AI Data Transparency Policy

This document outlines exactly what health data Vitera sends to Google Gemini AI for generating personalized wellness insights. We are committed to transparency and privacy protection.

By default, we only send processed, relative data - never raw measurements or identifying information. You can optionally enable "Full Access Mode" to share raw values for higher precision.

All data sent to AI is:

• ✅ Calculated Trends (Relative offsets and percentages)
• ✅ Anonymized Logs (No personal identifiers or user linkage)
• ✅ Granularly Controlled (You choose what to share)
• ✅ Extended Context Option (Optional depth for advanced insights)

Complete Data Inventory

1. Core Health Scores (0-100 scale)

• Readiness Score: Overall recovery status (0-100)
• Sleep Quality Score: Comprehensive sleep assessment (0-100)
• Overnight Recovery: Recovery from previous day (0-100)

2. Relative Health Metrics

We send data that reflects how your current vitals compare to your historical personal normal. This includes trends for:

• Heart Rate Variability (HRV)
• Resting Heart Rate
• Breathing Rate
• Wrist Temperature
• Blood Oxygen (SpO2)

3. Sleep Analysis Context

• Sleep Stage Distribution: Deep and REM sleep percentages.
• Sleep Stability: Indicators of sleep continuity and restorative quality.
• Sleep Timing: Arrival at bedtime and wake times relative to your personal baseline.
• Duration Consistency: How your sleep duration cycles over time.

4. Training Intensity & Recovery

• Training Load Status: Comparison of recent training intensity to long-term averages.
• Recovery Balance: Whether your current training volume is optimal for recovery.
• Activity Frequency: Consistency of your exercise sessions over time.

4.1. Exercise Summaries

We may send brief summaries of your activity to ensure recovery coaching accounts for recent strain.

• Activity Category: General type (e.g., "Strength Training", "Running").
• Duration & Timing: Precise length and time of day to assess recovery windows.
• Intensity Indicators: Relative effort and physiological load of the session.

Important: We do NOT send workout names, specific locations, routes, or any identifying workout details. Only anonymized, aggregated session summaries.

4.2. Advanced Recovery Assessment

• Recovery Trends: Historical consistency in staying within your optimal recovery zone.
• Strain Volatility: How much your workload fluctuates over time.
• Adaptive Recovery Windows: Typical time required for your body to return to baseline readiness.

5. Recovery Context

• Overnight Recovery Score: Recovery from previous day (0-100)
• Start of Day Score: Readiness score at day start
• Current Readiness: Current readiness score
• Is First Tick: Whether this is the first calculation of the day

6. Baseline Perspective

• Metric Stability: Identification of which metrics have reached a reliable baseline.
• Personal Boundaries (Full Access only): Context regarding your typical biological ranges to help AI identify abnormal deviations.

Privacy Note: In default mode, we only send relative trends. In "Full Access Mode," we include context on your personal boundaries to assist the AI in identifying significant shifts in your wellness. Full Access mode strictly honors your granular toggles; if a metric is disabled, its data and related benchmarks are excluded.

8. Environmental Context

• Timezone: Your current timezone (when enabled)
• Time of Day: "morning", "afternoon", or "evening"
• Weekend Status: Whether it's a weekday or weekend
• Current Time: Formatted time based on your device preferences (e.g., "19:57" or "7:57 PM")
• Uses 24-Hour Time: Whether your device uses 24-hour format

9. Temporal Context

• Morning Readiness Score: Your readiness score when you woke up
• Morning Wake Time: Time you woke up (formatted)
• Hours Since Wake: Hours since you woke up
• Today's Workouts: Array of today's workout summaries (see section 4.1)
• Last Workout Time: Time of your most recent workout (formatted)
• Hours Since Last Workout: Hours since your last workout completed
• Workout Count Today: Number of workouts completed today

10. History & Trends

• Metric Directions: Directional trends for enabled health metrics.
• Historical Patterns (Full Access only): Recent historical readiness and vitality patterns to help the AI recognize emerging shifts over time.

Control Note: Historical vitals are only included if their corresponding metric toggles (e.g., HRV toggle) are enabled. Historical readiness is provided to help the AI understand your baseline recovery rhythm.

11. Nutrition & Safety Context (NEW)

• Food Allergies: List of user-specified excluded ingredients (e.g., "peanuts") to ensure safety.
• Dietary System: User's chosen food framework (e.g., "Vegetarian", "Plant-forward", "Halal").
• Nutrition Goal: High-level objective (e.g., "Lose Fat", "Gain Muscle").
• Avoidance Tags: Specific categories to avoid (e.g., "No Dairy").

12. Safety & Preference Boundaries

• Guidance Envelope: Dietary goals, specific avoidances, and allergy preferences.
• Activity Constraints: Preferred exercise categories and duration limits.
• Safety Flags: High-level indicators (e.g., injury markers) to suppress inappropriate suggestions.
• Plan Progress: Current daily plan goals and item completion status.

13. Protocol Context (Chatbot Only)

• Active Protocol: Name and goal of your current assigned daily plan.
• Protocol Activities: List of scheduled tasks/activities for today.
• Completion Status: Which protocol items you have marked as done.

Data NOT Sent to AI

We explicitly exclude the following to protect your privacy:

Raw Health Data

• ❌ Raw HealthKit Samples: Individual data points, beat-to-beat intervals (RR intervals), and high-frequency time-series data are NEVER sent to the AI, regardless of mode.
• ❌ Raw Waveforms: ECG data, PPG signals, or any raw physiological sensor data.
• ❌ Specific GPS Tracks: Precise locations or movement routes.

*Note: In "Full Access Mode", we only send daily summaries (e.g., your average Sleep HR for the night). The thousands of individual heart rate samples used to calculate that average remain strictly on your device. Furthermore, these summaries are gated by your granular settings; if a metric is disabled, its summary is never sent.

Personal Information

• ❌ Your name, age, or date of birth
• ❌ Your location or address
• ❌ Your contact information
• ❌ Your Apple ID or device identifiers
• ❌ Any photos or voice recordings

Identifying Context

• ❌ Specific workout names or detailed workout descriptions
• ❌ Workout routes or GPS coordinates
• ❌ Personal notes or journal entries
• ❌ Medication information
• ❌ Medical history: Specific diagnoses, medication names, or doctor notes (only generic "injured" state is sent).
• ❌ Workout locations: Gym names or GPS coordinates.

Data Usage & Retention

How We Use Your Data

• Purpose: Generate personalized wellness insights and coaching advice
• Processing: Data is processed by Google Gemini AI to provide contextual recommendations
• Output: AI generates plain-English coaching advice based on your health patterns

Data Retention

• AI Processing: Google Gemini AI processes data for immediate insight generation.
• No Permanent Storage (Google): Google Gemini does not store your health data permanently.
• Quality Assurance Logs (Firebase): We log anonymized AI inputs and outputs in Firebase for **performance monitoring, accuracy tracking, and quality assurance**.
• No User Linkage: These logs use **randomized, anonymous user IDs**. We explicitly ensure no personal identifiers are sent or stored with these logs. They cannot be linked to your identity.
• Local Caching: We cache AI responses briefly on your device to improve performance.
• No Sharing: We do not share your health data with any third parties or use it for advertising.

Granular Data Control

Complete AI Control

You have complete control over what data is shared with AI. Every single metric listed in this document can be individually toggled on or off through the app's settings. Note that some controls are grouped for easier management.

• Master Toggle: Turn off all AI features entirely
• Universal Control: Every metric can be disabled - no data is required to be shared

Available Control Categories (25 Toggles)

Sleep Metrics (4 toggles)

• Deep Sleep, REM Sleep, Sleep Timing, Sleep Fragmentation
• Default: All enabled for optimal AI analysis
• Effect: Disabled metrics are not sent to AI (set to null/0). In Full Access mode, raw sleep fields are also omitted.

Vital Signs (5 toggles)

• HRV, Heart Rate, Respiratory Rate, Wrist Temperature, Blood Oxygen
• Default: All enabled for comprehensive health analysis
• Effect: Disabled metrics show as 0.0 in AI analysis. In Full Access mode, raw vital fields are omitted.

Training Metrics (10 toggles)

• Training Load, ACR, Acute Load, Chronic Load
• Workout Count, Training Frequency, Training Consistency, Workout Timing, Training Analytics, Exertion
• Default: All enabled for training optimization
• Effect: Disabled metrics are excluded from training analysis (set to 0/nil).

Context & Analysis (6 toggles)

• Trends, Patterns, Recovery Context, Strain Context, Timezone, Full Access: Advanced Context
• Advanced Context: Controls Full Access-only fields like sleep debt, restorative sleep, and advanced sleep baselines.
• Default: Enabled for contextual recommendations
• Effect: Disabled metrics reduce contextual accuracy. Disabling "Advanced Context" suppresses highly precise sleep and recovery fields in Full Access mode.

How Controls Work

• Immediate Effect: Changes take effect immediately on next AI request
• No Data Sent: Disabled metrics are not transmitted to AI (set to nil, 0, or empty)
• Local Processing: All health calculations still happen on your device regardless of AI settings
• Reversible: You can re-enable any metric at any time
• Transparent: This document shows exactly what each control affects
• Complete Control: You can disable every single metric if desired - no data sharing is required

Privacy Protections

Technical Safeguards

• Encryption: All data transmission uses HTTPS encryption.
• Minimal Data: Only essential processed metrics are sent.
• Anonymized Logs: All interaction logs use **randomized, anonymous user IDs** to prevent linkage to any real-world identity.
• No Raw Data: Raw measurements never leave your device.
• Anonymized AI: No personally identifiable information is sent to third-party AI systems.

User Control

• Opt-In: AI features are optional and can be disabled
• Complete Control: You can turn off AI features entirely in settings
• Granular Control: You can selectively disable metrics from being sent to AI.
• Real-Time Control: Changes take effect immediately - no data is sent for disabled metrics
• Transparency: This document shows exactly what data is sent
• Control: You can disable AI features at any time
• Local Processing: Core health calculations happen on your device

Google Gemini AI Integration

What Google Gemini Receives

• Processed health metrics (as listed above)
• Contextual information (time, season, etc.)
• No personal identifiers or raw data

What Google Gemini Does

• Analyzes your health patterns
• Generates personalized coaching advice
• Provides plain-English recommendations
• Does not store your data permanently

Google's Privacy Policy

• Google Gemini follows Google's standard privacy practices
• Your data is processed according to Google's AI privacy policies
• Google does not use your data for advertising or other purposes

Your Rights

Data Control

• Access: You can see exactly what data is sent (this document)
• Complete Control: You can disable AI features entirely in app settings
• Granular Control: You can selectively disable metrics from being sent to AI
• Metric Categories: Control sleep metrics, vital signs, training metrics, environmental data, and analysis features separately
• Real-Time Effect: Disabling metrics immediately stops sending that data to AI
• Deletion: Disabling AI features stops all data transmission
• Portability: Your core health data remains on your device

Questions & Concerns

• Contact: Reach out through the app's support system
• Updates: This policy will be updated if we change what data is sent
• Transparency: We're committed to being transparent about AI data usage

Changes to This Policy

We will notify you of any changes to what data is sent to AI:

• Minor Changes: Updated privacy documentation
• Major Changes: App notification and user consent required
• New Features: Clear explanation of any new data usage