VitalCast Privacy Policy

VitalCast is designed so your health data stays yours. This policy explains, plainly, what VitalCast does and does not collect. Health data is the most sensitive category there is, and "it never leaves your iPhone" is the entire point of the app.

Short version

• We do not run analytics. We have no idea how you use the app.
• There is no account and no server of ours. Nothing is uploaded to write your briefing.
• Your Apple Health metrics, medications, symptoms, vitals, and briefings live on your device.
• Optional sync runs only through your own private iCloud, which we cannot read.
• We never sell or share your data. We do not have it to sell.
• The App Store privacy label for VitalCast reflects Data Not Collected.

What VitalCast does not collect

• We do not collect your name, email, phone number, or contacts.
• We do not collect your Apple Health data, medications, symptoms, vitals, or briefings.
• We do not use third-party analytics, advertising SDKs, or trackers.
• We do not have access to read your iCloud data.

Apple Health (HealthKit)

With your permission, VitalCast reads a small set of Apple Health metrics, such as sleep, steps, resting heart rate, heart rate variability, weight, and cardio fitness, only to learn your personal baselines and write your briefing on your device. Access is granular: you can grant only some types, and the app still works. The medications and vitals you log in VitalCast can be written back to Apple Health so your record stays portable. Apple Health data is handled by iOS on your device; it is never transmitted to us. We have no servers.

Where your data lives

Everything you create in VitalCast, and the cached Apple Health values used for your briefing, is stored locally on your iPhone. There is no account to create. Deleting VitalCast from your device removes the local database. You can also export everything to a JSON file, or permanently delete any category or all of your data, from Settings, Privacy, Your data, inside the app.

Optional iCloud sync

If you turn on sync, VitalCast syncs through your own private iCloud (CloudKit private database) so your data is available across your devices. It is stored in your own iCloud account, governed by Apple's privacy terms. We cannot read it.

On-device intelligence

The numbers in your briefing are computed by deterministic code on your device. The wording is phrased by Apple's on-device Foundation Models, on your iPhone. Prompts and outputs never reach a cloud model, and we never see them. If you ever opt in to a cloud fallback on hardware that cannot run the on-device model, only a reduced, structured set of signals, never your raw health data, is sent solely to choose wording, and this is off by default and clearly disclosed at the moment you would enable it.

Subscriptions

VitalCast Pro is a subscription billed through Apple's App Store. Apple handles the payment; we never see your card or Apple ID. Subscription status is stored on your device. The payment provider sees purchase state only, never your health data.

Permissions VitalCast may request

• Apple Health (read), to learn your baselines and write your briefing on device.
• Apple Health (write), only to save the medications and vitals you log back to Health.
• Notifications, only for medication reminders and a "your briefing is ready" alert.
• Face ID / Touch ID, only to unlock the app when you turn on App Lock.

Not medical advice

VitalCast describes and correlates your own data and provides general, research-backed context. It does not diagnose, name conditions, or recommend treatment, and it is not a medical device. Talk to a clinician about anything that concerns you.

Children

VitalCast is not directed to children under 13, and we do not knowingly collect any information from children.

Your rights

Because we do not collect personal data, there is nothing for us to access, correct, or delete on our servers. To export or delete your data, use the controls inside the app (Settings, Privacy, Your data). If you are a California resident (CCPA / CPRA), a resident of the EU/UK (GDPR), or covered by a similar law, the same applies: we have no personal data of yours to provide or delete because we do not collect it.

Data security

Because VitalCast data lives on your device, security depends primarily on Apple's platform protections, your device passcode, Face ID or Touch ID, and your iCloud account security. VitalCast adds an optional Face ID app lock. We recommend you enable two-factor authentication on your Apple ID and use a strong device passcode.

Contact

Questions or requests: contact@jcmobileappstudio.com

Changes

If this policy ever changes, we will update the "Last updated" line above and post a new version at this URL.