Legal
Privacy Policy
Effective Date: June 18, 2026 · Last Updated: June 18, 2026 · Jurisdiction: State of Ohio, United States
Summary: ViCatus collects health and usage data solely to provide and improve its services. We do not sell your personal data. We do not share your data with third parties except as necessary to operate the app. Your health data is yours.
1. Who We Are
ViCatus ("we," "us," "our") is a mobile health and fitness application operated by an individual developer based in Columbus, Ohio, United States. The app is accessible via iOS and Android platforms and the website vicatus.com. For privacy inquiries, contact us at support@vicatus.com.
2. Scope of This Policy
This Privacy Policy applies to all users of the ViCatus mobile application, the ViCatus website (vicatus.com), and any related services. By using ViCatus, you agree to the collection and use of information in accordance with this policy. If you do not agree, do not use the app or website.
3. Information We Collect
3.1 Information You Provide Directly
- Account information: name, email address, password
- Health profile: age, gender, height, current weight, goal weight
- Food and meal entries you log or describe within the app
- Workout and exercise entries you log within the app
- Weight measurements you manually enter
- Any communications you send to us (support emails, feedback)
3.2 Information Collected Automatically
- Step count and movement data via your device's built-in sensors (accelerometer, pedometer)
- Device information: device type, operating system, unique device identifiers
- App usage data: features used, session duration, frequency of use
- Log data: IP address, browser type, pages visited, time and date of visits
- Crash reports and diagnostic data
3.3 Information from Third-Party Services
- Payment processing data via RevenueCat (subscription status, purchase history — we do not store full payment card details)
- Nutritional and recipe data processed via Rork AI API based on your meal descriptions
- Product listings and pricing data from retail marketplace partners (Amazon, Walmart, Target, GNC, iHerb, Vitamin Shoppe, and others)
4. How We Use Your Information
- To provide, operate, and maintain the ViCatus app and its features
- To calculate your calorie deficit, TDEE, real fat loss, and projected weight
- To generate AI-powered meal suggestions and workout logs personalized to your goals
- To process subscription payments and manage your account
- To display relevant health products in the marketplace
- To improve, debug, and optimize the app based on usage patterns
- To respond to your support requests and communications
- To send you service-related notifications (not marketing, unless you opt in)
- To comply with legal obligations
5. How We Share Your Information
We do not sell, rent, or trade your personal information to any third party. We share data only in the following limited circumstances:
- Service providers: RevenueCat (payment processing), Rork AI (nutritional AI processing), hosting and infrastructure providers — solely to operate the app
- Marketplace partners: When you click on a product in the marketplace, you are redirected to a third-party retailer. We may share a session identifier or referral code. We do not share your health data with retailers.
- Legal compliance: We may disclose information if required by law, court order, or governmental authority
- Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred. You will be notified before any such transfer occurs
- Protection of rights: To protect the rights, property, or safety of ViCatus, our users, or the public
6. Health Data — Special Protections
Important: ViCatus collects sensitive health information including weight, calorie intake, and physical activity. This data is used exclusively to provide the app's core functionality. It is never sold, never used for advertising targeting, and never shared with insurance companies, employers, or any party that could use it to your detriment.
We apply additional safeguards to health data including encryption at rest and in transit, strict access controls, and minimal data retention periods.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing support@vicatus.com. We will process deletion requests within 30 days. Some data may be retained longer where required by law or for legitimate business purposes such as fraud prevention.
7a. Data Retention — Specific Health Data
We retain specific categories of data as follows:
- Weight history and body measurements: Retained until account deletion unless you manually archive or delete individual entries within the app
- Meal and food logs: Retained for the duration of your account. You may delete individual entries at any time
- Workout logs: Retained for the duration of your account. You may delete individual entries at any time
- Step and activity data: Rolling 90-day history retained by default
- Account information: Retained until account deletion request is processed
- Payment records: Retained for 7 years as required for tax and financial compliance
- Support communications: Retained for 2 years after resolution
8. Your Rights
For All Users
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Withdraw consent at any time where processing is based on consent
- Opt out of non-essential communications
For California Residents (CCPA)
You have the right to know what personal information is collected, the right to delete personal information, the right to opt-out of sale (we do not sell data), and the right to non-discrimination for exercising your rights.
For EU/EEA Residents (GDPR)
You have the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority. Our legal basis for processing is your consent and the performance of our contract with you.
8a. Data Processors
We use the following third-party data processors who may handle your personal data on our behalf:
- Rork AI: Processes meal descriptions and generates nutritional data via AI. Data is transmitted via encrypted API. Subject to Rork AI’s own data processing terms.
- RevenueCat: Manages subscription state, purchase validation, and entitlements. Handles payment transaction data on behalf of Apple and Google. Does not store full card details.
- Apple App Store / Google Play: Process all in-app payments. Governed by their respective privacy policies.
- Cloud hosting and infrastructure providers: Our app infrastructure may be hosted on third-party cloud platforms (such as AWS, Google Cloud, or similar). These providers act as data processors under strict data processing agreements and do not use your data for their own purposes.
- Retail marketplace partners (Amazon, Walmart, Target, GNC, iHerb, Vitamin Shoppe, and others): When you interact with marketplace listings, session and referral data may be shared. Your health data is never shared with retailers.
All data processors are contractually bound to process your data only as directed by us and in compliance with applicable privacy laws.
9. Data Security
We implement industry-standard security measures including SSL/TLS encryption for data in transit, encryption for sensitive data at rest, secure API authentication, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and disclaim liability for unauthorized access beyond our reasonable control.
10. Children's Privacy
ViCatus is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will delete it immediately. If you believe a child has provided us with their data, contact us at support@vicatus.com.
11. Third-Party Links and Services
The ViCatus marketplace contains links to third-party retailers including Amazon, Walmart, Target, and others. Once you leave the ViCatus app or website, this Privacy Policy no longer applies. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review their privacy policies before making any purchases.
12. International Users
ViCatus is operated from the United States. If you access the app from outside the United States, your data will be transferred to and processed in the United States. By using the app, you consent to this transfer. We take reasonable steps to ensure your data receives adequate protection regardless of where it is processed.
12a. Changes to the Service
ViCatus is a growing application. We may add, modify, or remove features at any time. We will endeavor to notify users of significant changes through in-app announcements or email where practical. Continued use of the Service after feature changes constitutes acceptance of the updated Service. Features described on the website or in marketing materials represent current or planned functionality and do not constitute a contractual commitment to maintain any specific feature indefinitely.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notification through the app or via email. Your continued use of ViCatus after changes become effective constitutes acceptance of the revised policy.
14. Contact Us
For any privacy-related questions, requests, or concerns, contact us at:
- Email: support@vicatus.com
- Website: vicatus.com
- Location: Columbus, Ohio, United States