Consumer Health Data Privacy Policy

Effective 3 June 2026

This Consumer Health Data Privacy Policy explains how Vitamo (“Vitamo”, “we”, “us”) collects, uses, shares, and protects “consumer health data” as defined under applicable U.S. state laws (such as Washington’s My Health My Data Act and similar laws), and the privacy rights and choices you have with respect to that data, in connection with our AI health companion and related products and services (collectively, the “Services”).

This Consumer Health Data Privacy Policy supplements, and should be read alongside, our Privacy Policy.

The short version: we use your health data only to provide the Service you asked for. We never sell it, never use it for advertising, and never use your health data to train publicly available AI models. You can disconnect any provider, or delete everything, at any time.

Categories of consumer health data we collect

We collect the following categories of consumer health data:

• Wearable and biometric measurements that you choose to connect — such as sleep duration and stages, heart rate and heart-rate variability, resting heart rate, steps and activity, workouts and exercise, energy expenditure, body measurements (e.g. weight), and readiness or recovery scores.
• Health information you provide to us, such as the questions, symptoms, habits, goals, and other health-related context you share when you message Vitamo or ask it about your body.
• Health information we derive or infer, such as the trends, baselines, and personalized insights Vitamo generates from the data above to answer your questions.

Categories of sources of consumer health data

We collect consumer health data about you from:

• You, when you message Vitamo, ask questions, or otherwise provide health-related information in connection with your use of the Services or our support.
• Third parties you explicitly authorize, such as your connected accounts with Apple Health, Oura, Whoop, Garmin, Fitbit, Polar, Suunto, Ultrahuman, and Strava. When you grant permission, the data you authorize is transmitted to us. We request read-only access, and only the scopes needed to answer your questions. We do not use this data for advertising, and we never sell or share it with advertising platforms, data brokers, or information resellers.

Our purposes for collecting and using consumer health data

We collect and use consumer health data to:

• Provide the Services to you, including to answer your questions, generate the personalized insights and trends you request, sync and keep your connected data current, create and manage your account, and provide support.
• Operate, secure, and improve the Services, including to maintain reliability, prevent and investigate fraud or abuse, and debug problems. Where we analyze or improve the Services, we use aggregated or de-identified data wherever practicable.
• Comply with law and protect rights, including to meet legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

What we never do: we never sell or rent your consumer health data; we never use it for advertising or marketing profiling; and we never use it to train publicly available or third-party AI models.

How we disclose your consumer health data

We do not sell your consumer health data. We disclose the categories described above only as follows:

• Service providers (sub-processors) who help us run the Services and are bound to use your data solely on our instructions — including Anthropic (the AI model that answers your questions), Twilio (delivers your WhatsApp/SMS messages), Stripe (subscription payments), Resend (transactional email), and Amazon Web Services (cloud hosting, where the Vitamo application and your data are stored). Your wearable data is unified by the open-source Open Wearables engine running on our own infrastructure — not a third-party black box.
• Law enforcement or government agencies, where we believe in good faith it is necessary or appropriate to comply with applicable law or to protect our legitimate interests, rights, or the safety of others.
• Business transferees, such as in connection with a merger, acquisition, financing, reorganization, or sale of assets. Should this occur, we will make reasonable efforts to notify you, and your data will remain subject to this policy or you will be notified of any change.
• Other parties at your direction or with your authorization.

To generate an answer, Vitamo sends only the relevant portion of your health data and your message to Anthropic’s API. Under its commercial API terms, Anthropic does not use this data to train its models and retains it only briefly for abuse monitoring before deletion.

Your rights regarding your consumer health data

Depending on your location and your interaction with the Services, you may request to:

• Confirm whether we collect, share, or sell your consumer health data.
• Access the consumer health data we hold about you.
• Delete your consumer health data.
• Withdraw your consent to our collection or sharing of your consumer health data — you can disconnect any provider at any time from your account or simply by asking Vitamo.

In some circumstances your choices may be limited — for example, where fulfilling a request would impair the rights of others, our ability to provide a Service you have requested, or our ability to comply with legal obligations. In those cases we will still respond to notify you of our decision. We may need additional information to verify your identity and the nature of your request. We will not discriminate against you for exercising these rights.

Submitting a request. To exercise any of the rights above, email us at hello@vitamo.health. Appeals. If we deny your request, you may appeal by emailing hello@vitamo.health; we will respond within a reasonable time and explain our decision. If your appeal is denied, you may contact the appropriate regulatory authority in your jurisdiction.

Changes to this policy

We may update this Consumer Health Data Privacy Policy from time to time. If we do, we will update the effective date above and post the revised policy on our website, and we will provide additional notice where required by law. If you use the Services after changes are posted, you acknowledge the updated policy.

Contact

Questions, requests, or concerns about your consumer health data? Email hello@vitamo.health.

Vitamo provides general wellness guidance and is not a substitute for professional medical advice. Talk to your doctor before starting a new health program.