GDPR & Your Data Rights

Vitantra is built with privacy at its core. This page explains your rights under GDPR and how to exercise them easily and quickly — on any tier, including free.

Your Rights Under GDPR

As a resident of the European Economic Area (EEA) or the United Kingdom, you have the following rights:

• Right of Access (Article 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Article 16): Correct inaccurate or incomplete data.
• Right to Erasure / “Right to be Forgotten” (Article 17): Request deletion of your personal data — available to all users on all tiers, including free, at any time.
• Right to Restriction of Processing (Article 18): Request that we limit how we use your data in certain circumstances.
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format (JSON or CSV).
• Right to Object (Article 21): Object to processing based on legitimate interests.
• Rights Related to Automated Decision-Making (Article 22): Vitantra’s AI plans are wellness recommendations and are not solely automated decisions with legal or similarly significant effects.

Health Data (Special Category)

Your health and wellness data is classified as “special category data” under GDPR Article 9. We process this data only with your explicit consent, which you grant when you create your account. You may withdraw consent at any time by deleting your account or adjusting your data settings.

Data Processing Agreements

All third-party services that process personal data on our behalf operate under Data Processing Agreements (DPAs) complying with GDPR Chapter IV. These include our payment processors, cloud infrastructure providers, and wearable platform integrations.

Data Transfers Outside the EEA

Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay, as required by GDPR Article 33 and 34.

How to Exercise Your Rights

Within the app, go to Account Settings → Data & Privacy for self-service options including data export and account deletion. By email, contact support@vitantra.ai with your request. We will respond within 30 days at no charge.

Supervisory Authority

You have the right to lodge a complaint with your national data protection authority. In the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk.

Contact

For GDPR enquiries, contact us at support@vitantra.ai. We respond within 10 business days.