Privacy statement

1. Who we are

Vitely, Rijnzathe 14, 3454 PV Utrecht, Nederland. Chamber of Commerce (KvK) number: 30159738. Email: vita@vitely.app.

Vitely is responsible for processing your personal data as described in this statement.

2. Website

• Demo form: name, company, work email, number of employees, your message and the page language. We only use this to contact you about Vitely (at your request; GDPR art. 6(1)(b)). The form is processed via Netlify and forwarded to us by email. We keep your request as long as needed for contact and delete it no later than 12 months after the last contact.
• Cookies and tracking: the website uses no tracking or advertising cookies and no analytics services. We only remember your language choice in your own browser (localStorage).
• Hosting: the website is hosted by Netlify. Fonts are loaded from our own website.

3. What data the app processes

• Account data: name, email address, password (stored encrypted), role and, where applicable, company and department.
• Health data: including age, goals, injuries, workouts, nutrition, sleep, hydration, mood, breathing exercises and — if you enter them — height, weight, body measurements and progress photos. These are special categories of personal data.
• Communication: messages with your coach and your email address for the weekly summary (if enabled).
• Connections: if you connect Strava, workout data from Strava (with your consent).
• Technical: error reports on crashes and feedback you send yourself.

4. Purposes

• Providing the coaching and vitality service.
• Personal training and nutrition plans and the AI coach Vita.
• Motivation (streaks, badges, challenges); your name is only visible to colleagues if you turn that on.
• Totals for your employer (if you use Vitely through your employer) — see article 6.

5. Legal basis

• Consent (GDPR art. 6(1)(a) and art. 9(2)(a)) for health data. You can withdraw consent at any time by deleting your account.
• Performance of the contract (GDPR art. 6(1)(b)) for your account.

6. Who can see your data

• You: all your own data.
• Your coach: only if you approve the connection. The coach sees your workouts, nutrition, weight, plans and messages — not your progress photos.
• Your employer: never your personal data. Only totals for the whole team (such as the number of active employees and participation per theme), and only from 5 employees. The employer does see your name, email address and department for account management.
• Vitely: only for support or fixing errors, and only when necessary.

7. Retention

• Account data: as long as your account is active.
• If you delete your account, we erase your data immediately. Backups are overwritten within 30 days.

8. Your rights

• Access and portability: download your data via Profile → “Download my data”.
• Erasure: via Profile → “Delete account”.
• Rectification: edit your data directly in the app.
• Objection, restriction or questions: email vita@vitely.app.
• Complaint: you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

9. Security

• Encrypted connections (HTTPS/TLS).
• Passwords are stored hashed.
• Role-based access in the database: you can only read your own data; employers only totals.
• Progress photos are stored in protected storage with temporary links.

10. Processors

We work with these parties, which only process data on our behalf:

• Supabase — database, login and storage (in the EU).
• Anthropic — AI for Vita and creating plans (processes the questions and data needed for that; not for training AI models).
• Netlify — hosting of the website and app, and the demo form.
• Strato — sending email.
• Sentry — error reports on crashes.
• Strava — only if you connect Strava yourself.

11. Changes

We may update this statement. We announce important changes in the app or by email. The current version is always on this page.