VitalsPath Privacy Policy

1. Data controller

The controller is Lester Romero Bernardo (RomeroDev), Valencia, Spain. Contact for privacy questions and rights requests: romerodev.apps+vitalspath@gmail.com.

2. Information the app may process

Information you enter may include profiles and names, medication and doses, symptoms, vital signs, appointments, notes, conditions, inventories, and medical documents. App preferences and technical data needed to operate its features are also used.

3. Health, camera, and Apple Health

HealthKit, camera, location, and notification permissions are optional and depend on the features you enable. The scanner can recognize text to fill a form; you must review its result. The app does not sell health data or use it for advertising.

4. Storage and sharing

Records are stored on your device and may sync or be shared through iCloud/CloudKit if you enable those features. Apple processes this data under its own terms. Apple processes App Store payments; RevenueCat may receive purchase identifiers and subscription status to validate Premium. Firebase Analytics receives the app's configured usage events only when you enable Analytics; those events are not designed to include health data. Release builds send crash diagnostics to Firebase Crashlytics by default unless you disable that option in Settings. We do not operate our own server to host health histories.

5. Telemetry and retention

Profiles and health records remain until you delete them in the app. Dose history and medication, appointment, and condition activity logs have independent retention controls by category: 30 days by default, with 90, 180, 365 days, or permanent retention available. Professional reports are deleted after 30 days by default; you can set a period from 1 to 365 days. Crashlytics starts deleting crash reports after 90 days. In GA4, event data is retained for 2 months and user data for 14 months; the user-data period resets when new activity occurs. These are the property settings in effect on October 14, 2026 and they have not been reduced in this publication. Deleting or resetting local app data does not cancel an Apple subscription and does not currently request deletion of the RevenueCat customer record. CloudKit deletion may take longer even after the local reset finishes. Uninstalling the app, shared devices, and Apple's sync may affect copies already present on other devices or accounts.

6. Your choices and rights

You can correct or delete information in VitalsPath, revoke iOS permissions, and stop sharing profiles. You may also request access, rectification, erasure, restriction, objection, or portability by contacting us. You may lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Security and children

Protect your device, passcode, and Apple ID. Do not share information with people who should not see it. Children should use health features with appropriate supervision and authorization.

8. Changes and contact

This page describes the configuration known on October 14, 2026. We will update the policy if providers or retention periods change. Questions or requests: romerodev.apps+vitalspath@gmail.com.