Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how VH Technologies, Inc. (“VitalHacking”, “we”, “us”) collects, uses, shares and protects personal information when you use vitalhacking.com, the VitalHacking mobile app and related services (the “Service”). Section 6 is our Consumer Health Data Privacy Policy.

1. Who we are

VH Technologies, Inc. is a Delaware corporation that operates VitalHacking.
U.S. office: 7345 W Sand Lake Rd, Ste 210, Office 5215, Orlando, FL 32819, United States.
Privacy contact: privacy@vitalhacking.com

VitalHacking is a wellness service. It does not provide medical care, diagnosis or treatment. We treat your health information as sensitive and protect it as described below.

2. Information we collect

Information you give us

  • Account and contact: name, email, password (stored hashed by our authentication provider), phone number if provided, shipping address.
  • Biological age quiz and Vital Triage assessment: age, sex, height, weight, goals, sleep, stress, diet, activity, training history, injuries, current medications, existing conditions, family history and, only if you choose to share it, ethnic background.
  • Check-ins and progress: energy, stress, mood, weight and notes you enter in the app.
  • Photos: body and face photos you upload for assessment and progress tracking.
  • Messages: what you write to Vital Companion (our in-app assistant) and to customer support.

Information from third parties, with your permission

  • Wearables: if you connect Apple Health, Google Health Connect, Whoop, Oura, Fitbit or another supported device, we receive only the data types you authorize, such as sleep, steps, activity, heart rate, resting heart rate and heart rate variability.
  • Laboratory results: on the Precision plan, the partner laboratory that processes your at-home sample sends us your biomarker results.
  • Payments: our payment processor (Stripe) confirms payment status. We never receive or store your full card number.

Information collected automatically

  • Device and browser type, IP address, approximate location derived from IP, pages viewed and app usage events.
  • Cookies and similar technologies, described in our Cookie Policy.

3. How we use information

  • To estimate your Vital Age and build your personalized protocol.
  • To send your protocol to an independent licensed physician for review before it reaches you.
  • To run the features you use: wearable sync, check-ins, progress tracking, Vital Companion and the supplement store.
  • To process payments, ship orders and manage your subscription.
  • To answer support requests and send service messages (receipts, renewal notices, security alerts).
  • To send marketing emails if you opted in. Every marketing email has an unsubscribe link.
  • To keep the Service secure, prevent fraud and meet legal obligations.
  • To improve the Service using de-identified or aggregated data that cannot reasonably be linked back to you.

We do not sell your personal information. We do not use your health data for targeted advertising and we do not share it with advertisers.

4. Artificial intelligence

Your protocol and Vital Companion answers are generated with AI models provided by Google (Gemini), called from our own servers under business terms that do not allow Google to use your content to train its general models. Every protocol is reviewed by a licensed physician before it is released to you. Vital Companion answers in real time and is not reviewed before you see it; it is not a substitute for a healthcare professional.

5. Who we share information with

  • Independent licensed physicians who review protocols. They see what is needed for review (for example age, BMI, conditions, medications, biomarkers and your proposed protocol). Reviewers may be located outside the United States and Canada, including in Latin America.
  • Laboratory partners (CLIA-certified) that process Precision biomarker kits.
  • Service providers: Google Cloud and Firebase (hosting, sign-in, database, AI), Stripe (payments), our website host and WooCommerce (orders), email delivery providers, shipping carriers and fulfillment partners.
  • Legal and safety: when required by law or court order, or to protect someone’s life or safety.
  • Business transfers: if VH Technologies is merged, acquired or sells assets, information may transfer to the successor, which remains bound by this policy.

Service providers may use your information only to provide services to us.

6. Consumer Health Data Privacy Policy

This section applies to “consumer health data” under laws such as the Washington My Health My Data Act, Nevada SB 370 and Connecticut’s consumer health data law.

  • Categories collected: the health information listed in Section 2 (assessment answers, conditions, medications, biomarkers, wearable data, body and face photos, check-ins and weight).
  • Sources: you, the wearables you connect and our laboratory partners.
  • Purposes: only those listed in Section 3.
  • Sharing: only with the recipients listed in Section 5. We do not sell consumer health data.
  • Consent: we collect and share consumer health data with your consent or where necessary to provide the Service you asked for. You can withdraw consent at any time by disconnecting a wearable, deleting data or contacting us.
  • Your rights: confirm whether we hold your consumer health data, access it, get a list of the third parties it was shared with, withdraw consent and request deletion. See Section 9.

7. Where information is stored

Our main systems are hosted in the United States. Some service providers and physician reviewers are in other countries. When information leaves your country we use contractual and technical safeguards to keep it protected. Information stored outside Canada may be accessible to foreign authorities under local law.

8. How long we keep it

  • Account, assessment, protocol and health data: while your account is active. After you delete your account, we delete or de-identify it within 30 days, except as below.
  • Order, payment and tax records: up to 7 years, as required by law.
  • Backups: overwritten on a rolling basis, usually within 90 days.

9. Your rights and choices

Depending on where you live (for example California or other U.S. states, or Canada under PIPEDA), you can:

  • Access the personal information we hold about you and get a copy.
  • Correct inaccurate information.
  • Delete your account and personal information.
  • Withdraw consent, disconnect wearables and opt out of marketing emails.
  • Appeal our decision on your request by replying to our response.

To make a request, use the Data Deletion and Access Request page or email privacy@vitalhacking.com. We verify your identity through the email on your account and respond within 30 days (45 days where state law allows). We will not treat you differently for using these rights.

10. Security

We encrypt data in transit (TLS) and at rest with our cloud providers, limit access to people who need it and require authentication for every account. No system is completely secure. If a breach affects your information, we will notify you as required by law.

11. Age requirement

The Service is only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

12. Changes

If we make material changes, we will update the date above and notify you by email or in the app before they take effect.

13. Contact

VH Technologies, Inc.
7345 W Sand Lake Rd, Ste 210, Office 5215, Orlando, FL 32819, United States
privacy@vitalhacking.com