Privacy Policy

VULTA ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the VULTA mobile application and related services.

By using VULTA, you agree to the practices described in this policy. If you do not agree, please do not use the app.

Account Data: email, display name, and authentication credentials (managed by Supabase Auth).

Health & Fitness Data: training sessions, exercises performed, sets, reps, weights, rest periods, heart rate, heart rate variability (HRV), step count, and sleep data (when integrated with Apple HealthKit or Google Fit).

Nutrition Data: meals logged, calories, macronutrients, food items, barcode scans, and water intake.

Body Metrics: weight, height, body fat percentage, age, gender, and activity level.

Cycle Data (optional): menstrual cycle tracking information including last period start date and cycle length.

Device Data: device type, OS version, app version, and crash logs (anonymised).

To provide personalised training programmes, nutrition targets, and readiness scores.

To calculate metabolic state, fatigue levels, and recovery recommendations.

To sync with Apple HealthKit / Google Fit (only with your explicit permission).

To generate anonymised aggregate insights for research (never identifiable).

To send you notifications about training reminders and achievements (configurable).

Local Storage: Your primary data is stored in a local SQLite database on your device. For authenticated users, data is synced to Supabase (hosted in EU regions) using TLS encryption in transit and AES-256 at rest.

We do not sell your personal data to third parties.

Health data is never shared with advertisers or analytics providers.

Right to Access: Export your complete data at any time via Settings → Export My Data.

Right to Deletion: Delete your account and all associated data via Settings → Delete Account. Deletion is permanent and cannot be undone.

Right to Rectification: Update your profile information at any time in Settings.

Right to Portability: Download your data in JSON or CSV format.

Right to Object: Opt out of non-essential notifications in Settings.

VULTA integrates with Apple HealthKit to read heart rate, HRV, and step count, and to write completed workouts.

HealthKit data is used solely to calculate your daily readiness score and adjust training recommendations.

We do not share HealthKit data with third parties.

You can revoke HealthKit permissions at any time in iOS Settings → Privacy & Security → Health → VULTA.

VULTA does not use cookies or third-party tracking pixels.

We collect anonymised crash reports and app performance metrics solely for stability improvements.

Supabase authentication uses session tokens stored securely via the iOS Keychain / Android Keystore.

VULTA is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use after changes constitutes acceptance.

For privacy-related questions, data requests, or complaints:

Email: [email protected] Data Protection Officer: Lewis McClellan Address: VULTA HQ, United Kingdom