Privacy Policy

Vanta is a personal performance app for tasks, habits, food and water tracking, supplements, workouts, analytics, recovery data, WHOOP syncing, and encrypted journaling.

• Account data such as email address, username, authentication metadata, and optional profile name.
• Profile data such as height, weight, targets, preferences, timezone, and onboarding settings.
• Tasks and productivity data including task titles, due dates, priorities, subtasks, categories, and completion status.
• Habit data including food logs, calories, protein, water, supplements, custom habits, and daily completion data.
• Workout data including workout plans, exercises, scheduled sessions, logs, completion history, and workout sessions.
• Analytics data such as streaks, summaries, progress metrics, daily scores, and trend calculations.
• WHOOP data if connected, including sleep, recovery, strain, HRV, resting heart rate, respiratory rate, workouts, body measurements, and raw WHOOP API data where applicable.
• Journal data including encrypted journal payloads and metadata such as timestamps, record identifiers, mood, tags, and word count.

Journal content is designed to be encrypted client-side before storage. The journal PIN itself is not stored. If a user forgets the journal PIN, encrypted journal content may not be recoverable.

Some metadata may still exist, such as timestamps, record identifiers, tags, mood, or word count, depending on the journal entry and app version.

• Provide Vanta app functionality.
• Authenticate accounts and protect sessions.
• Display tasks, habits, workouts, journal entries, and analytics.
• Sync and display WHOOP data when a user connects WHOOP.
• Save user progress and preferences.
• Maintain security, prevent abuse, and troubleshoot app behavior.
• Improve the personal tracking experience through app-generated summaries and calculations.

• Supabase is used for authentication, database, and related backend services.
• Vercel is used for hosting the website and server routes.
• WHOOP is used only if a user connects a WHOOP account and authorizes access.
• Google Play and Android distribution services may process app distribution and install-related information for Android users.

Vanta does not claim to use analytics or crash tools unless they are actually enabled in production.

Vanta does not sell user data.

Data may be processed by service providers needed to operate the app. WHOOP data is accessed only after user authorization and depends on WHOOP availability and permissions.

• Traffic is transmitted over HTTPS.
• Supabase authentication protects account access.
• Row-level security and server-side access controls are used where applicable.
• Journal content is intended to be encrypted client-side before storage.
• No system is perfectly secure, and Vanta cannot guarantee absolute security.

• Users can delete their account from inside the app where available.
• Users can request account and data deletion by contacting support if they cannot access the app.
• Users can disconnect WHOOP where the app provides that option.
• Deleting a Vanta account deletes imported WHOOP data stored in Vanta, but it does not delete the user's WHOOP account.
• Users can delete or edit certain app data through the app interface where available.

Vanta is not intended for children under 13.

Vanta provides general fitness, wellness, productivity, and personal tracking tools. It is not medical advice. See the Health & Fitness Disclaimer for more detail.

Contact: mattarithikreddy@gmail.com