Vital Voice Media LLC ('Company', 'we', 'us') respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use vitalvoiceapp.com and the Vital Voice mobile application (the 'Service').
The Service is a voice-first informational wellness companion for U.S. adults aged 18 and older. It helps users log and organize wellness information and identify potential patterns in their own recorded information. The Service is non-clinical and non-diagnostic and does not provide medical advice, diagnosis, or treatment. Vital Voice is not a HIPAA Covered Entity or Business Associate.
We collect account identifiers provided through our identity provider (Replit Sign-In / OAuth), such as email address, user ID, session tokens, and age-verification status. We do not receive or store your identity-provider password credentials.
Vital Voice lets users speak short wellness check-ins instead of typing. A completed recording is temporarily held in browser/server memory and transmitted through the configured Replit-managed Google Gemini integration for speech-to-text transcription. Vital Voice does not intentionally save raw recordings in its application database, filesystem, object storage, or application logs. The current Service does not use voice for authentication, speaker identification, voice matching, creation of a voiceprint, or vocal-biomarker/acoustic-pattern analysis.
Depending on what the user chooses to say, retained information may include the transcript or cleaned-up text, journal category, structured user-reported wellness information (for example food, medication, supplements, symptoms, bowel habits, mood, sleep, exercise, and hydration), AI-assisted organization or analysis, categorization confidence, timestamps, and account linkage. Structured data fields may vary based on the content of the user’s entry.
Vital Voice uses Google Gemini through Replit’s managed AI integration. For voice check-ins, the completed audio recording is transmitted for speech-to-text transcription. The resulting transcript, selected wellness context, local date/time context, and processing instructions may then be transmitted for categorization and organization into structured wellness-journal entries. Vital Voice does not deliberately add the user’s email address or account ID to these AI prompts, although information a user voluntarily speaks may be present in the recording or transcript.
Provider-side processing and retention are governed by the applicable Replit and Google service terms. Vital Voice applies supported data-minimization and no-fallback controls and does not represent that the current integration provides guaranteed Zero Data Retention. Where applicable provider terms restrict the use of paid-service inputs for model improvement, those terms apply according to the configured service and account arrangement.
California Privacy Rights: Where the CCPA, as amended by the CPRA, applies, California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment. Where permitted by applicable law, an authorized agent may submit a privacy request on a consumer’s behalf, subject to reasonable verification. Vital Voice does not sell personal information or share personal information for cross-context behavioral advertising. See Appendix A below for our Notice at Collection summary.
Washington Consumer Health Data: Vital Voice processes user-provided wellness information, including information submitted through voice check-ins and the resulting transcripts and structured wellness-journal entries. Washington consumers may request access, withdrawal of consent where applicable, or deletion by contacting privacy@vitalvoiceapp.com. A denied request may be appealed to the same address with the subject “MHMDA Privacy Appeal.” Vital Voice does not use geofencing around healthcare facilities. The need for a separate Washington Consumer Health Data Privacy Policy will be evaluated before commercial launch.
Voice / Biometric Clarification: The current Service does not use voice authentication, speaker identification, speaker matching, or voiceprint templates. If applicable law nevertheless treats any processed voice information as biometric or otherwise sensitive information, Vital Voice will apply required notice, consent, use-limitation, and deletion obligations.
New York SHIELD Act: We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect private information. No method of transmission, processing, or storage is completely secure, and we cannot guarantee absolute security. If a qualifying security incident occurs, Vital Voice will provide notices as required by applicable law.
Raw voice recordings are not intentionally persisted by Vital Voice in application storage. Retained wellness-journal information remains associated with an active account unless the user deletes entries earlier or requests account deletion. Initiating account deletion in-app or through privacy@vitalvoiceapp.com revokes session access and triggers deletion of user profiles, authentication/session data, stored wellness-journal entries, transcripts or text-derived information, structured wellness data, and other associated production records within 30 days, subject to legal retention exceptions.
Encrypted rolling backups expire on the documented 90-day lifecycle. System event logs are rotated on the documented 60-day lifecycle. Users may request or use available export functionality to obtain retained account and wellness-journal information.
Limitations of liability applicable to the Service are set forth in our Terms of Service. This Privacy Policy does not limit non-waivable rights or remedies available under applicable law.
| Data Category | Scope & Description | Purpose of Collection/Use | Retention Clock | Sold / Shared |
|---|---|---|---|---|
| Account Identifiers | Email address, Replit user ID, age status, session/authentication information. | Account authentication, age verification, account security and service delivery. | Retained during active account; deleted from production systems within 30 days after an account deletion request. | Not Sold / Not Shared for cross-context behavioral advertising |
| Transient Voice Input | Short completed voice check-ins used as a convenient alternative to typing. | Transient acoustic metric extraction requested by the user; speech-to-text transcription. | Transient (0 Days Persistent Storage); temporarily processed in memory and transmitted to approved AI processor. | Not Sold / Not Shared for cross-context behavioral advertising |
| Wellness Journal Information | Transcript/cleaned text, categories, structured user-reported wellness information, AI organization/analysis, timestamps. | Longitudinal wellness trend visualization, journaling, summaries, export and pattern awareness. | Retained during active account; deleted from production systems within 30 days after an account deletion request. | Not Sold / Not Shared for cross-context behavioral advertising |
| System Event Logs | API status/duration, security events, diagnostics and error metadata after log sanitization. | Security, diagnostics and service performance. | 60-day rotation under current policy. | Not Sold / Not Shared for cross-context behavioral advertising |
For questions or statutory privacy requests, please contact our privacy compliance team:
Email: privacy@vitalvoiceapp.com
Corporate Entity: Vital Voice Media LLC, New York, USA