Privacy

VitalUp is operated by Good Wish PTE LTD, Singapore. Company address: 21 TAN QUEE LAN STREET, HERITAGE PLACE, SINGAPORE (188108). For privacy requests, service questions and purchase support, contact [email protected].

VitalUp provides habit tracking, a virtual garden, community features and optional subscriptions. This policy covers our website and apps. For privacy questions or requests, use the Support page linked below. Third-party sign-in and purchase providers also process information under their own privacy policies.

We process account identifiers, email addresses, linked sign-in identities, profile names and avatars; optional birthday month and day; timezone, language, theme and notification preferences; habits, check-ins, private Flags, reflections, statistics, Season Books, garden progress and interactions. We also process subscription status and transaction identifiers, support correspondence, reports, device/session information, notification delivery identifiers, IP addresses and security/error logs. Apple or Google handles payment details; we do not receive your full payment card number.

We use information to authenticate you, synchronize your account, calculate rewards, provide purchased features, deliver requested messages, moderate public content, respond to support, prevent abuse and understand service usage. Where applicable law requires a legal basis, processing relies on performing our agreement, our legitimate interests in operating and securing the service, legal obligations, or consent for optional features. You may withdraw consent through settings or Support without affecting prior lawful processing.

Your email, private habits, check-in records and Flags are not public profile information. Other users may see your display name, approved avatar, public Home and selected badges, approved reflections and social interactions exposed by the relevant feature. Birthday features may reveal that you are within a birthday celebration window. Pending or rejected avatars and reflections are visible to their owner and authorized reviewers, not other users. Turning off discovery does not prevent visits through a direct link. Avoid including sensitive information about yourself or others in content intended for sharing.

Authorized personnel and providers process information as needed for hosting, storage, authentication, transactional email, notification delivery and store purchases. These include Cloudflare storage, Resend email, Apple and Google where those features are used. Information may be processed outside your country; applicable transfer safeguards are required where the law requires them. We may disclose information where legally required or necessary to protect users and the service, or in a business transfer subject to applicable privacy protections. We do not sell personal information.

The website uses browser local storage for login credentials and preferences; native apps use local storage for credentials, preferences and permitted cached data. These support sign-in and app functionality. Signing out removes the local login session; clearing storage may reset preferences or lose access to an unlinked guest account. Optional notifications depend on your settings and device permissions. We do not use habit or reflection text for targeted advertising.

Account data is retained while needed to provide your account and its history. Deleting your account immediately revokes access and stops public visibility and notifications. Private records, statistics, Season Books and associated personal data, including retained copies and backups, are cleaned within 30 days under our deletion process. Security and error logs have a maximum 30-day retention. Non-identifying accounting and transaction records may remain to preserve transaction integrity and prevent purchase reuse. Deletion cannot be undone and does not cancel a store subscription: cancel it separately with Apple or Google. Store records remain subject to that provider’s policy.

You can edit your profile and preferences, control notifications, end sessions and delete your account in account settings. Subject to applicable law, you may request access, correction, a copy or portability, deletion, restriction, or object to processing by contacting Support. We may verify your identity before acting and will respond within applicable legal deadlines. You may complain to your local data protection authority. We use access controls and other security measures, but no online system can guarantee absolute security.

Use of VitalUp is subject to the age and consent requirements of your location. If you are not legally able to agree independently, a parent or guardian must authorize use and any purchase. Please contact Support if a child’s information was provided without required permission. We will update this policy as practices change, show the updated date and communicate material changes through the service where appropriate.