Vivara – Privacy Policy
Last updated: September 2026
Vivara ("we", "our", or "the app") is a fitness and nutrition app. This policy describes what data we use and how we handle it.
Data we use
Account & profile: Email, display name, and optional profile photo you provide when you sign up or edit your profile. A unique account identifier is also stored to associate your data with your account. We also store your device's time zone so your days line up with your local date.
Food & meals: Meals and macros you log; photos you take with the camera to log food (processed to help you track nutrition).
Workouts: Workout plans and logs you create (exercises, sets, duration).
Health & activity (optional): If you grant permission, we read steps, distance, active calories, heart rate, and workouts from Apple Health (iOS) or Health Connect (Android) to show your activity and adjust your daily goals. Heart rate is shown in-app only and is never shared with friends. Other metrics (steps, workouts, meals, streaks) are shared with friends only when you turn them on under Profile → Feed visibility; everything starts private until you opt in.
Challenges & social: Content you post (meal posts, captions, comments, challenge participation) and interactions with friends, as allowed by the app and your settings.
Subscriptions & purchases: If you purchase a subscription, the transaction is processed by Apple (App Store) or Google (Play Store). We receive a receipt and subscription status to unlock paid features; we never receive your payment card details.
Reports & moderation: If you report another user's content, we record the report (reporter, target, reason, timestamp) so we can review it.
Usage & diagnostics: Which screens and features you use, and app errors or crashes, linked to your account identifier. We use this to improve the app and fix bugs. It never includes your health or nutrition numbers, and we don't collect your location for it.
How we use it
We use this data to run the app: to save your logs, show your progress, sync across devices, power social and challenge features, process AI features you choose to use, moderate reported content, and improve the service. We do not sell your personal data, and we do not use your health data for advertising.
AI features
When you use AI features (Vivara Coach, meal photo and description estimates, receipt and supplement label scans, Stack Review, Goals Coach, AI Trainer, and exercise swaps), we send what that feature needs to our AI provider, OpenAI, to generate a response: your photo, text, or voice transcript, plus related app data such as today's meals, goals, body stats, workout plan, and supplements. Vivara Coach receives your steps, active calories, and workouts from Apple Health or Health Connect only if you turn on 'Let the coach use Apple Health' ('Let the coach use Health Connect' on Android) in Profile, under Privacy & Health Data. If you use a Smart calorie target, which adjusts to your activity, the coach may also receive that target. Other AI features don't receive data from Apple Health or Health Connect. OpenAI processes this data under its own privacy policy and does not use it to train models for other customers.
Connected apps (Claude): You can connect Vivara to Claude, Anthropic's AI assistant, from your own Claude account. You approve the connection on a Vivara consent page and sign in to Vivara, and we record that approval. Claude can then see your food diary, calorie and macro goals, water, weight check-ins, workouts, fasting, and weight goal, search Vivara's food database, and add foods to today's diary or remove foods it added when you ask. Claude never receives data from Apple Health or Health Connect through this connection. What Claude does with the data it reads is covered by Anthropic's privacy policy and your Claude settings. You can disconnect at any time in the app, in Profile under Use Vivara in Claude, or in Claude's connector settings. We keep a record of each connection, including when you approved it, until you disconnect, it goes unused for 60 days, or you delete your account.
Where it's stored
Data is stored on secure cloud infrastructure (Amazon Web Services) and is associated with your account. Data is encrypted in transit (HTTPS) and at rest. You can permanently delete your account and associated data from inside the app at Profile → Delete account, or by contacting us at the email below.
We keep your account data while your account is active. When you delete your account, we remove your account, logs, photos, posts, and comments from our servers. Aggregated, non-identifying analytics may be retained. Deleting your account also deletes your usage and diagnostics data from PostHog.
Camera & microphone
Camera access is used to take photos of meals for macro estimation and to scan barcodes for food lookup. If you choose to share a meal post with friends, the photo is uploaded to our servers and visible to friends you've added. The camera is never used in the background.
Microphone access is used only if you choose voice-based features. We do not record or store audio beyond what's needed for the feature you're using.
Third parties
We use the following providers to run the app. Each processes data according to its own privacy policy:
Amazon Web Services: authentication (Cognito), storage (S3), and database (DynamoDB).
OpenAI: the AI features described above.
RevenueCat: subscription management, and Apple Ads attribution (which Apple Ads campaign, if any, led to your download).
PostHog: product analytics and crash reporting (the usage and diagnostics data described above).
Firebase Cloud Messaging: push notifications on Android.
Expo / Amplify: app infrastructure and over-the-air updates.
The app is also distributed via the Apple App Store and Google Play, which have their own privacy and data practices.
Your rights
You can access, correct, or delete your data from inside the app (Profile → Delete account) or by emailing us. Depending on where you live (e.g. EU/UK, California), you may have additional rights under GDPR or CCPA, including the right to export your data, object to processing, or lodge a complaint with a supervisory authority.
Children
Vivara is intended for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.
Changes
We may update this policy from time to time. The "Last updated" date at the top will be revised when we do. Continued use of the app after changes means you accept the updated policy.
Contact
For questions about this policy or your data, contact us at joaolucasrmelo@gmail.com.