iVital stores all your health data locally on your iPhone. We have no servers that hold your data. We do not use analytics, advertising, crash reporting, or any third-party SDKs. HealthKit access is read-only and requires your explicit permission. No data is ever shared with or sold to third parties. You are in complete control.
Who We Are
iVital is an iOS application developed by iSuite ("we," "us," "our"). This Privacy Policy describes how iVital handles information in connection with its use on your iOS device. It applies to the iVital app and this website at ivital.app.
If you have questions, write to support@ivital.app.
Information You Enter Into iVital
iVital is an emergency medical card and medication tracker. To be useful, it asks you to enter the following categories of information, which are stored locally on your device using Apple's SwiftData framework:
- Emergency profile: full name, date of birth, blood type, organ donor status, photo, home address, languages spoken, preferred hospital, special instructions (e.g. DNR, CPR directives), doctor notes
- Medical conditions (e.g. epilepsy, diabetes, pacemaker) including severity notes
- Allergies with severity level (mild, moderate, severe / anaphylaxis)
- Medications with dosage, frequency, prescriber, start date, stock count, reminders, and critical-medication flag
- Emergency contacts: name, relationship, phone number, address
- Insurance card details and photographs of front / back (Pro feature)
- Family member profiles containing the same categories above (Pro feature, up to five additional profiles)
Everything listed above is stored only on your device. iVital does not operate servers that hold, copy, or index this information. It is never transmitted over a network by the app.
Apple HealthKit Access (Read-Only)
iVital integrates with Apple HealthKit for one purpose: to pre-fill your emergency profile using data you have already entered into Apple Health and Medical ID. This integration is read-only. iVital does not write any data back to HealthKit or the Medical ID.
What iVital reads from HealthKit
With your explicit permission, iVital reads the following HealthKit characteristics once, at your request:
- HKCharacteristicTypeIdentifier.bloodType
- HKCharacteristicTypeIdentifier.dateOfBirth
- HKCharacteristicTypeIdentifier.biologicalSex
These values are copied into your local iVital profile so you do not have to re-enter them. You can always edit or delete the imported values within iVital — your Apple Health record is not affected.
What iVital never does with HealthKit
- Never writes any data to HealthKit or the Medical ID
- Never reads HealthKit in the background — reads only happen when you tap "Import from Apple Health"
- Never requests access to any HealthKit data beyond the three characteristics listed above
- Never shares HealthKit data with any other app, service, or third party
Health data obtained through HealthKit is never used for advertising or other use-based data mining purposes beyond providing health and fitness services. It is never shared with, sold to, or transmitted to any advertising platform, data broker, information reseller, or any other third party.
Other Permissions iVital Requests
| Permission | Purpose | Required? |
|---|---|---|
| Notifications | Local medication reminders you schedule. All notifications are generated on-device. No content is sent to any server. | Optional (Pro) |
| Contacts | Import an emergency contact from your device's contact list, when you tap "Add from Contacts." | Optional |
| Camera | Photograph insurance cards. Images are stored only on your device. | Optional (Pro) |
| Photo Library | Choose a profile photo or an existing insurance card image from your library. | Optional |
Every permission can be declined at install time or revoked later in iOS Settings. The core emergency card works even if all permissions are declined.
What iVital Does NOT Collect
iVital operates with a zero-collection design. Specifically, iVital does not:
- Create user accounts or require you to sign in with an email, phone number, or Apple ID
- Transmit any information you enter — name, date of birth, medical data, contacts, photos — to any server owned or operated by us or by any third party
- Use any analytics, telemetry, attribution, or product analytics SDK (no Firebase Analytics, no Mixpanel, no Amplitude, no Meta SDK, no AppsFlyer, no Adjust — none)
- Use any crash reporting or performance monitoring SDK (no Sentry, no Crashlytics, no Bugsnag)
- Use any advertising or advertising-attribution SDK
- Request the AppTrackingTransparency permission, because there is no tracking to perform
- Access your location
- Access, read, or send your call history, SMS, email, calendar, or browsing history
- Fingerprint your device or derive any identifier about you
Subscriptions and Payments
iVital offers an optional Pro subscription, either monthly or annual, with a 14-day free trial. Subscriptions are processed entirely by Apple through the App Store and StoreKit framework.
- iVital never receives, collects, or stores your payment card, billing address, Apple ID, or any financial information
- Apple shares only anonymous transaction status (active, cancelled, expired) with the app so it can unlock Pro features
- Apple's privacy policy governs your transaction — see apple.com/legal/privacy
- You can cancel your subscription at any time in iOS Settings → Apple ID → Subscriptions
Widgets and App Groups
iVital provides Lock Screen and Home Screen widgets showing a summary of your emergency profile (blood type, critical allergies, conditions, emergency contact). These widgets read data from a local App Group container (group.app.isuite.ivital) shared between the main app and the widget extension, both installed on the same device. This container never leaves your device.
Data Retention and Your Rights
Because iVital stores everything on your device, you have direct control over your data at all times.
- To edit or delete individual items: open iVital and use the Edit screens
- To delete all iVital data: delete the iVital app from your iPhone. iOS will permanently remove the app's local storage, including SwiftData and the App Group container. This is irreversible — there is no cloud backup
- To revoke HealthKit access: go to iOS Settings → Health → Data Access & Devices → iVital and turn off read permissions
- To revoke other permissions: iOS Settings → Privacy & Security
We do not hold data about you, so there is no "account" to close and no request form required to delete data. Deletion is immediate and fully under your control.
Children's Privacy
iVital is rated 4+ on the App Store. It is not directed at children under 13, and it does not knowingly collect personal information from anyone (including children) because it does not collect data at all. Parents may create emergency profiles for their children within the app; this data is stored on the parent's device and remains subject to this policy.
Security
Because iVital stores data locally on your iOS device, the security of your data depends on the security of your device. We strongly recommend:
- Enabling a device passcode, Face ID, or Touch ID
- Keeping iOS up to date
- Using iCloud Keychain or a password manager for your Apple ID
When you share your emergency card as a PDF or add it to Apple Wallet, you are voluntarily exporting your data outside iVital. Once exported, the file is your responsibility to protect.
International Users and Legal Bases
iVital does not transmit personal data across borders because it does not transmit personal data at all. However, users in the European Union, United Kingdom, Turkey (under KVKK), California, and other jurisdictions with data protection laws retain the following rights under those laws:
- Right of access, rectification, erasure, restriction, and portability
- Right to object and to withdraw consent at any time
Because all personal data remains on your device, you can exercise all of these rights directly inside the app or by deleting the app. If you believe we are not complying with applicable law, contact support@ivital.app.
Changes to This Policy
We may update this Privacy Policy to reflect product changes or legal requirements. Material changes will be highlighted on this page with a new "Last updated" date. Continued use of iVital after the updated date constitutes acceptance of the new policy.
Contact
For any questions about this Privacy Policy, data practices, or to report a privacy concern:
- Email: support@ivital.app
- Website: ivital.app
- Parent company: iSuite (isuite.app)