VitalCast Privacy Policy

Who we are

VitalCast is made by JC Mobile App Studio LLC, a one-person studio based in Pennsylvania, USA. We are the company responsible for the app. In this policy, "we" and "us" mean JC Mobile App Studio LLC. You can reach us at contact@jcmobileappstudio.com.

Health data is the most sensitive kind of data there is, so VitalCast is built to keep it on your iPhone. This policy explains exactly what the app reads, where it is stored, and the one optional case where some of it leaves your device.

Short version

• No account, no sign-in, no analytics, no ads, no trackers, no third-party SDKs.
• We do not run a server for VitalCast. We never receive your health data.
• Your Apple Health data, clinical records, medications, symptoms, vitals, lab results, journal tags, and briefings are stored on your iPhone.
• Your briefing is worded by Apple's on-device model on your iPhone by default. If you turn on the optional Deeper analysis switch (off by default), a computed summary of your data is sent to Apple's Private Cloud Compute to be worded, and is not kept there. Details below.
• Nothing is synced to iCloud. There is no cloud copy of your data.
• We never sell your data or use it for advertising.

What we receive vs. what third parties receive

What reaches us: nothing. VitalCast has no server of ours, no account system, no analytics, and no crash reporting service. If you email us, we receive your email and whatever you choose to include in it.

What Apple handles, under Apple's own policies:

• Apple Health (HealthKit) hands VitalCast the data you allow, on your device.
• Apple Intelligence on device. The briefing and "Ask your data" answers are worded by Apple's Foundation Models running on your iPhone. This stays on the device.
• Private Cloud Compute, only if you turn on Deeper analysis. See the next section.
• App Store processes VitalCast Pro purchases. Apple handles the payment; we never see your card or Apple ID. The app checks your subscription status with Apple's StoreKit.
• Siri and Shortcuts, if you use VitalCast's Siri phrases, are processed by Apple as described in Apple's Siri privacy terms.

Apple's privacy policy: apple.com/legal/privacy. No other third party receives any data from VitalCast.

On-device intelligence and Deeper analysis

The numbers in your briefing (baselines, scores, trends, signals) are computed by VitalCast's own code on your iPhone, not by a model. A language model only rewords those results in the tone you pick. Every sentence it writes is checked before display, and any sentence that changes a number or adds a clinical term is thrown away. If your iPhone cannot run Apple's model, or you turn the model off, VitalCast uses its own fixed wording.

Default: on device. With Deeper analysis off, the model runs on your iPhone and nothing is sent anywhere.

Optional: Deeper analysis (Private Cloud Compute). In VitalCast Pro, on a device where Apple makes it available (iOS 27 and later with Apple Intelligence), Settings, Intelligence has a switch called "Deeper analysis (Private Cloud Compute)". It is off by default and only you can turn it on. When it is on:

• When a briefing is worded, or when you ask a question in "Ask your data" (including through Siri), VitalCast sends Apple's Private Cloud Compute your question and a computed fact sheet: short text lines such as your recent averages, baselines, and changes, medications you logged, journal tags and what they seem to affect, and, if you connected them, lines from your clinical records and lab panels (for example a lab name, value, unit, and date).
• Raw Apple Health samples are not sent, only the computed summary lines.
• Apple states that Private Cloud Compute uses your data only to answer the request, does not store it, and does not make it accessible to Apple or to us. We never receive it. Learn more at Apple's Private Cloud Compute overview.
• Every AI card shows where it was worded: "Worded on your iPhone" or "Worded on Apple Private Cloud Compute".
• Turn the switch off at any time and everything goes back to on-device only.

VitalCast does not use OpenAI, Anthropic, Google, or any other outside AI provider, and does not run a server of its own for AI.

Apple Health (HealthKit)

With your permission, VitalCast reads Apple Health data to learn your personal baselines, compute your scores, and write your briefing. Depending on what you allow, this includes sleep, steps, heart rate (read only inside your sleep window), resting and walking heart rate, heart rate variability, heart rate recovery, respiratory rate, blood oxygen, sleeping wrist temperature, weight, active energy, exercise minutes, cardio fitness (VO2 max), walking and stair metrics, sound exposure, time in daylight, mindful minutes, workouts and workout effort, State of Mind (mood), menopausal state, irregular rhythm, high and low heart rate notifications, AFib history, and sleeping breathing disturbances. It also reads your date of birth and biological sex, only to pick the right age band for cardio fitness reference ranges. On iOS 26 and later you can import medications from Apple Health; Apple asks you to pick each medication individually.

Access is granular. You can grant only some types and the app still works. With your permission, VitalCast writes back to Apple Health only the blood glucose, blood pressure, body temperature readings, and moods you log in VitalCast. It does not write medications or symptoms to Apple Health. You can change any of this in the Health app under Sharing, Apps, VitalCast.

Clinical health records

If you have connected health care providers in Apple's Health app, VitalCast can, with a separate permission on its own sheet, read the clinical records those providers share with Health: lab results, vital signs, medications, allergies, conditions, immunizations, procedures, and insurance coverage. VitalCast does not request clinical notes. Access is read only; VitalCast cannot change anything in your provider's record.

Records are shown in their own words, on a timeline and in charts. VitalCast does not interpret, score, or diagnose them. A reference range is shown only when your report printed one. The appointment prep sheet is assembled by fixed code, not by a model. Records are stored only on your iPhone. They are not sent anywhere, with one exception: if you turn on Deeper analysis, short factual lines drawn from your records can be included in the fact sheet sent to Private Cloud Compute, as described above.

What you enter in VitalCast

Everything you log is stored on your iPhone: medications and doses, symptoms, vitals, moods, journal tags (for example caffeine, alcohol, travel, or a late meal) and notes, lab panels, experiments, and, if you use those modules, cycle start dates, a pregnancy due date, a New Parent step goal, and a skin tone setting for the Vitamin D estimate.

If you scan a printed lab report, you pick a single photo or PDF. The text is read on your iPhone with Apple's Vision framework, you confirm the values, and only the values you confirm are saved. The image itself is not kept. VitalCast uses Apple's photo picker, so it does not get access to the rest of your photo library.

The cited studies and medication notes shown in the app come from a library built into the app. VitalCast does not look anything up online. If you tap a study link, it opens in your browser, and the journal's website handles that visit.

Where your data lives

• On your iPhone, in VitalCast's database inside the app's private storage. There is no account and no iCloud sync.
• Backups. Starting with version 1.2.1, the database is marked to be excluded from iCloud and computer backups. In version 1.2.0 a bug meant this exclusion was not applied, so the database could be included in your own encrypted device backup. Updating to 1.2.1 or later applies the exclusion going forward.
• Apple Watch, widgets, and Live Activities. Your scores and today's summary are passed from your iPhone to your paired Apple Watch using Apple's WatchConnectivity, and to VitalCast's widgets through storage shared only between VitalCast's own app and widgets. Widgets, Live Activities, and notifications can show health information on your Lock Screen and watch face, so anyone who can see your screen can see them. You can turn off Live Activities and each kind of notification in VitalCast's Settings, and remove widgets at any time.
• Files you export. If you export a JSON or CSV file, a doctor PDF, or an appointment prep sheet, the file goes wherever you send it. After that, it is in your hands and the recipient's.

Consumer health data

This section describes the consumer health data VitalCast processes, written with laws like Washington's My Health My Data Act and Nevada's consumer health data law in mind.

• Categories: Apple Health measurements and activity (listed above); sleep; heart and breathing data, including heart rhythm notifications; mood and mindfulness; menopausal state, cycle dates, and pregnancy due date; medications and doses; symptoms; vitals such as blood pressure, glucose, and temperature; lab results; clinical records from your providers (conditions, allergies, immunizations, procedures, insurance coverage); age and biological sex; journal tags and notes; and the baselines, scores, signals, and briefings VitalCast derives from these.
• Sources: you (what you log or scan), Apple Health (with your permission), and your health care providers, through Apple Health, only if you grant clinical records access.
• Purpose: to show you your own data, learn your baselines, and write your briefings and answers. Nothing else. No advertising, no profiling for anyone else, no research use.
• Processing: on your iPhone. The only exception is the optional Deeper analysis switch, which sends a computed fact sheet to Apple's Private Cloud Compute for wording and is not retained there.
• Who receives it: we do not receive or collect it. We do not share it with anyone. Apple processes it only as described above, and only at your direction. You can also share exports yourself.
• Sale and advertising: we never sell consumer health data and never use it for advertising.
• Location: VitalCast does not collect your location and does not use geofencing.
• Your controls: review and export everything in Settings, Privacy, Your data. Delete any category, or everything, from the same screen. Revoke Apple Health or clinical records access in the Health app under Sharing, Apps, VitalCast. Deleting the app removes its database from your iPhone. You can also email us with any request, as described under Your privacy rights.

Permissions VitalCast may request

• Apple Health (read), to learn your baselines and write your briefing.
• Clinical Health Records (read), a separate permission, only to show your provider records.
• Apple Health (write), only for the blood glucose, blood pressure, temperature, and moods you log.
• Medications (read), per medication, only when you choose to import them.
• Notifications, for medication reminders, the briefing-ready alert, signal heads-ups, and the caffeine cutoff. Each has its own switch.
• Face ID / Touch ID, only to unlock the app when you turn on App Lock. Your biometric data never reaches the app.

Data retention

Everything VitalCast stores stays on your iPhone until you delete it in the app or delete the app. We hold no copy, so there is nothing on our side to retain. Requests sent to Private Cloud Compute, if you use Deeper analysis, are not stored after the answer is returned, according to Apple. If you email us, your message stays in our email inbox until we delete it, and we will delete it sooner if you ask.

Sale, sharing, and targeted advertising

We do not sell personal data. We do not share it for targeted advertising. VitalCast has no ads and no advertising SDK, does not use your advertising identifier, and does not track you across other apps or websites.

Subscriptions

VitalCast Pro is a subscription billed through Apple's App Store. Apple handles the payment. The app reads your subscription status from StoreKit and keeps it on your device. Apple never receives your health data as part of a purchase.

Your privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Indiana, Kentucky, Rhode Island and other US states, or the EU/UK), you may have the right to access, correct, delete, or get a copy of personal data, and to opt out of targeted advertising, sale, or profiling. Many of these laws may not apply to a studio our size, but we honor these requests from everyone.

Because your VitalCast data is on your device, the fastest way to see, export, or delete it is in the app: Settings, Privacy, Your data. For anything else, email contact@jcmobileappstudio.com. We respond within 45 days, and we will never treat you differently for asking. If we decline your request, you can appeal by replying to our answer with "Appeal", and we will respond within 45 days (60 days at most, where the law allows). If your appeal is denied, you may contact your state attorney general.

Not medical advice

VitalCast describes and correlates your own data and gives general, research-backed context. It does not diagnose, name conditions, or recommend treatment, and it is not a medical device. Talk to a clinician about anything that concerns you.

Children

VitalCast is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

International users

We do not hold any VitalCast data. If you email us, your message is handled in the United States.

Security

Your data is protected by Apple's platform security: app sandboxing, your device passcode, and data protection encryption. VitalCast adds an optional Face ID or Touch ID app lock. Use a strong passcode, and keep in mind that anyone who can unlock your iPhone can open the app unless App Lock is on.

Changes

When this policy changes, we update the "Last updated" line above and post the new version at this URL. Material changes are also noted in the app's release notes.

Contact

JC Mobile App Studio LLC, Pennsylvania, USA. contact@jcmobileappstudio.com