Privacy
OwnVitals holds health data, which is the most sensitive category of personal data there is. This page says what we hold, where it lives, who can reach it, and how to make it stop. It describes what the software actually does, not what would be convenient to claim.
Last updated 8 September 2026.
Who we are
OwnVitals is operated by Prado Consulting Limited, a company registered in England and Wales, number 17312359, registered office Solutions House, Unit 10 Deepmore Close, Station Road, Wolverhampton, England, WV10 7DB. For data protection law we are the controller of the personal data described here.
Questions, requests and complaints: info@ownyourvitals.com.
What we hold
Three kinds of thing, kept deliberately apart:
- Who you are. Your email address, your name if you give one, a hashed password, your timezone and units, and your plan. Nothing here is a health fact.
- Your readings. Whatever you import or connect — heart rate, sleep, steps, workouts, weight and the rest — along with the app or device that recorded each one.
- What you did in the product. A record of significant actions: signing in, importing a file, creating a share link, running an analysis. This is kept for security and for answering “what happened to my data”, and it never contains a reading.
How the two are separated
Identity and health data are kept in two separate databases. Your readings are filed under a random subject number that means nothing on its own; the only thing connecting that number to you is a single encrypted value in the identity database, sealed with AES-256-GCM. Somebody who obtained the health database alone would hold a large pile of readings with no way to learn whose they are.
The activity record goes further: identifiers in it are replaced with keyed one-way tokens and timestamps are rounded to ten-minute buckets, so the log cannot be used to line events up against readings and re-identify a subject.
These are engineering measures, not guarantees. They raise the cost of a breach considerably; they do not make one impossible.
Where it lives
On a dedicated server in Helsinki, Finland, operated by Hetzner Online GmbH. Backups stay on the same server. Your data does not leave the EEA except in the one case described under AI analysis below.
OwnVitals can also be self-hosted. If you run your own server, we hold nothing at all — this policy then describes only software you operate, and you are the controller.
The phone apps
The iPhone and Android companions read Apple Health and Health Connect and send those readings to your account. They are bridges: they store no readings of their own, show no charts, and have no analytics, advertising or tracking of any kind. What they keep on the phone is a device token, a bookmark per data type recording how far they have got, and counts of how much has been sent.
The permission sheet is the phone’s, not ours. We only ever ask to read, never to write, and you can withdraw any part of it at any time in Apple Health or Health Connect — the app will simply stop receiving what you withdrew.
Who else can see your readings
Nobody, unless you decide otherwise. Sharing with a family member or a coach happens only through a link you create, and you set exactly what it covers: which metrics, how much detail, how far back, whether workouts and alerts are included, and when it expires. You can withdraw a share at any moment and the access stops immediately.
We do not sell data, we do not share it with advertisers or data brokers, and we do not use it to train anybody’s models.
AI analysis
If you ask for an AI analysis, a packet of derived figures — daily averages, period comparisons, workout summaries, alerts — is sent to Google’s Gemini API together with your question. Individual readings are never sent, and neither is your name or email address. The packet is shown to you in full before it is sent and afterwards, so you can see exactly what left.
This is the one processing step that may leave the EEA, it happens only when you ask for it, and you can use the whole product without ever using it.
We send email through Brevo, and only when something requires it — chiefly an invitation you asked us to send. Email never contains health data. Not a reading, not a score, not a trend, and not the names of the metrics somebody asked to see. Messages say that something is waiting and link to it; what is waiting is read on a screen you have signed in to.
Who processes data on our behalf
- Hetzner Online GmbH — hosting, Helsinki, Finland.
- Brevo — sending email. Receives an email address and the message; never health data.
- Google — the Gemini API, only for analyses you request, and only derived figures.
Why we are allowed to hold it
Health data is special category data under UK and EU law, so we rely on your explicit consent (Article 9(2)(a)) to process it, and on performance of our contract with you for the ordinary account data needed to run the service. Consent can be withdrawn at any time by deleting your data or your account.
How long we keep it
Your readings stay until you remove them. You can delete an individual import along with every sample it brought in, or delete your account entirely.
Deleting your account removes your readings, workouts, aggregates, rules, alerts, reports, dashboards, device connections, uploaded files, share grants and the account itself. Uploads are removed from disk as well as from the database. Backups age out within thirty days.
One thing survives deliberately: readings you have already shared and that somebody else has since recorded in their own notes are theirs, not ours to reach into. Withdrawing a share stops all further access.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a portable form. The product does most of this without asking us: export produces a machine-readable copy of everything, and deletion is a button in Settings.
If you would rather we did it, write to info@ownyourvitals.com and we will respond within one month. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority in the EEA.
Children
OwnVitals is not intended for children under 16, and we do not knowingly create accounts for them. An adult may record a child’s readings in a family space, in which case that adult is responsible for the child’s data and for having the right to hold it.
Security
Traffic is encrypted in transit. Passwords are stored hashed and never in a recoverable form. The link between your identity and your readings is encrypted at rest. Device tokens are stored on the phone in the platform’s secure keystore. Health values never appear in logs, in the activity record, in notifications or in email.
If a breach occurs that is likely to put your rights at risk, we will tell you and the ICO within 72 hours of becoming aware of it.
Changes
When this policy changes materially we will say so in the product rather than quietly reposting it. The date at the top always reflects the current version.
Related
Terms of service — the contract for using OwnVitals.