Vantage Privacy Policy

1. Information you provide

• Account and contact information, such as email address, name, authentication provider identifiers, and marketing preference.
• Profile and wellness information, such as display name, birthdate, sex, height, weight, body-fat estimate, measurements, activity level, goals, preferences, and profile photo.
• Nutrition and food information, such as meals, recipes, ingredients, serving sizes, nutrient values, targets, photos of recipes or labels, voice transcripts, and corrections.
• Fitness information, such as exercises, sets, repetitions, weight, effort, duration, distance, workout notes, programs, templates, and progress.
• Information you enter on the Vantage Apple Watch app, such as sets, rest timing, and meals you log, and voice recordings of meals you dictate there (see section 4).
• Body-progress content, including measurements, weight history, and progress photos.
• Conversations and requests sent to Sherpa, including meal descriptions, coaching messages, plan requests, and generated results you save.
• Support information, including issue-report text and the operating-system type and version attached to a report.

2. Information collected automatically or generated

• Session and security information needed to keep you signed in, protect accounts, enforce rate limits, and detect abuse.
• Sync metadata, such as record identifiers, timestamps, mutation identifiers, deletion markers, and sync cursors.
• Provider-usage records, such as which Vantage feature and provider route were used, response status, token or audio usage, estimated provider cost, user identifier, and timestamp. Vantage does not currently use a third-party advertising or behavioral-analytics SDK.
• Calculations and inferences produced from your entries, such as calorie targets, nutrient totals, estimated one-repetition maximums, streaks, trends, adherence summaries, and AI-generated suggestions.

3. Sources of information

Information comes from you; from the device and permissions you choose; from Apple, Google, or another authentication provider when you use that sign-in method; from public or licensed nutrition and exercise sources used to answer your request; and from service providers that process an action on Vantage’s behalf. If you use the Vantage Apple Watch app and allow Apple Health access, the watch also reads your heart rate during a workout and saves the workout to Apple Health (see section 4). Any other health-platform or wearable integration will require a separate permission and disclosure before access.

4. Local storage and cloud sync

Guest records and app preferences are stored on your device. If you sign in and enable the account-backed experience, supported records are also synchronized to Vantage’s cloud database so they can be restored and used across devices. The app may retain a local cache for offline use.

Progress-photo and profile-photo image files currently remain in app-owned storage on the device and are omitted from cloud-sync payloads. A record can still indicate that a local photo exists. Photos you explicitly submit to an AI photo-reading feature are transmitted for that one request. Photos you explicitly export or share leave Vantage through the destination you choose.

Apple Watch. The Vantage watch app exchanges your active workout, today’s nutrition totals and diary, your saved meals, and what you log on the watch with your paired iPhone through Apple’s WatchConnectivity. That exchange is between your own devices; your iPhone then stores and syncs the information as described above.

Apple Health. If you allow it, the watch runs an Apple Health workout while you train: it reads your heart rate to show it on the watch, and Apple saves the workout, including the heart rate and energy it measured, to Apple Health on your devices. Vantage does not copy heart rate into its own records or cloud database. Information in Apple Health is governed by Apple’s terms and your Health settings, where you can change or revoke Vantage’s access.

Dictated meals. When you describe a meal by voice on the watch, the recording is sent to your iPhone, transcribed by OpenAI through Vantage’s server (this requires an account), and then deleted from both the watch and the iPhone. The transcript is handled like a meal description you typed.

5. How information is used

• Provide, personalize, calculate, display, save, sync, export, and troubleshoot the features you request.
• Authenticate accounts, protect the Service, enforce limits, prevent abuse, and preserve data integrity.
• Respond to support requests and communicate about account, security, legal, or material service changes.
• Generate AI responses, speech, transcription, nutrition lookup results, and plans when you choose those features.
• Measure provider usage and costs without using third-party advertising profiles.
• Comply with law, enforce agreements, establish or defend legal claims, and protect users and the Service.
• Use de-identified or aggregated information to understand and improve reliability and features, where permitted by law and not reasonably linkable back to you.

6. Service providers and other disclosures

Vantage does not sell personal information or consumer health data, does not share it for cross-context behavioral advertising, and does not use health or fitness information for advertising. Information may be disclosed to processors only as needed to provide a feature, secure the Service, or comply with law.

• Supabase processes authentication, cloud database records, sync, and server-side feature requests.
• Apple and Google may process sign-in and app-distribution information when you use their services.
• Anthropic may process text, context, and user-selected images needed for Sherpa conversations, coaching, plan generation, recipe-photo transcription, and source lookup.
• OpenAI or ElevenLabs may process audio or text needed for optional transcription and speech features, including meals you dictate on Apple Watch. Device speech services may instead be processed by the operating-system or speech-service provider under its terms.
• USDA FoodData Central, Open Food Facts, and linked food or restaurant sources may receive a food query, record identifier, barcode, or ordinary network request needed to return nutrition information.
• Professional advisers, authorities, courts, or counterparties may receive information when reasonably necessary to comply with law, protect safety or rights, investigate abuse, or complete a business transaction subject to appropriate safeguards.

7. No advertising sale or unrelated model training

Vantage does not sell personal information, rent user lists, run behavioral advertising, or provide personal health data to data brokers. Vantage does not use private User Content to train a Vantage foundation model. Third-party processors are expected to handle submitted information under their applicable business/service terms and Vantage’s instructions; their own independent services remain governed by their policies.

8. Retention

Local information remains until you delete it, clear app data, or remove the app, subject to device backups outside Vantage’s control. Cloud records generally remain while your account is active and until deleted. Deleted records may remain for a limited period in backups or security logs before being overwritten or removed. A minimal acceptance receipt—account identifier, timestamp, method, app version, and document versions and hashes—may be retained as a legal record without your profile, logs, photos, or messages for as long as reasonably necessary to establish the agreement or comply with law.

Acceptance records, security records, transaction records, and evidence needed to comply with law or resolve disputes may be retained longer where lawful. We retain identifiable information only as long as reasonably necessary for the purposes described, then delete or de-identify it.

9. Your choices and rights

• Use core tracking without an account and keep supported records local.
• Decline or revoke camera, photo, microphone, speech, notification, or Apple Health permissions in device settings or the Health app.
• Review and edit entries in the app, export selected data, and clear local data from Data & Privacy.
• Delete or request deletion of your account and associated cloud data from Account or by contacting us. Export first if you want a copy.
• Withdraw marketing consent at any time by using an unsubscribe link in a marketing message or contacting Vantage. Marketing consent is optional and separate from legal or health-data choices.
• Contact us to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal where applicable law provides that right. We may verify your identity before acting.

10. Global Privacy Control and Do Not Track

Vantage does not track people across unaffiliated apps or websites for targeted advertising. Because the Service does not sell or share personal information for cross-context behavioral advertising, an opt-out is not presently needed for those practices. Vantage will honor legally required universal opt-out signals, such as Global Privacy Control, where they apply. Other Do Not Track signals do not have a uniform legal or technical standard, so the Service does not otherwise respond differently to them.

11. Security

Vantage uses safeguards designed for the sensitivity of the information, including authenticated access controls, row-level database security, encrypted network transport, protected session-token storage, rate limits, and least-privilege provider proxies. No system is perfectly secure, and Vantage cannot guarantee that loss, misuse, or unauthorized access will never occur.

If a legally reportable breach occurs, Vantage will provide notices required by applicable law. Health-app breach obligations can apply even when an organization is not covered by HIPAA.

12. Children

The Service is for people at least 18 years old. Vantage does not knowingly collect personal information from children. If you believe a child has provided information, contact us so it can be investigated and deleted as required.

13. United States operation and international users

Vantage is operated from the United States. If you access the Service elsewhere, information may be processed in the United States and other countries where providers operate. Local law may provide additional rights or require additional transfer safeguards. Vantage will not rely on this paragraph to override non-waivable local protections.

14. Changes to this Policy

We may update this Policy to reflect changes in practices, features, providers, or law. We will provide reasonably conspicuous notice of material changes and obtain consent when required. The version and effective date identify the notice in effect; a material Terms change is handled separately under the Terms of Service.

15. Contact

Contact contact@vantage.support with privacy questions or requests.