Privacy Policy

What this policy covers

Vitul Inc. operates this website. This policy describes the website, waitlist, reservation checkout, and related communications. You can contact us at team@getvitul.com.

The bracelet and Nila app are in development. The website’s product demonstrations do not record voice memos or collect readings from your body. This website policy does not describe the future app’s handling of health data, audio, transcripts, calendar information, or AI processing. Those practices will need a separate notice before collection begins.

Our commitments for Nila at launch

We are building the bracelet and Nila app around these commitments: voice and health data will be encrypted while traveling from your phone to our servers. We will never sell your voice or health data, or permit AI providers to use it to train their own models. We will not share identified voice or health data with outside parties for their research or model improvement. Providers may process information on our behalf to deliver the service, under restrictions on how they use it.

These are commitments for the launch product, which is still in development. Before the app collects this information, its privacy notice will explain processing providers, storage, retention, deletion, and your controls. The website analytics and advertising practices described below are separate from these product commitments.

How we plan to improve our algorithms

We plan to use aggregated, de-identified wellness data to develop, test, and improve Vitul’s own algorithms and AI models, including future on-device models. This means combining wellness information across people and protecting it so it cannot reasonably be linked back to you or your device. We will not sell this dataset or attempt to re-identify it, and will require any permitted recipients to uphold the same protections.

This use of aggregated, de-identified wellness data will not have a separate opt-out in the Ledger. The optional ‘Help improve Vitul’ control described below governs additional contributions, not this aggregate use. Your rights over personal data remain unchanged, and we will obtain any consent required by applicable law before processing personal data for this purpose.

Raw sensor streams, voice recordings, and conversation transcripts will not be included in the default improvement dataset. Removing a name alone does not make a record de-identified. Using your information to give you personal insights is separate from contributing it to improve models for everyone.

Your planned Ledger controls

The app’s Ledger will display three independent controls. All will start off, and you will be able to change them at any time. We will ask once during onboarding, in plain language, and leave the choices accessible in the Ledger. Declining optional contributions or research invitations will not remove your personal insights.

Help improve Vitul: choose whether to contribute raw sensor streams or let authorized reviewers examine selected conversations to evaluate and improve Vitul’s algorithms and models. Before you opt in, we will explain the data involved, who can review it, and how long it will be kept. Human review for this improvement program will require your permission. Turning this off will stop new contributions and future review under the program; it does not automatically reverse learning already incorporated into a model.

Allow research invitations: choose whether we may invite you to research. An invitation is not enrollment or permission to access your health data for a study. Any study will explain its requirements and request separate agreement before participation.

Keep audio archive: choose whether to retain recordings for playback after your voice memo is processed. Keeping an archive will not grant permission for human review or model improvement. Turning this off will stop retaining new recordings for your archive. The app will explain how to delete existing recordings and how transcripts, processing copies, and backups are handled before you enable it.

Information you provide

Waitlist: your email address and, if supplied, your name, preferred finish, and referral code. We create a waitlist position and referral code and record referral relationships. Someone using your referral link can see your first name.

Reservations: your contact details, reservation number, quantity, payment status, amount, currency, and payment reference identifiers. Stripe processes checkout and collects the payment and billing information requested on its checkout page. Our reservation database does not store full payment card numbers or card security codes.

Communications: information you include when you email us or request support, a refund, or a change to your data. Please do not send medical records or other sensitive health information through website forms or ordinary support email.

Information collected automatically

The website and its providers receive technical information such as IP address, browser and device information, page addresses, referrers, timestamps, and request or error information. We use IP addresses to limit abusive requests.

Analytics and advertising tools can collect page views, clicks, sections viewed, signup and checkout events, campaign parameters, and browser identifiers. When you provide an email address, some analytics events can be associated with that address rather than remaining anonymous.

How information is used

We use information to manage the waitlist and referrals, process reservations and refunds, send confirmations and product updates, respond to requests, maintain records, and protect the website against misuse.

We also use website interaction and conversion information to understand performance, improve the website, measure advertising, and help deliver or optimize ads. Joining the waitlist or making a reservation can produce an analytics or advertising conversion event.

Services that receive information

Supabase provides database and authentication infrastructure. Stripe processes payments. Resend delivers emails. Vercel provides website hosting and web analytics. These providers receive the information involved in delivering their services.

PostHog provides website analytics. Events can include a browser identifier, interaction information, campaign information, reservation details, and your email as an identifier. Browser activity can be linked to a completed reservation through checkout metadata.

Meta receives information through the Meta Pixel and, when configured, server-side Conversions API. This can include page visits, signup and checkout events, purchase value, browser identifiers, IP address, browser information, and an email address used for matching. Server-side email matching uses a hashed address; hashing does not make it anonymous. Meta can associate these events with information it holds about you and use them for advertising and measurement.

Third-party tracking services may collect information about your activity over time and across other websites. Blocking browser cookies alone does not stop the website’s server-side conversion reporting. Provider practices are also described in their own privacy notices.

Cookies, browser storage, and tracking choices

The website uses cookies and browser storage for authentication where applicable, analytics identifiers, and advertising identifiers. Tab-based session storage can retain your submitted email to prefill checkout and campaign information to associate a visit with a signup or reservation.

You can manage cookies and site storage in your browser settings. Removing or blocking them may affect some website functions and does not delete information already held by us or our providers.

The website does not currently provide a consent preference panel or automatically change its tracking behavior in response to Do Not Track or Global Privacy Control signals. Contact team@getvitul.com with privacy or advertising-sharing requests. Browser settings alone are not a complete opt-out of server-side reporting.

Retention, location, and security

Retention depends on the type of information and its purpose, including managing an active waitlist or reservation, supporting refunds, maintaining transaction records, and resolving requests. There is not currently a single published deletion period for all website data. Contact us for information about a particular record or to request deletion; some records may need to be retained to meet legal obligations or resolve disputes.

The website uses service providers whose systems may process information in the United States and other countries. The website’s PostHog integration uses its US service. Privacy protections can differ by location.

We use HTTPS for the public website and limit privileged database and payment credentials to server-side code. No online service can guarantee absolute security. Encryption during transfer does not mean that information can never be decrypted by a service processing it; it is different from end-to-end encryption where only the intended user endpoints hold the keys.

Your requests and email choices

Email team@getvitul.com to request access to, correction of, or deletion of your information, or to ask about advertising sharing. Depending on where you live and which laws apply, you may have additional rights, including a copy of your data, restrictions on processing, or an objection or opt-out. We may need to verify your identity before acting on a request. You may also contact the privacy regulator in your location.

To stop marketing emails, use an unsubscribe link where provided, reply with ‘unsubscribe,’ or contact team@getvitul.com. Unsubscribing does not cancel a reservation or prevent essential messages about a transaction, refund, or request you made.

Updates and contact

We will update the date on this page when the policy changes and provide any additional notices required by applicable law. Questions or privacy requests can be sent to team@getvitul.com.