Privacy Policy
Effective September 3, 2026
Overview
This policy explains how AXVital collects, uses, discloses, and retains information when you use its direct-to-consumer health and wellness tracking service. AXVital is not a healthcare provider or HIPAA-covered entity, and this policy does not claim HIPAA compliance.
Information you provide
Account information may include your email address, name, profile preferences, goals, and authentication information handled by Supabase. Health and wellness information you choose to record may include daily check-ins, nutrition, supplements, medications, exercise and workouts, habits, protocols, conditions, symptoms, episodes, experiments, notes, health events, and related timestamps or tags.
Information generated through the service
AXVital uses your records to produce timelines, insights, correlations, experiment comparisons, trends, and weekly summaries. These outputs may be incomplete or inaccurate and are wellness information, not medical advice.
Usage and technical information
AXVital and its infrastructure providers process information needed to deliver and secure the service, such as IP address, browser and device information, timestamps, authentication sessions, request metadata, and operational errors. The app may store session cookies and limited interface preferences in browser storage. Generic product-event names may be recorded for limited feature and subscription analytics; the current product-event endpoint does not accept free-form health data.
How information is used
AXVital uses information to authenticate users; provide tracking, planning, analysis, experiment, recap, support, billing, export, and deletion features; maintain security and reliability; troubleshoot problems; communicate about the service; and comply with applicable obligations. AXVital does not currently include an advertising-data sale integration.
Service providers
Supabase provides authentication and database infrastructure; Vercel may host and deliver the application; Stripe processes subscriptions and payments; and Resend may deliver authentication, transactional, and support email. These providers process information as needed to perform their services and under their own terms. Support messages are delivered to AXVital’s configured support mailbox and may be retained by email providers.
Payments and email
Stripe handles payment-card entry and processing. AXVital stores billing status and provider identifiers but does not intentionally send health notes or recorded health values to Stripe. AXVital may send account, security, billing, and support communications. Contact-form submissions use your address as Reply-To, never as the message sender.
Cookies and analytics
Authentication cookies keep you signed in, and browser storage may retain interface preferences. AXVital uses Vercel Web Analytics for page views and a small set of generic product events, such as account creation and checkout. Private page paths are grouped together, and URL query strings are removed. Public condition marketing pages and their signup funnel can be measured using the page category and approved campaign labels. These labels are not saved to your health profile or used to infer a diagnosis or create advertising audiences. We do not send health entries, notes, names, email addresses or account and billing identifiers as analytics event data. Generic completion events may also be retained in our database. Account creation and first paid membership can generate an internal owner email containing account email and basic signup or plan information, without health entries or payment card details.
Retention and deletion
Active account data is generally retained while your account exists; AXVital does not currently promise a universal time-based retention period. You may use data export and, where enabled, account deletion. Deletion removes active user-owned application records after verification, but provider billing records, email, security logs, backups, and records required for fraud prevention or legal compliance may remain for their applicable retention periods. Copies you previously exported remain under your control.
Security
AXVital uses commercially reasonable administrative, technical, and organizational safeguards intended to protect information. No service or transmission method can guarantee complete security. Keep your credentials private and contact Support if you suspect unauthorized account access.
Your choices
You may choose what optional information to record, correct supported account and health information, export your data, request account deletion, manage subscription settings, and contact AXVital about privacy questions. Some information is necessary to operate an account or requested feature.
Health information
Health and wellness records may be sensitive. Limit entries to information you are comfortable storing and do not share account credentials. AXVital does not use your records to provide diagnosis or treatment. See the Health Disclaimer.
Children
AXVital is not directed to children under 13, and users must be legally able to consent to these terms. If you believe a child provided personal information without appropriate authorization, contact AXVital so the request can be reviewed.
Changes and contact
AXVital may update this policy as the service or legal requirements change. Material updates will be identified by a revised effective date and, when appropriate, additional notice. Contact AXVital through the support form for privacy questions or requests.