Privacy Policy

VULTA ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the VULTA mobile application and related services.

By using VULTA, you agree to the practices described in this policy. If you do not agree, please do not use the app.

Account: email, display name, and sign-in details. You can create an account with email, Sign in with Apple, or Google.

Training and body: sessions, exercises, sets, reps, rest, weight, height, body fat, age, sex, and activity level.

Nutrition: meals, calories, macros, food items, barcode scans, and water.

Health (only if you allow it): heart rate, HRV, steps, sleep, and workouts from Apple Health or Android health.

Cycle (optional): last period start and cycle length.

Camera and photos: barcodes you scan, and photos you choose to Import.

Microphone: voice logs, only when you grant access and use Voice.

Calendar: session dates, only if you turn calendar sync on.

Payments: App Store purchase status for Pro. We do not store your full card number.

Device: device type, OS version, app version, and crash reports.

Coach: if you connect a coach with a code, the data you consented to share with them.

To run your training, nutrition targets, and recovery.

To sync health data you have allowed.

To send the notifications you turn on in Settings.

To turn Voice, Import, or Describe into a log or plan when you use those doors.

To process Pro through the App Store.

To keep the app stable (crash reports) and to understand which screens people use (product analytics).

We do not sell your personal data. We do not use it for advertising.

Your primary data sits in a local SQLite database on your device. If you are signed in, it syncs to Supabase in EU regions, encrypted in transit (TLS) and at rest.

Sign-in tokens are stored in the iOS Keychain or Android Keystore.

Health data from Apple Health is not sent to advertisers or to our product-analytics tool.

We use these companies to run VULTA. They only get what they need for that job:

Supabase — account and synced logs (EU).

Apple — Sign in with Apple, App Store purchases, and Health when you allow it.

Google — Sign in with Google, and Android health when you connect it.

RevenueCat — whether your Pro subscription is active.

Stripe — card payments where the app offers them.

Sentry — crash reports. We strip email and similar details before a report is sent.

PostHog — product analytics, hosted in the EU. We identify you by account id and email. We do not send Health values, meal macros, or lift loads.

OpenAI — only when you use Voice, Import, or Describe. That recording, photo, or text is sent so we can return the result you asked for.

A connected coach — only the data you consented to share. You can disconnect in Settings.

We update this list when we add a new company or a new kind of data. New screens that use data we already collect do not need a new policy.

VULTA can read heart rate, HRV, and steps, and write completed workouts, through Apple Health (HealthKit) or Android health — only after you agree.

That data is used to score recovery and adjust training. It is not shared with advertisers.

Revoke access any time in iOS Settings → Privacy & Security → Health → VULTA, or the Android equivalent.

The VULTA website does not use advertising cookies or tracking pixels.

The app sends product events to PostHog and crash reports to Sentry, as named above. Session tokens stay in the Keychain / Keystore.

Access and portability: Settings → Export (JSON or CSV).

Deletion: Settings → Delete account. This is permanent.

Rectification: update your profile in the app.

Object: turn off non-essential notifications in Settings.

UK GDPR / CCPA rights still apply. Email [email protected] if a Settings door is not enough.

VULTA is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use after changes constitutes acceptance.

For privacy-related questions, data requests, or complaints:

Email: [email protected] Data Protection Officer: Lewis McClellan Address: VULTA HQ, United Kingdom