Privacy Policy
What personal data VITAE collects, why, and how we protect it.
Last updated 4 July 2026
Placeholder text pending legal review — replace before launch.
This policy explains what personal data VITAE processes when you use the VITAE app and website, register for a BreathProfile assessment at a partner clinic, or contact us — and how we keep it safe. VITAE is a respiratory-training and wellness service; it does not provide medical diagnosis or treatment.
Who we are
VITAE (“we”) is the controller of your personal data. Our clinic is based in Zürich, Switzerland. You can reach us about anything in this policy at info@vitaeclinic.ch.
The data we collect
Depending on how you use VITAE, we may process: • Contact & enquiries — your name, email, phone and any message you send through the website or booking form. • Your account — the email and name you register with, and a securely hashed password (we never see your password in plain text). • Your consents — the specific permissions you give us, such as saving your training progress or contacting you. • Your training activity — the subjective before/after check-ins and sessions you choose to save (how calm, clear or at-ease you feel). These are self-reported wellbeing markers, not medical measurements, and are stored only if you give the training-data consent. • Assessment registration — if you register for a BreathProfile assessment at a clinic, the clinic collects what it needs to run and invoice it: your name, date of birth, contact details, a health and symptom screening, and — where you pay via insurance — billing and insurance details (such as address, AVS number, insurer and card number). • Reports — with your consent, a BreathProfile report your clinic delivers is made available in your account. • Payments — if you subscribe to a paid plan, our payment provider processes the payment. We store only the subscription status and identifiers, never your card number.
Why we use it
We process your data on these legal bases under the Swiss Data Protection Act (and the GDPR where it applies): • To provide what you asked for — your account, saved progress, and report delivery (contract / your consent). • To arrange and invoice a clinic assessment (contract / legal obligation). • To answer your enquiries (our legitimate interest). • To send service emails — confirmations, password resets, and, if you opt in, reassessment reminders (your consent). • To keep the service secure and meet record-keeping obligations (legal obligation / legitimate interest). We do not sell your data, and we do not make automated decisions that produce legal effects about you.
How your data is protected
VITAE is built privacy-first. Your identity and your assessment data are held in separate, access-controlled zones: the team that analyses assessment data works only with a pseudonymous reference and cannot see who you are. Access is enforced at the database level, staff accounts require two-factor authentication, and data is encrypted in transit and at rest. A report is linked back to you — in your own account — only with your explicit consent, and only you can open it.
Who else processes your data
We use trusted providers who process data only on our instructions, each bound by a data-processing agreement: • Supabase — secure database and authentication hosting (EU / Switzerland region). • Vercel — website and application hosting. • Resend — sending transactional emails. • Stripe — payment processing for paid subscriptions.
Where your data is stored
Your data is hosted in Switzerland / the EU. Where a provider processes data outside Switzerland, we rely on recognised safeguards such as EU Standard Contractual Clauses.
How long we keep it
We keep data only as long as needed for its purpose. Assessment and health-related records are retained in line with Swiss legal requirements (up to 10 years). Account and training data are kept while your account is active — you can delete your account and its data at any time in your settings.
Your rights
At any time you can access, correct, delete or export your data, withdraw a consent, or object to certain processing. The app lets you export or delete your account data directly in settings. To exercise a right or raise a concern, email info@vitaeclinic.ch. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Children
VITAE is intended for adults. Anyone under 18 may only register for a clinic assessment with the consent of a parent or legal guardian, collected at registration.
Changes to this policy
We may update this policy as the service evolves. The current version and its date are always shown here; we will communicate significant changes where appropriate.
Contact
Questions about your data or this policy? Email info@vitaeclinic.ch.