Privacy Policy
Vektor Fitness LLC ("Vektor," "we," "us," or "our") operates the Vektor mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have. By using the App, you agree to the practices described here.
1. Information we collect
Account information
When you create an account, we collect your name, email address, and authentication credentials. Authentication credentials are stored in the iOS Keychain on your device and in our backend, which is hosted by Supabase.
Profile information
Information you enter into your Vektor profile — for example, age, height, weight, training goals, injuries, and unit preferences.
Training data
Workouts, sets, reps, weights, completion history, personal records, progression data, and form ratings you log in the App.
Apple Health data (with your permission)
If you grant HealthKit permission, we read the following from Apple Health: sleep hours, heart rate variability (HRV), resting heart rate, body mass, and active energy. We use this data to generate readiness scores and adapt your training. We read this data only. We do not write data back to Apple Health.
AI interactions
Messages you send to Vektor Coach, together with the AI-generated workouts and coaching responses that come back to you.
Usage and device information
If analytics are enabled, we collect app events and technical metadata such as device model, operating system version, app version, and an anonymous device identifier. Analytics are optional and are disabled by default unless configured.
2. How we use information
- To operate the App and provide the features you request
- To generate personalized workouts and coaching through our AI systems
- To sync your data across your devices
- To process subscriptions where applicable
- To communicate with you about your account, including transactional emails
- To diagnose issues, improve the App, and develop new features
- To comply with legal obligations
3. Third-party service providers
We use the following providers to operate the App. Each processes information on our behalf under their own privacy commitments.
- Supabase — backend database, authentication, edge functions
- RevenueCat — subscription management
- Google Gemini — AI inference, accessed through our Supabase AI proxy. Raw data is not sent directly from your device to Google.
- Amplitude — optional product analytics, only active if configured
- Apple — App Store, Sign in with Apple, HealthKit, push notifications
4. What we do not do
- We do not track you across other apps or websites
- We do not sell your personal information
- We do not use ad networks or advertising SDKs
- We do not write data back to Apple Health
- We do not use your training data or chat messages to train third-party AI models
5. Your rights and choices
Account deletion
You can delete your account and all associated data from within the App. Open Settings and choose Delete Account. Deletion removes your profile, workouts, chat history, and entitlements from our primary systems promptly.
Access, correction, portability
You may request access to, correction of, or a copy of your personal information by emailing hello@vektorsignal.com.
GDPR and CCPA
If you live in the European Economic Area, the United Kingdom, or California, you have additional rights under applicable data-protection law, including the right to object to processing and the right to lodge a complaint with a supervisory authority. Contact us at hello@vektorsignal.com to exercise any of these rights.
HealthKit data
You can revoke HealthKit permission at any time in iOS Settings → Privacy & Security → Health → Vektor. Revoking the permission stops new reads immediately; previously imported data can be removed by deleting your account.
6. Data retention
We retain your information for as long as your account is active. When you delete your account, we remove your data from our primary systems promptly. Backup copies are purged on our normal backup rotation.
7. Security
We use industry-standard safeguards, including encryption in transit (TLS), encryption at rest, authentication via Sign in with Apple or email, and access controls on backend systems. No system is perfectly secure, so we cannot guarantee absolute security, but we take the safeguarding of your data seriously.
8. Children's privacy
Vektor is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact hello@vektorsignal.com and we will delete it.
9. International users
Vektor is operated from the United States. If you use the App from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data-protection laws than your home country.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by email. The "Last updated" date at the top reflects the most recent revision.
11. Contact
Vektor Fitness LLC
Colorado, USA
hello@vektorsignal.com