Privacy Policy

Version 2.0 | Effective: 2026-08-02

1. Data Controller

Serendib Fortunes Pvt Ltd. is the data controller responsible for your personal data within the VitaeGene platform.

2. Data We Collect

We collect and process the following categories of data:

• Profile information — name, email, age group, country, religion, lifestyle, conditions, allergies, food preferences and goals.
• Nutrition records & meal photographs — meal logs, food photos, AI-estimated nutrients, cooking method and accuracy scores.
• AI conversations — prompts and responses from AI chat, food advisor and wellness tools.
• Supplement information — supplements you log and supplement label scans.
• Health Monitor readings — blood glucose, blood pressure, pulse, and related notes you enter or import, including from Apple Health and compatible Bluetooth devices.
• Practitioner notes — comments shared with you by a linked practitioner within the platform.
• Family profiles — family members and shared records you create.
• Apple Health imports & device synchronisation — data imported from Apple Health or paired devices, with your consent.
• Payment records — subscription and credit purchases processed by third-party processors (e.g. PayPal).
• Referral information — referral codes, links and referral tracking.
• Credit wallet & subscription history — VG Credit balances, transactions and subscription status.
• Wellness Vault records — prescriptions, lab reports and diagnosis cards you store in the app. You own these records; VitaeGene holds them on your behalf.
• Usage data — device type, locale and session information used to operate and secure the platform.

3. Why We Collect It

To provide wellness insights, nutrition analysis, personalised plans, reports, health monitoring, family features, and to operate subscriptions, referrals, payments and security.

4. Legal Basis

We process data on the basis of performance of our contract with you, your consent (separately for marketing, push, AI analysis, practitioner sharing, Apple Health and family sharing), and our legitimate interests in operating and securing the platform.

5. Where Data Is Stored

Data is stored on secure cloud infrastructure provided through the Base44 platform. Health Monitor data is stored only when you supply or import it.

6. How Long We Retain Data

Retention periods are set out in the Data Retention Policy. Account data is kept while your account is active and deleted or anonymised after account closure subject to legal/financial retention obligations.

7. Who Can Access It

You; VitaeGene personnel as necessary; practitioners you explicitly authorise; family members you add within shared features; and service providers under contract (storage, AI providers, payment processors). We minimise and, where possible, de-identify data shared with AI providers.

You own all records stored in your Wellness Vault. Practitioners may access Wellness Vault records only with your explicit, time-limited, revocable permission; all such access is logged and auditable.

8. AI Data Usage

See the AI Usage Policy for how AI analyses your information, how prompts are processed, what may be transmitted to AI providers, and the security measures applied.

9. Cookies

See the Cookie Policy.

10. Your Rights

You may request access, correction, deletion, data portability, and to withdraw consent at any time (withdrawal does not affect prior lawful processing). Submit requests through the app or to VitaeGene support.

11. Children

The platform is not directed to children under 13 (or the minimum age in your country). Family accounts for minors must be managed by a parent or guardian.

12. Security

We apply reasonable technical and organisational measures. No system is perfectly secure.

13. International Transfers

Your data may be processed outside your country; we apply appropriate safeguards where required.

14. Changes

We will update this Policy and require acceptance of material changes.

© 2026 Serendib Fortunes Pvt Ltd. | VitaeGene