Privacy Policy

Last updated 7 October 2026

VIDA LAB has two parts: this website, vidalab.co, and our iOS app. This policy covers both. Where they work differently, we say so. In the iOS app, your health entries are encrypted on your phone before they are uploaded. On the website, your check-ins are stored in our secure cloud database.

1. What we collect

When you have an account, we collect:

• Your email address, used to sign you in and to send account emails such as password resets.
• Your name (optional), for display in your account.
• Your daily check-ins: energy, sleep hours and quality, mood, pain level, cycle phase where you choose to log it, symptoms, and any notes you write.
• Things you choose to add in the app, such as experiments, Doctor Prep notes, meals, treatments and community posts.
• Generated insights: wellness observations created from the patterns in your own check-ins.
• Age confirmation. The app asks for your date of birth to confirm you are 16 or older. We keep only the yes or no answer, not your birth date.

Signing in with Apple or Google. If you sign in with Apple or Google, we receive your name and email address from that provider. With Apple, you can choose to hide your email, in which case we receive a private relay address. We never receive your Apple or Google password. When you delete your account, we also revoke VIDA LAB's access to your Apple sign-in.

An account is required to use the iOS app. On the website, the public pages (research articles, condition reports and Ask Vida) work without an account, and if you never create one we collect nothing about you beyond what any website needs to load its pages.

2. How we store your data

In the iOS app, your health entries (check-ins, notes, meals, experiments and Doctor Prep content) are encrypted on your phone with AES-GCM before they are uploaded, so the copy on our servers is stored encrypted. Your diary and your meditation history stay only on your device.

On the website, your check-ins are stored in our secure cloud database and linked to your account, so they are available from any browser where you sign in. Because they are stored this way, our systems can technically access them. We limit that access with strict database rules (see section 3), and we do not read your individual entries unless you ask us to for support.

Our databases are hosted by our cloud providers, Supabase and Base44. All connections use encrypted HTTPS. Your password is stored as a one-way cryptographic hash, so we never see it and cannot recover it.

3. Who can see your data

• You can see your own check-ins when signed in. No one else can.
• Other members cannot see your check-ins, notes or insights. Database rules ensure each person sees only their own data. The only things other members can see are the community posts and replies you choose to publish, which are shown without your account ID.
• Our administrators have system-level access for maintenance and support, but do not routinely read individual entries. Community posts can be reviewed by moderators when they are reported.

Public content such as research explainers, condition reports and articles is visible to everyone. Your private check-in data is never public.

4. AI features

Some answers in VIDA LAB come from AI models run by other companies. We use them only when you choose to use these features.

• Ask Vida in the iOS app answers from our own cited library first. If the library has no answer, and only after you agree to a one-time prompt, your question is sent to OpenAI to generate a reply. If you also turn on "Include my approved health summary" in Settings, a short summary of your logged patterns is sent with it. It never includes your raw entries, Apple Health samples, meals, medications, name or email.
• Vida+ tools in the iOS app (Body Weather, the Vida Differential and the Appointment Concierge) send Anthropic a summary of up to 90 days of your check-in scores and tags, plus the focus areas and conditions you chose, only after you agree to a one-time prompt. Your notes, meals, medications, Apple Health data, name and email are not included.
• On the website, messages you send to the Vida chat, and the check-in summaries used by Vida+ tools, are processed by Anthropic.

These providers process the text only to return an answer, and they do not use it to train their models. We do not store your Ask Vida questions permanently. You can turn off AI features in the app at any time in Settings. Vida's answers are educational, not medical advice.

5. Finding a doctor and requesting appointments

In the iOS app, if you choose "Use my location" in the Appointment Concierge, your device's location is used only for that search. It is sent to Apple Maps to find nearby practices and is not saved or sent to VIDA LAB. If you email a practice, the email is sent from your own email app, and VIDA LAB doesn't see it.

Appointment requests you save (the practice, your preferred date and time, and the reason and notes you type) are stored in your account so you can see them in the app and on vidalab.co. They are deleted when you delete your account.

On the website, when you request an appointment with a practice from our directory, you can choose to send the practice a health snapshot: a summary of your recent check-ins, such as averages, common symptoms and questions to raise. It is emailed to the practice only if you leave that option on and the practice has a published email address. If you connect Google Calendar, the appointment is added to your calendar through Google.

6. Meditation

Meditation sessions you complete, and the optional before-and-after stress answers, are stored only on your device. Sessions with a guide, and sleep stories, use AI-generated voices made with ElevenLabs. The audio is downloaded from VIDA LAB's storage the first time you play a session and kept on your device afterward. These downloads don't include your account or any health information. If a file can't be downloaded, your device's built-in voice reads the words instead, and nothing is sent to a server.

7. Health records, documents and your health summary

Starting with version 1.1 of the iOS app, you can bring your medical records into VIDA LAB. All of it stays on your iPhone.

• Records from hospitals, clinics and labs. If you have downloaded health records into the Apple Health app (Health Records) and you give permission, VIDA LAB reads the record types you choose: lab results, medications, conditions, allergies, immunizations, procedures, vital signs and clinical notes. Access to these records is read-only. VIDA LAB cannot add, change or delete your health records.
• Documents you add. Bloodwork, visit summaries, scans and other files you scan, photograph or import are stored only on your iPhone, protected by iOS so they cannot be read while your phone is locked, and excluded from iCloud backup.
• Reading lab values from your uploads. When you add a lab report, the text is read on your iPhone. You review every value before it is saved.
• Your health summary. On iPhones that support Apple Intelligence, the summary is written by Apple's on-device model. Your records are not sent to us, to Apple, or to any AI company. On other iPhones the summary is built from a template, also on your phone.
• Voice questions. When you use the mic in Ask Vida, speech is turned into text on your iPhone where the device supports it. On devices that do not, Apple's speech recognition service processes the audio under Apple's privacy policy. We never receive the audio.

Health records and documents are never uploaded to our servers. They are not part of your encrypted backup either: a Doctor Prep snapshot you save is backed up without them, and the "From my records" part is added on your iPhone each time you open or share the snapshot. Records and documents are never used for advertising, marketing, research or to train AI models. They are never sold or shared. If you delete your account or tap "Remove imported records from Vida" in Settings, VIDA LAB deletes its copy. The originals stay in your Health app until you remove them there.

What leaves your phone for these features, and only when you use them:

• When you tap "Explain this" on a record, the name or standard code of that lab test or medication (for example "ferritin" or an RxNorm code), with no name, account or other personal detail attached, is sent to MedlinePlus Connect (US National Library of Medicine) and openFDA (US Food and Drug Administration), which return public reference pages.
• On devices that cannot transcribe speech on the device, audio from a voice question goes to Apple's speech recognition service.
• When you tap Share on a health summary or record, it goes to the app or person you choose, never to our servers.

VIDA LAB is educational and does not diagnose. Nothing in your records or summary is reviewed by a clinician on our side.

Browse, saving to Apple Health, widgets and sounds

Browse. In the iOS app, Browse shows the Apple Health data you allow, by category: activity, body measurements, cycle tracking, hearing, heart, mental wellbeing, mobility, nutrition, respiratory, sleep, symptoms, vision, vitals and other data. VIDA LAB asks for each category the first time you open it. These readings are read on your iPhone to draw charts and are not stored by VIDA LAB, backed up or sent anywhere. Exporting your data creates files on your iPhone that only go where you choose to share them.

Saving to Apple Health. If you turn on "Save to Apple Health" in Settings (it is off by default), VIDA LAB saves what you choose to the Health app on your iPhone: your check-in mood, matching symptoms, period days, finished meditations, and readings you add in Browse. You can turn this off, or remove the data, in the Health app at any time.

Medical ID card and mental health check-ins. Your Medical ID card and your GAD-7 and PHQ-9 results are stored only on your iPhone. They are not uploaded or shared unless you share them yourself.

Widgets. Home Screen and Lock Screen widgets show a short summary the app saves on your iPhone. Health details on the Lock Screen are off unless you turn them on in Settings.

Sleep & Focus sounds. Noise and focus tones are generated on your iPhone. Recorded sounds and stories are downloaded from VIDA LAB's storage without any account or health information attached.

8. Newsletter and emails

If you subscribe to our newsletter, your email address is sent to Mailchimp, our newsletter provider, so we can send you updates. You can unsubscribe at any time using the link in any newsletter email. See Mailchimp's privacy policy for how they handle your data.

Reminders you turn on, such as check-in and appointment reminders, are sent through our email delivery service. These emails contain your reminder, not your health entries.

9. Subscriptions

If you subscribe to Vida+ on our website, your payment is processed by Stripe through its secure hosted checkout. If you subscribe in our iOS app, your payment is processed by Apple through the App Store, and we use RevenueCat to manage that subscription and confirm whether it's active. For that purpose, RevenueCat receives your purchase details, renewal dates and an anonymous customer identifier. We never see your full card number. See Stripe's privacy policy, Apple's privacy policy and RevenueCat's privacy policy for details.

10. What we don't do

• We do not sell or rent your personal information. Ever.
• We do not show you ads, and we do not share data with ad networks.
• We do not use your health information to train AI or machine-learning models.
• We do not track you across other websites or apps for advertising purposes.
• We do not share your check-in data with third parties, except as described under "AI features" and "Finding a doctor," and only when you choose to use those features. Your health records and documents stay on your iPhone, as described under "Health records, documents and your health summary."

11. Your choices and rights

• Delete your account: You can delete your account and all of its data at any time in the app, under Settings > Delete account and data, or by contacting us at rowan@vidalab.co. This permanently deletes your check-ins, insights, appointment requests and account record, and the app deletes the health records and documents stored on your iPhone.
• Turn off AI features: In the app, go to Settings to stop sending questions or summaries to our AI providers.
• Unsubscribe from the newsletter: Use the unsubscribe link in any newsletter email, or contact us.
• Cancel your subscription: You can cancel Vida+ at any time and keep access until the end of your current billing period. Subscriptions bought in the app are cancelled in your Apple Account settings.
• Access and portability: Depending on where you live, you may have the right to access or export your personal data. Contact us and we will respond within 30 days.

We will not discriminate against you for exercising these rights.

12. Retention and security

Your data is kept while your account exists and is deleted when you delete your account. Newsletter signups are kept until you unsubscribe. All connections use encrypted HTTPS, health entries from the iOS app are encrypted on your device before upload, and our database is protected by access rules that let only your own signed-in session reach your data. We take reasonable measures to protect your information, but no system is perfectly secure.

13. Age requirement

VIDA LAB is for people aged 16 and over. We do not knowingly collect personal information from anyone under 16. If you are 16 or older but under the age of majority where you live, please use VIDA LAB with a parent or guardian's involvement. If you believe someone under 16 has created an account, contact us at rowan@vidalab.co and we will delete it.

14. Changes to this policy

If we change this policy we will update the date above. If a change is material, we will notify you before it takes effect and ask for your agreement where the law requires it.

15. Contact

Questions, requests, or anything in this document that doesn't match what you're seeing: rowan@vidalab.co. Privacy requests sent there reach us directly, and we will respond within 30 days.