Privacy Policy

Effective October 14, 2026

1. Scope and contact

This Privacy Policy describes how information is handled when you use the iOS app VitalScan: Heart Rate Monitor and its related services. For privacy questions or requests, contact yanjin25888@163.com.

2. Profile information and reports

You can enter your sex, age, height, weight, optional waist measurement, and unit preferences. VitalScan uses this information for profile features and calculates BMI and waist-to-height ratio on your device. The app stores your profile, onboarding progress, and measurement reports in local app storage. Reports include readings, availability and quality information, date, time zone, method, source, and a snapshot of your profile.

VitalScan does not provide user account registration or report syncing. You can edit your profile, export selected records as CSV or JSON, delete an individual report, or delete all measurement history. Deleting measurement history keeps your profile and settings.

3. Camera scans and VitalLens

After you start a scan and grant camera permission, the app processes camera frames and sends preprocessed video-frame data to the VitalLens API operated by Rouast Labs Pty Ltd. VitalLens returns wellness estimates for heart rate, respiratory rate, and HRV SDNN, along with quality information. VitalScan does not use these images to identify you. Measurement reports do not store camera video or face photographs.

Rouast Labs states in its Privacy Policy that API input video or images and output physiological readings are discarded from temporary memory after processing, while operational and billing metadata is retained.

4. Apple Health and local reminders

After you connect Apple Health and grant permission, VitalScan reads recent heart rate, respiratory rate, and HRV SDNN samples and displays them on a separate screen. VitalScan does not write data to Apple Health or combine these samples with face-scan reports. You can change Health permissions in Apple system settings. Local reminders use the weekdays and local time you select and require notification permission.

5. Exports and support

When you export CSV or JSON, you choose the file destination through the system share sheet. Copies received or stored by other apps or people are outside VitalScan's control over local history.

Information you provide when contacting support is used to respond to your request. Do not send face video or health information that is not needed to explain the issue.

6. Device identifiers and analytics

VitalScan generates a pseudonymous customer or device identifier (CUID) and stores it in app preferences and Keychain. The app integrates AppsFlyer, Firebase Analytics, and the Meta SDK. SDK initialization is controlled by the app's release configuration. When initialized, these integrations process the CUID, app and device information, install and open events, and attribution information. The app reads the advertising identifier (IDFA) only after you grant permission through App Tracking Transparency (ATT). Health readings are not included in marketing events.

7. How information is used and shared

Profile information supports app features and local BMI and waist-to-height calculations. Preprocessed scan frames are sent to VitalLens to generate estimates. When analytics integrations are initialized, app and device information and usage events support attribution and analytics. With your permission, Apple Health samples are provided by Apple HealthKit. Exported files are handled by the destination you choose in the system share sheet.

8. Storage, deletion, and security

Local reports remain in the app until you delete them or remove local app data. Report archives use iOS file protection and are excluded from system backups. The CUID stored in Keychain may remain after the app is removed. Deleting local measurement history does not delete exported copies, source data in Apple Health, or metadata held by third-party services. You can delete individual reports or all measurement history in the app.

9. Privacy requests

Send requests to access, correct, or delete personal information to yanjin25888@163.com. You can also edit your profile, export or delete local records in the app, and manage camera, Apple Health, and notification permissions in iOS settings.

10. Effective date

This Privacy Policy is effective October 14, 2026.