Vexari is a personal health dashboard built around the principle that your health data belongs to you. This policy explains what information Vexari collects, how it is used, and the choices you have. We do not sell your data, do not show ads, and do not share your health information with third parties beyond the limited processing described below.
With your explicit permission, Vexari reads health and fitness data from Apple HealthKit. This may include heart rate, heart rate variability, sleep, steps, weight, blood pressure, blood oxygen, body temperature, and similar metrics from devices you have connected to Apple Health (such as Apple Watch, smart scales, blood pressure cuffs, or pulse oximeters). HealthKit access is read-only and can be revoked at any time in iOS Settings → Privacy & Security → Health.
If you choose to connect an Oura Ring, Vexari will request and store an Oura API token on your device's secure Keychain. The token is used only to fetch your own Oura data (readiness, sleep, activity, HRV, and related metrics) directly from Oura's servers. You can revoke this token at any time in Vexari's Settings.
Vexari uses Sign in with Apple for authentication. Apple provides Vexari with a user identifier and, optionally, a name and email address that you can choose to share or hide. We do not receive your Apple ID or password.
Information you manually enter into the app — including profile details (age, sex, height), food log entries, supplement and medication tracking, hydration, event tags (illness, travel, stress), and notes — is stored on your device and in your private iCloud Key-Value storage.
Subscription purchases are handled by Apple through StoreKit. Vexari receives transaction identifiers and subscription status from Apple to determine entitlement, but does not receive your payment details. All billing is managed by Apple.
Vexari does not use your information for advertising, profiling, training third-party machine learning models, or any commercial purpose other than providing the app's features to you.
Most of your data — food logs, supplement tracking, hydration, event tags, profile, app preferences — is stored locally on your device.
To synchronize your data across your own Apple devices (iPhone, iPad), Vexari uses iCloud Key-Value Storage. This service is operated by Apple under their privacy and security standards. Data stored in iCloud is encrypted in transit and at rest, and is only accessible to you and your devices signed in to the same Apple ID.
API tokens (such as your Oura token) are stored in Apple's Keychain, which is encrypted and accessible only to Vexari on your device.
If you subscribe to Vexari Pro, the AI insights, morning and evening reports, and AI-powered nudges are generated by Anthropic's Claude language model. To produce these insights, Vexari sends a contextual prompt containing a subset of your health metrics and notes to Anthropic via an intermediary service operated on Cloudflare's infrastructure (the "Cloudflare Worker proxy"). The Cloudflare proxy adds Vexari's API credentials but does not log or retain your data beyond what is required to forward the request.
The data sent to Anthropic typically includes: recent health metrics (heart rate, HRV, sleep score, steps, etc.), your VEDEX score components, food log entries for the day, active event tags, and your stated goals or recovery context. It does not include your name, email, location, or device identifiers.
Anthropic's processing of this data is governed by Anthropic's own privacy policy and commercial terms. Anthropic does not use Vexari's API data to train its models.
Users who do not subscribe to Vexari Pro never have their data sent to Anthropic. AI features can also be disabled per-feature in Vexari Settings even with a Pro subscription.
Vexari interacts with the following third-party services. Each operates under its own privacy policy:
Vexari retains your data only as long as you have the app installed and your iCloud account active. We do not maintain server-side copies of your health data. Subscription transaction history is retained by Apple, not by Vexari.
Vexari is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to Vexari, please contact us so we can take appropriate action.
Vexari relies on Apple's platform security: HealthKit data is sandboxed per-app, Keychain stores credentials encrypted, and iCloud Key-Value storage is encrypted in transit and at rest. The Cloudflare Worker proxy enforces HTTPS for all API traffic. No system is perfectly secure, but Vexari is designed to keep your health data on your devices and in your control.
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the app. Continued use of Vexari after changes are posted constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or how Vexari handles your data, please contact us at Vexari.Developer@proton.me.
← Back to vexari.app