your own discretion and accept full responsibility for any data you choose to upload.

6. Cookies and Tracking

VitaraTech does not use cookies or any third-party tracking or advertising scripts. We use browser local storage solely to persist your uploaded health data across page navigation within the Service. This is functional storage, not tracking.

7. Data Retention and Deletion

Server-side

VitaraTech does not retain your lab data, questions, or Oura data on its servers. All data is processed in memory during a request and discarded immediately after. Vercel infrastructure logs may be retained for a limited period under Vercel’s own policies.

Your device (local storage)

Your parsed lab data is stored in your browser’s local storage until you clear it. To delete this data, clear your browser’s site data for vitaratech.com, or use your browser’s developer tools to manually remove items prefixed with “vitara_”.

8. Your Privacy Rights

Depending on your location, you may have rights under applicable privacy laws including the California Consumer Privacy Act (CCPA) and the EU General Data Protection Regulation (GDPR). Because VitaraTech does not collect personal identifying information and does not retain health data on its servers, most of these rights are exercised by you directly (for example, by clearing your browser’s local storage).

If you believe we hold any personal data about you and wish to request access, correction, or deletion, please contact us at the address below. We will respond within 30 days.

9. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect information from minors. If you believe a minor has used the Service and submitted personal data, please contact us at legal@vitaratech.com and we will take appropriate steps to address it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at: legal@vitaratech.com