1. Introduction
myVital Report ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our website (myvitalreport.com) or purchase a wellness education report.
We treat your health-related information with the highest level of care and confidentiality. We do not sell, rent, or trade your personal or health data — ever.
2. What We Collect
Information You Provide
| Data Type | Examples | Purpose |
|---|
| Contact information | Name, email address | Report delivery, support |
| Demographic information | Age, biological sex, country | Report personalization |
| Lifestyle information | Sleep, stress, diet, activity level | Report personalization |
| Uploaded health documents | Blood test results (PDF or image) | Report generation only |
| Payment information | Billing details | Processed entirely by Paddle — we never see or store card data |
Information Collected Automatically
- IP address and approximate location (country/city)
- Browser type and device type
- Pages visited and time spent (via analytics)
- Referral source (how you found our site)
3. How We Use Your Data
- Report generation: Your submitted information is used to generate your personalized wellness education report
- Report delivery: Your email is used to send your report and any related communications
- Customer support: To respond to your questions or resolve issues
- Service improvement: Anonymized, aggregated data helps us improve report quality
- Legal compliance: As required by applicable law
We do not use your data for advertising, profiling for third parties, or any purpose beyond delivering your report and supporting you as a customer.
4. Health Data — Special Handling
We treat all health-related data you submit — including blood test results, symptoms, and lifestyle information — with the strictest confidentiality. This data is used only to generate your report and is deleted from our processing systems once your report is delivered.
- Uploaded blood test documents are processed by our AI system and deleted after report generation — we do not retain images or PDFs of your lab results
- Health data is processed on secure servers and is never shared with third parties for marketing or commercial purposes
- We do not build health profiles on users or aggregate individual health data for sale
- Our staff access to health data is strictly limited to technical support and quality assurance purposes
5. Who We Share Data With
We share minimal data only with trusted service providers necessary to operate our business:
| Provider | Purpose | Data Shared |
|---|
| Paddle | Payment processing & tax compliance (Merchant of Record) | Name, email, billing details |
| Railway / hosting provider | Server infrastructure for report generation | Submitted report data (processed, not retained) |
| Anthropic (Claude API) | AI analysis for report content | Anonymized wellness data per Anthropic's data use policies |
| Resend / email provider | Report delivery via email | Name, email, report PDF |
We do not sell, rent, or otherwise disclose your data to any other third parties. All service providers are bound by data processing agreements.
6. Data Retention
- Uploaded health documents (blood tests): Deleted immediately after report generation
- Submitted wellness data (quiz responses): Retained for 90 days to support customer service, then deleted
- Email address: Retained as long as you are a customer or until you request deletion
- Purchase records: Retained for 7 years as required by applicable financial and tax regulations
You may request deletion of your data at any time by emailing support@myvitalreport.com.
7. Security
We implement industry-standard security measures to protect your data:
- All data transmitted to and from our website is encrypted using TLS/HTTPS
- Payment data is handled entirely by Paddle and never stored on our servers
- Access to personal data is restricted to authorized personnel only
- We conduct periodic security reviews of our infrastructure
While we take reasonable steps to protect your data, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a portable format
- Objection: Object to processing of your data in certain circumstances
To exercise any of these rights, contact us at support@myvitalreport.com. We will respond within 30 days. We do not charge a fee for reasonable requests.
If you are located in the European Economic Area, you have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your data appropriately.
9. Cookies
We use minimal cookies necessary to operate our website. We use:
- Essential cookies: Required for the website to function (session management, security)
- Analytics cookies: Anonymous traffic analytics to understand how visitors use our site (no personal identification)
We do not use advertising cookies or tracking pixels for third-party marketing purposes.