Privacy

What leaves your phone, when, and who holds it.

The short version: nothing you log leaves the phone until you turn on cloud backup. The full policy is at vitasync.io/privacy. This page shows the mechanism.

One choice gates every upload

Every path that could upload asks the same question first: did you allow cloud processing on this phone? That answer is recorded with the version of the notice you read. It is kept on the phone only. A backup never contains it, so restoring an account cannot turn uploading on by itself.

Analytics see names, not numbers

If you opt in to product analytics, an event says “logged sleep”. It never says “slept 5 h 30”. The same rule applies to crash reports.

Who holds what

Who	What	When
Supabase	Your account: sign-in and the private copy of entries and settings	Only once cloud backup is on
Resend	Sends the six-digit sign-in code	When you add your email or restore
Open Food Facts	Receives your search term	When you search the food database
Sentry	Crash reports, with your data stripped out	When the app crashes
PostHog	Event names and timings	Only if you opt in

The authoritative list, with locations, is at vitasync.io/sub-processors.

Deleting

Delete account and data removes the account and every row in it, then wipes the phone. See Export and delete.