Privacy Policy

Vitalis is designed to be private by default. Every calculation — BMI, BMR, TDEE, body fat, and the rest — runs inside your browser on your own device. We do not need an account, and we do not collect your health data unless you deliberately choose to send it to us.

• The values you type into the calculator (age, gender, height, weight, activity level, measurements) are processed locally and never leave your browser on their own.
• Progress entries, saved measurements, unit preferences, and your light/dark theme choice are stored in your browser's local storage.
• Clearing your browser storage, or using your browser's “clear site data” option, permanently removes this information. We cannot recover it.

On the results screen there is an optional form. If — and only if — you fill it in and tick the consent box, we store the following in our secure database:

• your name and email address,
• any message you write,
• and, if you tick the second box, the measurements and calculated results shown on that screen.

We use this only to reply to you and to understand how the calculator is used. We do not sell it, rent it, or share it with advertisers. Nothing is submitted if you leave the form untouched.

Our retention rules are simple and enforced automatically:

• Shared submissions are deleted automatically 12 months after they are received. A scheduled daily job performs this deletion; it is not a manual process.
• On-device data (progress history, measurements, preferences) is kept until you delete it, either from within the app or by clearing your browser storage. There is no server copy.
• Earlier deletion on request — if you ask us to remove your submission before the 12 months elapse, we delete it, normally within 30 days.
• We keep no separate archives of submissions beyond routine, short-lived infrastructure backups held by our hosting provider.

Access is restricted at the database level, not just in the interface. Visitors can only submit a record; they cannot read, edit, or delete any record — including their own. Reading and deleting requires the site owner's account, which holds an explicit admin role and must pass two-factor authentication with a time-based one-time code on every sign-in. No other account has access.

Vitalis does not use advertising cookies or third-party tracking pixels. The only data kept in your browser is the local storage described above, plus a session token if you sign in as the site owner.

You can ask us to confirm what we hold about you, to correct it, or to delete it. Because we only ever hold what you chose to send through the optional form, this is usually a single record. Contact us using the email address you supplied, or through the message form, and we will act on your request within 30 days.

Vitalis is an educational fitness and wellness tool. It does not diagnose, treat, or monitor any medical condition, and the results are estimates based on published population formulas. Always speak to a qualified healthcare professional before acting on any figure shown here.

If this policy changes we will update the date at the top of this page. Continuing to use Vitalis after a change means you accept the updated policy.