Vanta OS Privacy Policy

Effective date: October 11, 2026
Company: VANTA LLP, No.87, Seeyalam 1st Street, Villivakkam, Ambattur, Tiruvallur, Tamil Nadu 600049, India (“Vanta”, “we”, “us”)
Contact: support@vanta-os.com

What Vanta OS is

Vanta OS is a personal health and wellness app. It builds a picture of your body from the data you choose to share, including Apple Health metrics, lab reports, meals, workouts and conversations, and uses it to suggest a daily plan. Vanta OS is a wellness product, not a medical device. It does not diagnose, treat or prevent any disease. Always consult a qualified physician before acting on health information.

Data we collect

Account. Your name, email address, date of birth and sex at birth, and the sign-in identifier from Sign in with Apple or Google. With Sign in with Apple you can choose to hide your email.

Health and fitness data you choose to share.

• Apple Health data you grant read access to: sleep, heart rate, heart rate variability, resting heart rate, respiratory rate, blood oxygen, VO2 max, steps, active energy, exercise time, body weight, body fat, lean body mass, and workouts.
• Lab reports you upload as a PDF, and the biomarker values we read from them.
• Meals you log, including meal photos.
• Workouts, lifts and supplements you log.
• Height, weight, goals, health conditions, medications and other answers you give during setup.

Conversations. Messages and photos you send to the Vanta assistant, and voice answers you choose to record during setup. Recordings are transcribed to text and the audio is not kept after transcription.

Lab test bookings. If you book a blood test through the app, we collect the details needed to carry it out: your name, phone number, date of birth, sex, home address and postal code, and your chosen collection time. Payment for lab tests is processed by Razorpay. We never see your card details.

Push notifications. If you turn on notifications, we store a device token so we can deliver them. You can turn this off at any time.

Approximate location. If you allow it, your approximate location (rounded to about 1 km) so we can time your day, such as light, sleep and training windows, to where you are. We never use precise location and never track your location in the background.

Subscription status. Subscriptions are billed by Apple. We receive your subscription status through our payments provider, RevenueCat. We never see your card details.

Device information. Basic technical information such as device model, OS version and app version, as needed to run the service. We do not use third-party analytics, advertising or tracking SDKs.

How we use your data

• To build your health profile, calculate your scores (including your Marrow score) and create your daily plan.
• To answer your questions in the assistant, estimate nutrition from meal photos, and read biomarker values from lab reports you upload.
• To send reminders you have turned on.
• To run, secure and improve the service.

AI processing

Some features use artificial intelligence provided by OpenAI, acting as our service provider. Before any of your health data is sent for AI processing, the app asks for your explicit consent and lists exactly what is shared: chat messages, voice answers, Apple Health metrics, lab marker values, setup answers, meal photos and basic profile details. We remove your name and contact details before anything is sent. OpenAI is contractually prohibited from training on your data. If you decline or later withdraw consent, the features that need it will not run.

What we never do

• We never sell your personal data.
• We never share your health data with advertisers or data brokers, or use it for marketing.
• Apple Health data is used only to provide the app’s health features. It is never used for advertising or data mining, and is never disclosed to third parties except service providers that help run the app. We never write to Apple Health and never store Apple Health data in iCloud.

Who we share data with

Only with service providers under contract, and only what each one needs to do its job:

• Cloud hosting and storage (Vercel and our database provider)
• AI processing (OpenAI)
• Subscription management (RevenueCat) and payments (Apple)
• Lab testing (Thyrocare, which collects your sample at home and runs the tests; it receives only the booking details listed above)
• Lab test payments (Razorpay)
• Push notification delivery (Apple, Expo)
• Sign in (Apple, Google)

Each provider is contractually required to protect your data. We disclose data to authorities only where the law requires it.

Storage and security

Data is encrypted in transit and at rest. Your sign-in tokens are stored in your device’s secure Keychain. Uploaded lab reports and photos are stored with our cloud storage provider at unguessable addresses. Our services are hosted on cloud infrastructure in the United States and India.

Your choices and rights

• Delete your account: in the app, go to Settings, then Delete account. This permanently deletes your account and the data linked to it, including uploaded reports and photos. Deletion completes within 30 days.
• Delete a lab report: open the report in the app and delete it at any time.
• Stop Apple Health access: in iOS Settings, go to Health, then Data Access and Devices, then Vanta OS.
• Stop location access: in iOS Settings, go to Privacy and Security, then Location Services, then Vanta OS.
• Stop notifications: in the app, go to Settings, then Notifications, or in iOS Settings under Notifications, then Vanta OS.
• Get a copy of your data or correct it: email support@vanta-os.com.
• Depending on where you live (for example the EEA, the UK, India or California), you may have further rights, such as restriction or portability. Email us to use them.

Subscriptions

Vanta Membership is an auto-renewing subscription, monthly or annual, billed through your Apple ID. You can manage or cancel it in iOS Settings, under your name, then Subscriptions. Prices are shown in the app before you buy.

Children

Vanta OS is not for anyone under 16, and we do not knowingly collect data from children.

Changes to this policy

If we make material changes, we will tell you in the app and update the effective date above.

Contact

Questions about privacy: support@vanta-os.com