Privacy Policy

Last updated: August 9, 2026

Vitandi ("we," "us," "our") operates vitandi.ai. This policy explains what data we collect, why, and how we handle it.

What We Collect

When you use Vitandi, we collect:

• Account information: Email address, first name, username, and password (hashed, never stored in plain text).
• Conversation transcripts: The full text of your conversations with Vitandi's AI.
• Psychological profile data: Based on your conversations, we build a profile that includes key language patterns, values, resistance patterns, representational system (visual/auditory/kinesthetic), session summaries, belief shifts, and progress notes. This is sensitive personal information.
• Voice recordings: If you use the voice input feature, audio is temporarily processed for transcription and is not stored after conversion to text.
• Usage data: Session count and conversation timestamps.
• Site analytics data: Pages visited, how you arrived at our site (for example, a search engine or a link in a video), general device and browser information, and cookie-based identifiers. This is collected through the analytics services described below and is never linked to the content of your conversations.

How We Use Your Data

• AI-powered conversation: Your messages and profile data are sent to our AI provider to generate personalized responses that maintain continuity across sessions.
• Profile building: After each conversation, an AI model analyzes the transcript to update your psychological profile, enabling deeper and more relevant future conversations.
• Product improvement: We may review anonymized, aggregated patterns to improve Vitandi. We will never sell your data or use it to train third-party AI models.

Third-Party Services

Your data is processed by the following services:

• Anthropic (Claude API): Receives conversation transcripts and profile data to generate AI responses and reflection analysis.
• ElevenLabs: Receives audio recordings for voice-to-text transcription only. Audio is not stored after transcription.
• Supabase: Hosts our database. All data at rest is encrypted. Row-level security ensures users can only access their own data.
• Cloudflare: Hosts our website and handles request routing.
• Google: If you sign in with Google, we receive your name and email from Google's OAuth service. We do not access any other Google data.
• Google Analytics: Receives site usage data — pages visited, traffic source, and key actions such as creating an account, starting a conversation, and subscribing. See "Analytics and Cookies" below.
• Meta (Facebook): Receives conversion signals — such as account creation and subscription checkout — so we can measure the effectiveness of our marketing. See "Analytics and Cookies" below.

Analytics and Cookies

We use two analytics services to understand how people find and use Vitandi:

• Google Analytics 4 uses cookies (such as _ga) to measure visits, traffic sources, and conversion events, including a server-side record when a subscription is purchased. We have not enabled advertising personalization features, and analytics data is retained by Google Analytics for 14 months. You can opt out with the Google Analytics opt-out browser add-on.
• Meta Pixel uses cookies to measure whether our marketing leads to signups and subscriptions, including a server-side confirmation when a purchase completes.

What these services never receive: the content of your conversations, your psychological profile, your voice recordings, or any other sensitive information described in this policy. Analytics is limited to how you found the site and which product milestones you reached. You can also limit or block analytics cookies entirely through your browser's settings; the product works fully without them.

Data Retention and Deletion

We retain your data for as long as your account is active. You may request complete deletion of your account and all associated data — including conversation transcripts, profile data, and reflection history — by contacting us at the email below. We will process deletion requests within 30 days.

Sensitive Data

Vitandi collects and processes psychological profile data, which may qualify as sensitive personal information under California (CCPA) and European (GDPR) privacy laws. We process this data only with your explicit consent, provided when you agree to these terms during account creation. You may withdraw consent at any time by requesting account deletion.

Your Rights

All Users

• Request a copy of your data
• Request deletion of your data
• Withdraw consent for data processing

California Residents (CCPA)

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt out of the sale of personal information — we do not sell your data
• Right to non-discrimination for exercising your privacy rights

European Residents (GDPR)

• Right to access, rectify, or erase your personal data
• Right to data portability
• Right to object to or restrict processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

Security

We use encryption in transit (HTTPS), encrypted data at rest, and row-level security policies to protect your data. Access to production systems is restricted to authorized personnel only.

Children

Vitandi is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately.

AI Processing Disclosure

Vitandi is an AI system. All responses are generated by artificial intelligence, not a human. The AI makes inferences about your psychological patterns, values, and beliefs based on your conversations. These inferences are stored in your profile and used to personalize future interactions. Vitandi is not therapy, medical advice, or a substitute for professional mental health care.

Changes to This Policy

We may update this policy as Vitandi evolves. Material changes will be communicated via email or an in-app notice. Continued use after changes constitutes acceptance.

Contact

For privacy-related requests or questions: [email protected]