Vivara – Privacy Policy
Last updated: May 2025
Vivara ("we", "our", or "the app") is a fitness and nutrition app. This policy describes what data we use and how we handle it.
Data we use
Account & profile: Email, display name, and optional profile photo you provide when you sign up or edit your profile. A unique account identifier is also stored to associate your data with your account.
Food & meals: Meals and macros you log; photos you take with the camera to log food (processed to help you track nutrition).
Workouts: Workout plans and logs you create (exercises, sets, duration).
Health & activity (optional): If you grant permission, we read steps, distance, active calories, heart rate, and workouts from Apple Health (iOS) or Health Connect (Android) to show your activity and adjust your daily goals. Heart rate is shown in-app only and is never shared with friends. Other metrics (steps, workouts, meals, streaks) are shared with friends only when you turn them on under Profile → Feed visibility; everything starts private until you opt in.
Challenges & social: Content you post (meal posts, captions, comments, challenge participation) and interactions with friends, as allowed by the app and your settings.
Subscriptions & purchases: If you purchase a subscription, the transaction is processed by Apple (App Store) or Google (Play Store). We receive a receipt and subscription status to unlock paid features; we never receive your payment card details.
Reports & moderation: If you report another user's content, we record the report (reporter, target, reason, timestamp) so we can review it.
How we use it
We use this data to run the app: to save your logs, show your progress, sync across devices, power social and challenge features, process AI features you choose to use, moderate reported content, and improve the service. We do not sell your personal data, and we do not use your health data for advertising.
AI features
When you use AI features such as meal photo estimation, Goals Coach, or AI Chat, we send the relevant input (the meal photo, or information you've entered such as weight, height, age, and goals) to our AI provider, OpenAI, to generate a response. We do not send data read from Apple Health or Health Connect to AI providers. OpenAI processes this data under its own privacy policy and does not use it to train models for other customers.
Where it's stored
Data is stored on secure cloud infrastructure (Amazon Web Services) and is associated with your account. Data is encrypted in transit (HTTPS) and at rest. You can permanently delete your account and associated data from inside the app at Profile → Delete account, or by contacting us at the email below.
We keep your account data while your account is active. When you delete your account, we remove your account, logs, photos, posts, and comments from our servers. Aggregated, non-identifying analytics may be retained.
Camera & microphone
Camera access is used to take photos of meals for macro estimation and to scan barcodes for food lookup. If you choose to share a meal post with friends, the photo is uploaded to our servers and visible to friends you've added. The camera is never used in the background.
Microphone access is used only if you choose voice-based features. We do not record or store audio beyond what's needed for the feature you're using.
Third parties
We use the following providers to run the app. Each processes data according to its own privacy policy:
Amazon Web Services — authentication (Cognito), storage (S3), and database (DynamoDB).
OpenAI — AI meal estimation, Goals Coach, and AI Chat.
RevenueCat — subscription management.
Firebase Cloud Messaging — push notifications on Android.
Expo / Amplify — app infrastructure and over-the-air updates.
The app is also distributed via the Apple App Store and Google Play, which have their own privacy and data practices.
Your rights
You can access, correct, or delete your data from inside the app (Profile → Delete account) or by emailing us. Depending on where you live (e.g. EU/UK, California), you may have additional rights under GDPR or CCPA, including the right to export your data, object to processing, or lodge a complaint with a supervisory authority.
Children
Vivara is intended for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.
Changes
We may update this policy from time to time. The "Last updated" date at the top will be revised when we do. Continued use of the app after changes means you accept the updated policy.
Contact
For questions about this policy or your data, contact us at joaolucasrmelo@gmail.com.