Privacy Policy | Vital Fill LLC

1. Introduction

Vital Fill LLC ("we," "our," or "us") builds software for nutrition, community organizations and Bible study. This Privacy Policy explains what information each of our products handles, and — importantly — what they do not.

This policy covers six products:

VitalFill — our nutrient-tracking mobile app.
GLP-1 Strong — our medication, protein and strength companion for people taking a GLP-1 medication.
NutriRank — our nutrient food-ranking mobile app.
Vital Growth — our children's growth tracker and adult height predictor.
The Unveiling — our Bible study app for the book of Revelation.
Sabbath Stream — our church bulletin and scheduling platform.

These products differ substantially in how they handle information, so each is described separately below.

2. VitalFill (mobile app)

VitalFill has no account. There is no sign-up, no login, no name, and no email address. We cannot identify you, and we hold no profile that could be linked back to you.

2.1 Information stored only on your device

The following never leaves your phone. It is held in the app's local storage and is erased when you delete the app:

Your profile: age, sex, height, weight, activity level, and whether you are pregnant or breastfeeding. These are used solely to calculate your personal daily nutrient targets from published NIH Dietary Reference Intakes.
Your food log and any weight entries you record.
App preferences, such as your selected nutrient.

We hold no copy of any of this. We cannot recover it for you, and it is not backed up to our servers.

2.2 Information sent to our servers

Food searches and barcodes. When you search for a food or scan a product barcode, the search text or barcode number is sent to our server to look up nutrition data. These lookups are not logged against you. If a scanned barcode isn't in the USDA database, our server asks Open Food Facts (an open, community-run product database) what product that barcode is, purely to obtain a product name we can then search in USDA. Only the barcode number is sent, and all nutrition values still come from USDA — never from Open Food Facts.
A device identifier. We use the identifier your operating system provides to apps from our company (Apple's identifierForVendor, or its Android equivalent). This is not your advertising ID and cannot be used to identify you personally. We use it for exactly two purposes: enforcing daily limits on AI-assisted scans, and checking whether an active subscription belongs to your device.
Photo scans (optional). If you photograph a food, that image is sent to our server and forwarded to Anthropic's Claude API, which identifies the food so we can match it against the USDA database. The image is processed in memory and is never written to disk or retained by us.
Voice logging (optional, Pro). Speech is converted to text on your device by your operating system. No audio recording is ever transmitted to us or to anyone else. Only the resulting text — for example, "two eggs and a slice of toast" — is sent to our server and forwarded to Anthropic's Claude API to interpret the foods and quantities. That text is processed in memory and is not retained by us.

2.3 What we retain on our servers

Only two things, and neither contains personal information:

A daily count of AI scans, stored against an irreversible SHA-256 hash of the device identifier. These counters are deleted automatically after two days.
A cached yes/no flag recording whether a device has an active subscription, refreshed approximately hourly.

We do not keep server logs of your food searches, your photos, your speech, or your food log.

2.4 Subscriptions

Optional VitalFill Pro subscriptions are sold and processed by Apple (App Store) or Google (Play Store) and managed on our behalf by RevenueCat, Inc. We never see or store your payment details. RevenueCat receives the device identifier described above so that a purchase can be associated with your device.

2.5 Camera and microphone

VitalFill requests camera access only for barcode and photo scanning, and microphone and speech-recognition access only for voice logging. Both are optional and the app works fully without them. Nothing is captured unless you actively start a scan or press the voice button.

3. NutriRank (mobile app)

NutriRank collects no data whatsoever. It has no account, no login, and no analytics.

The app asks for your age, sex, and whether you are pregnant or breastfeeding purely so it can calculate the correct Daily Value percentages for nutrients. Those answers are used in the moment, on your device, to perform that calculation. They are not saved, not transmitted, and not shared with anyone.

4. Vital Growth (mobile app)

Vital Growth has no account. There is no sign-up and no login, and you never give us a name, an email address or a password. Everything you enter about a child stays on your device.

The app makes one kind of network request, and only one: if you buy or restore a subscription, it checks that purchase with our subscription processor. Nothing about a child is ever part of that request. The app carries no analytics, no crash reporting, no advertising and no tracking of any kind. Section 4.3 sets out exactly what is sent.

4.1 Information stored only on your device

All of the following is written to a single file inside the app's own storage on your phone. It is erased when you delete the app:

Each child you add: the name or nickname you choose, date of birth, and sex. Age and sex are needed because growth references are published separately for boys and girls at every age.
Every height and weight measurement you record, with the date you recorded it for.
Both parents' heights, if you choose to enter them. These are used to calculate the mid-parental range and the adult height prediction.
Daily habit entries: hours of sleep, minutes of activity, whether breakfast was eaten, and milligrams of calcium.

We hold no copy of any of this. We cannot see it and cannot recover it for you, because none of it is ever transmitted — not to us, not to our subscription processor, not to anyone. No request the app makes contains any of it.

4.2 Apple Health

If you permit it, Vital Growth can read sleep from Apple Health so you do not have to enter it by hand. This is read-only and narrow: the app never writes to Apple Health, and asks for nothing other than sleep — not steps, not heart rate, not weight. What it reads is stored in the same local file as everything else and is never transmitted. The feature is entirely optional, and every habit can be entered by hand instead.

4.3 What leaves your device

Nothing reaches our servers. There is no lookup, no sync and no telemetry, and we operate no server that Vital Growth talks to.

One thing does leave the device, and only if you choose to pay. Vital Growth offers optional paid features. Payment is taken by Apple, and the record of what was bought is handled on our behalf by RevenueCat, Inc., a subscription processor in the United States.

When you buy, restore or renew, RevenueCat receives the identifier of the product bought and the receipt Apple issues for it, stored against an anonymous identifier it generates itself for that installation. That is the whole of what it receives. It is never sent your name, your email address, your child’s name, any measurement, any habit entry, or anything read from Apple Health — the app contains no code that would send those anywhere.

The purpose is narrow, and is the only reason the request exists: so that the app can tell that the same Apple Account has already paid when you reinstall it, get a new phone, or use it on a second device. None of it is used for advertising or profiling. Apple, not us, receives your payment details — we never see a card number.

4.4 The report for a clinician

The app can produce a one-page PDF summarising a child's measurements and percentiles. It is generated on your device and handed to the standard iOS share sheet, where you decide what becomes of it. If you email it, message it or save it to Files, that is your action and your chosen app's handling. We are not involved and receive no copy.

5. The Unveiling (mobile app)

The Unveiling collects no data about you. It has no account or sign-in, no analytics, no advertising, no tracking and no crash reporting. Nothing you read, save or search is sent anywhere.

5.1 Information stored only on your device

The whole of Revelation and everything written about it ships inside the app, so reading and searching work offline and make no network requests. The following is kept in the app's own storage on your device and is erased when you delete the app:

Your settings: translation, text size, theme, and whether the Ellen White layer is shown.
The place you last read.
The verses, keys, themes and studies you save.

We hold no copy of any of this and cannot see it.

5.2 Purchases

The Unveiling offers an optional annual subscription and a one-time lifetime purchase. Both are sold and processed entirely by Apple (App Store) or Google (Google Play), under their own privacy policies. No subscription processor or other third party is involved, and we never receive your name, email address or payment details. The app only asks the store whether your store account owns the unlock.

5.3 Links and sharing

Some citations link to a publisher's or author's web page, which opens in your browser only when you tap it; that site has its own privacy policy. When you share a card from the app, your device's share sheet sends it wherever you choose. Nothing passes through us.

5A. GLP-1 Strong (mobile app)

The health information you enter in GLP-1 Strong stays on your phone, protected with encryption. We do not sell it, we do not use it for ads, and the app has no advertising or tracking tools. An account is optional. If you make one, our server keeps only your email address (or your Apple sign-in ID).

What the app saves, and where

You choose what to enter. The app can save:

Your answers when you set up the app: birth year, sex, height, your goal, and safety questions (for example, whether you take insulin, have kidney disease, or have had a fall).
Your GLP-1 and other medications, doses, reminder times, and when you mark a dose as taken.
Your weight, and other readings from Apple Health if you connect it.
Your protein checklist, daily check-ins and symptoms.
Your Stay Strong sessions and strength check results.

All of this is saved only on your phone, in a database protected with encryption. The key is kept in your iPhone's Keychain. Our servers do not receive it. Reminders are local notifications made on your phone.

Apple Health

If you choose to connect Apple Health, the app reads only the types you allow (such as weight, steps and walking speed). If you turn it on, it can also save weights you type into Apple Health. This information is saved only on your phone. It is never used for advertising, never sold, and never saved in iCloud. You can turn this off at any time in the app, and you can delete what we read.

If you make an account

An account is optional. If you make one, our server keeps your email address (or the private ID Apple gives us if you sign in with Apple), a short-lived sign-in code, and a sign-in token for your device. No health information is sent to our server. We use your email only to send sign-in codes and to answer you if you write to us. If you delete your account, we delete this information from our server. Sign-in codes are sent through our email provider, Sender, which sees your email address and the code and nothing else.

Who we share it with

No one. Your health information never leaves your phone unless you send it yourself, for example by sharing a doctor report from the app. We may share information if the law requires it.

Your choices

Look at it and change it. Settings, then Review my answers. You can change any answer, weight or medication.
Export it. Settings, then Export my data, saves a copy.
Delete it. Settings, then Delete my data, removes everything from your phone. Deleting the app also removes it.
Turn things off. Notifications, Apple Health and optional usage counts can each be turned off at any time.

Consumer Health Data Privacy Policy (GLP-1 Strong)

This part is for residents of Washington, Nevada, Connecticut and other places with consumer health data laws, including the Washington My Health My Data Act. It says the same things as above in the form those laws ask for.

What we collect and why. Health answers (medications and doses, safety answers, symptoms, check-ins) to show your schedule, send reminders, and choose safety messages and exercises that fit you. Weight and body measurements, typed in or from Apple Health, to show your progress and work out your protein goal. Steps, walking speed, strength sessions and chair stand results, to show your progress. All of it is saved only on your phone.
Where it comes from. From you, and from Apple Health only if you connect it.
Who we share it with. No one. We do not share, rent or sell consumer health data, and we do not use geofencing. If we ever want to share it, we will ask for your separate, written consent first, and you can say no and still use the app.
Your consent. We ask for your consent to collect your health information when you set up the app, separately from the terms and from the optional usage counts. You can withdraw it at any time in Settings, and you can delete what is saved.
Your rights. You can ask to confirm whether we collect your consumer health data, see it, withdraw consent, and have it deleted. Almost all of it is on your phone, where you can do this yourself in Settings. For anything on our server, or if you want help, email admin@vital-fill.com. We will answer within 45 days. If we say no, you can appeal by writing to the same address, and we will answer within 60 days. If you are still not satisfied you may contact your state attorney general.

Please do not put health information in an email to us.

GLP-1 Strong is for adults. It is for general wellness, does not give medical advice, does not diagnose or treat any condition, and does not give dosing advice. It is not for emergencies and does not monitor you in real time. In an emergency, call 911.

6. Sabbath Stream (church platform)

Unlike our mobile apps, this platform is account-based and does hold personal information:

Account information: name, email address, and organization affiliation provided during onboarding.
Organizational content: bulletin text, speaker schedules, and participant roles entered by your organization.
Technical data: IP addresses and basic request information retained for server security.

We share this only with the providers needed to operate the service:

Stripe — payment processing. We do not store card numbers.
Brevo — delivery of email and SMS notifications to participants.

7. Where your data is processed

Everything Vital Growth records about a child is processed only on your own device and is never transmitted. Its one exception is the subscription check described in section 4.3, which is processed by RevenueCat in the United States and carries no health information and nothing about any child.

Everything The Unveiling stores is likewise processed only on your device. Its purchases are handled by Apple or Google directly.

For our other products, our servers are operated by Hetzner Online GmbH and located in Falkenstein, Germany, so requests from those apps are processed in the European Union. Anthropic (AI food recognition), RevenueCat (subscriptions), Open Food Facts (barcode-to-name lookup), Stripe, and Brevo process data in their own regions under their respective privacy policies.

8. What we never do

We do not sell your data, and we never have.
We do not use advertising networks, and our apps contain no ads.
We do not use third-party analytics or tracking SDKs in our mobile apps.
We do not track you across other companies' apps or websites.
We do not build advertising or marketing profiles.

9. Children's privacy

VitalFill and NutriRank are not directed to children under 13, and the nutrient reference values they use are defined for ages 13 and above. We do not knowingly collect information from children under 13, and since neither app holds personal information at all, no such data is collected in any case.

The Unveiling is a general-audience Bible study app. It collects no information from anyone, so none is collected from children.

Vital Growth is different, deliberately. It is a growth tracker for children, intended to be used by a parent or carer about their child. A person setting the app up about themselves must be 13 or older; anyone younger is asked to have a parent or carer add them instead. A parent may add a child of any age the growth reference covers.

This does not change what reaches us, which is nothing. Everything Vital Growth records about a child — name, date of birth, sex, measurements and habits — stays on the device and is never transmitted to us or to anyone else. We hold no information about any child, and there is no server of ours on which such information could exist.

10. Your rights and choices

With VitalFill, NutriRank, Vital Growth and The Unveiling you are in complete control, because everything lives on your device and nothing is held by us. Deleting the app permanently erases everything it held — in Vital Growth's case, every child, every measurement and every habit entry. VitalFill's Profile screen also offers a "Reset Data" option that clears everything immediately. In Vital Growth, deleting a child removes that child's measurements and habit entries with them.

Because we never receive this information, there is nothing for us to access, correct or delete on your behalf, and no request to us could produce it.

For Sabbath Stream, you may request access to, correction of, or deletion of your personal information at any time by contacting us at the address below. Depending on where you live you may have additional rights under the GDPR or the CCPA; we honour these regardless of your location.

11. Health information disclaimer

VitalFill and NutriRank are informational tools. They are not medical devices and do not provide medical advice, diagnosis, or treatment. Nutrient values come from the USDA FoodData Central database and daily targets are derived from NIH Dietary Reference Intakes. Always consult a qualified healthcare professional about your individual dietary needs.

Vital Growth is likewise an educational tool and not a medical device. It does not diagnose, treat or give medical advice, and it is not a substitute for seeing a clinician who can examine your child. Its percentiles come from the CDC 2000 growth reference and its adult height prediction from the published Khamis-Roche method, each shown with the uncertainty the method carries. It reads height and weight only, so it cannot see the signs of development a clinician examines for, and it says so on screen. The daily figures shown beside its habits are general health guidance for children, not statements about height. Always consult a qualified healthcare professional about your child's growth.

GLP-1 Strong is for general wellness. It is not a medical device. It does not give medical advice, does not diagnose or treat any condition, and does not give dosing advice: it records the dose you enter and shows reminders for the times you choose, and you should always follow your prescription label and ask your doctor or pharmacist. Its protein goals, exercises and messages are general guidance, not a substitute for your own clinician. It is not for emergencies and does not monitor you in real time. In an emergency, call 911.

12. Changes to this policy

If we change how we handle information we will update this page and revise the effective date above. Material changes affecting our mobile apps will also be noted in the app's release notes.

13. Data sources & credits

Nutrient values: USDA FoodData Central — U.S. Government public-domain data. Every nutrient figure in our apps comes from here.
Daily targets: NIH Office of Dietary Supplements — Dietary Reference Intakes.
Growth percentiles: CDC 2000 Growth Charts — U.S. Government public-domain data, used for stature, weight and BMI for age.
Adult height prediction: the Khamis-Roche method — Khamis HJ, Roche AF, Predicting adult stature without using skeletal age: the Khamis-Roche method, Pediatrics 1994;94:504–507.
Habit guidance: the American Academy of Sleep Medicine consensus on sleep duration for children, the WHO guidelines on physical activity, and the NIH/IOM Dietary Reference Intakes for calcium. These are recommendations for children's health generally; none of them is a statement about stature.
Barcode product names: Open Food Facts, used under the Open Database License (ODbL). We use it only to identify what product a scanned barcode refers to; nutrition is then looked up in USDA.

14. Contact Us

Questions about this Privacy Policy, or a request regarding your information:

Vital Fill LLC

Email: admin@vital-fill.com

West Lebanon, New Hampshire, USA