Privacy Policy

Last updated 18 September 2026

VIDA LAB is a website, not a downloaded app. When you create an account, your check-in data is stored in our secure database — not encrypted on your phone. This policy explains exactly what that means.

1. What we collect

If you create an account, we collect:

• Your email address — used to sign you in and send password-reset emails.
• Your name (optional) — for display in your account.
• Your daily check-ins — energy level, sleep hours and quality, mood, pain level, cycle phase, symptoms, and any notes you write.
• Generated insights — wellness observations the app creates from your check-in patterns.

If you never create an account, we collect nothing about you. The public site — research articles, condition reports, and Ask Vida — works without any account at all.

If you sign up for our newsletter, we collect your email address and send it to our email provider (Mailchimp) to manage your subscription.

2. How we store your data

Your check-in data is stored in our secure cloud database, linked to your account. All connections to the site use encrypted HTTPS. Your password is stored as a one-way cryptographic hash — we never see your actual password and cannot recover it; a reset email is the only route back in.

Unlike a phone app, your data lives on our servers, not on your device. This means your check-in history is available from any browser where you sign in, but it also means we technically have access to it in our database. We limit that access through strict database rules (see section 3) and we do not read your individual entries unless you ask us to for support.

3. Who can see your data

• You can see your own check-ins when signed in. No one else can.
• Other users cannot see your check-ins, your notes, or your insights — the database rules ensure each person only sees their own data.
• Our administrators have system-level access for maintenance and support, but do not routinely read individual entries.

Public content — research explainers, condition reports, and articles — is visible to everyone. Your private check-in data is never public.

4. Ask Vida

Ask Vida is an AI assistant that answers your health and research questions using a library of educational explainers and published research. When you ask Vida a question, your message is sent to our AI provider to generate a response. We do not store your questions permanently, and we do not use them to train AI models. Vida's answers are educational, not medical advice.

5. Newsletter

If you subscribe to our newsletter, your email address is sent to Mailchimp, our email provider, so we can send you updates. You can unsubscribe at any time using the link in any newsletter email. See Mailchimp's privacy policy for how they handle your data.

6. Subscriptions

If you subscribe to Vida+ on our website, your payment is processed by Stripe through its secure hosted checkout. If you subscribe in our iOS app, your payment is processed by Apple through the App Store, and we use RevenueCat to manage that subscription and confirm whether it's active. For that purpose, RevenueCat receives your purchase details, renewal dates, and an anonymous customer identifier. We never see your full card number. See Stripe's privacy policy, Apple's privacy policy, and RevenueCat's privacy policy for details.

7. What we don't do

• We do not sell or rent your personal information. Ever.
• We do not show you ads, and we do not share data with ad networks.
• We do not use your health information to train AI or machine-learning models.
• We do not track you across other websites or apps for advertising purposes.
• We do not share your check-in data with third parties.

8. Your choices and rights

• Delete your account: You can delete your account at any time by contacting us. This permanently deletes your check-ins, insights, and account record.
• Unsubscribe from the newsletter: Use the unsubscribe link in any newsletter email, or contact us.
• Cancel your subscription: You can cancel Vida+ at any time; you keep access until the end of your current billing period.
• Access and portability: Depending on where you live, you may have the right to access or export your personal data. Contact us and we will respond within 30 days.

We will not discriminate against you for exercising these rights.

9. Retention and security

Your check-in data is kept while your account exists and is deleted when you delete your account. Newsletter signups are kept until you unsubscribe. All connections use encrypted HTTPS, and our database is protected by access rules that ensure only your own signed-in session can reach your data. We take reasonable measures to protect your information, but no system is perfectly secure.

10. Age requirement

VIDA LAB is for people aged 13 and over. We do not knowingly collect personal information from anyone under 13. If you are 13 or older but under the age of majority in your state, please use VIDA LAB with a parent or guardian's involvement. If you believe someone under 13 has created an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy we will update the date above. If a change is material, we will notify you before it takes effect and ask for your agreement where the law requires it.

12. Contact

Questions, requests, or anything in this document that doesn't match what you're seeing: rowan@vidalab.co. Privacy requests sent there reach us directly, and we will respond within 30 days.