Privacy policy

Effective 23 October 2026

Vital Relay is an iPhone app and a relay server that let the AI assistants you connect (for example Claude by Anthropic or ChatGPT by OpenAI) ask about the Apple Health data you allow. The short version: your health data is read on your iPhone, passes through our relay in memory only, goes to the AI you connected, and is not stored on our servers. There are no accounts, no ads, no analytics and no tracking.

Who is responsible

Rinat Tarzumanov (individual activity, Lithuania) is the controller for the data processed by the relay. Contact: hello@vitalrelay.app.

Health data

• The app reads Apple Health only for the data types you allow in iOS, and only to answer a request from an AI you connected, or to show your own dashboard and custom metrics on the phone.
• When an AI asks, the answer is computed on your iPhone and sent through our relay to that AI. The relay holds it in memory only for as long as it takes to deliver it (or, if the app is in the background, until you open it, for at most 10 minutes) and never writes it to disk or to logs.
• Once the AI provider receives the answer, its own privacy policy and terms apply to it (Anthropic for Claude, OpenAI for ChatGPT, and so on). You choose which AI you connect.
• You choose, per AI, which categories it may read, whether raw samples are allowed and whether every request needs your approval. You can revoke an AI at any time; its address stops working immediately.
• Health data is never used for advertising or marketing, never sold, never shared with data brokers and never stored in iCloud.

What stays on your iPhone

The ledger of requests (including a copy of exactly what was sent), your per-AI permissions and your custom metrics are stored only on your iPhone and excluded from iCloud and device backups.

What the relay stores

• A random device identifier and hashes of its secrets — no name, email, phone number or Apple ID.
• For each AI connection: the label you chose, the name, version and user agent the AI client reports about itself, and when it was created, last used or revoked; the connection secret is stored only as a hash.
• Server logs: IP address, time, request path (with secrets removed) and status, used to run and protect the service. They are rotated by size (at most 30 MB in total) and are typically overwritten within days.
• If you joined the waitlist on our website: your email address, only to tell you about the launch.

The relay runs on a server in the European Union operated by our hosting provider on our behalf.

Legal bases (GDPR)

We process health data on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give in the app before connecting any AI and can withdraw at any time by revoking connections or using “Delete everything”. Technical data needed to run the relay is processed to provide the service you asked for (Art. 6(1)(b)) and to keep it secure (Art. 6(1)(f)).

Your rights and deletion

Settings → Delete everything removes your device and all its connections from the relay and erases the ledger and custom metrics on your iPhone. If you simply delete the app, its connections on the relay are revoked the next time the app is installed; to revoke them at once, use Delete everything first. You also have the right to access, rectify, erase, restrict and port your data and to object; write to hello@vitalrelay.app. You can complain to the Lithuanian data protection authority (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or the authority where you live.

Children

Vital Relay is not directed at children under 16.

Changes

If this policy changes, we update this page and its date; material changes are announced in the app.