Last updated: August 14, 2026
At AIVITA, we are committed to protecting your privacy and safeguarding your personal and health-related data. This privacy and cookie policy explains how AIVITA ApS ("AIVITA," "we," "us," or "our"), based in Denmark, collects, uses, stores, and protects your information. AIVITA is a health coaching app that delivers personalized lifestyle recommendations. This policy complies with the GDPR, the EU ePrivacy Directive, and Danish data protection laws.
For questions, contact us at [email protected].
AIVITA ApS Kong Georgsvej 17, 2950 Vedbæk, Denmark CVR: 45641694 Email: [email protected]
Personal information: Name, email, date of birth, gender, country, postal code, and height.
Special categories (health data, GDPR Art. 9): Data from fitness trackers (steps, heart rate, sleep, recovery), lab test results, and qualitative responses from the journaling system. Processing of health data requires your explicit consent.
Photos: Meal photos and images you choose to share in the app (e.g. in chat or group posts).
Other data: Location context (postal code, city, country), usage data (challenge participation, message ratings, points, badges), technical data (IP address, device type), push notification tokens, and payment data (subscription and transactions — full card details are processed exclusively by Stripe/RevenueCat and never stored by AIVITA).
AIVITA uses your data to:
| Purpose | Legal Basis |
|---|---|
| User account and profile | Art. 6(1)(b) Contract |
| Personalization (age, gender, height) | Art. 6(1)(a) Consent |
| Health data and AI recommendations | Art. 6(1)(a) Consent + Art. 9(2)(a) Explicit consent |
| Apple Health synchronization | Art. 6(1)(a) Consent + Art. 9(2)(a) Explicit consent |
| Payment and subscription | Art. 6(1)(b) Contract + Art. 6(1)(c) Legal obligation |
| Accounting records | Art. 6(1)(c) Legal obligation (Danish Bookkeeping Act) |
| Push notifications | Art. 6(1)(b) Contract |
| App improvement and analytics | Art. 6(1)(f) Legitimate interest |
| Email newsletters | Art. 6(1)(a) Consent |
You can withdraw your consent at any time via "My Profile > Delete Profile" or by contacting [email protected]. Withdrawal does not affect the lawfulness of prior processing.
AIVITA uses artificial intelligence (HealthSync AI) to generate personalized health recommendations based on your health data, journal responses, and wearable data. The AI model analyzes your data and cross-references it with health science knowledge.
AIVITA's AI features (the AI coach chat, meal photo scanning, health reports, lab result summaries, and smart notifications) are powered by OpenAI, a third-party AI provider acting as our data processor. To deliver these features, we share the following data with OpenAI: profile details (name, age, gender, height, and weight), health metrics from Apple Health or Health Connect, journal answers, health notes, lab test results, and photos you choose to add. Your email address, account ID, payment details, and location are never shared with OpenAI. This sharing only happens after you have given your explicit consent in the app, either when creating your account or on the consent screen shown at first launch. OpenAI processes this data under a data processing agreement that provides the same level of protection as this policy, and your data is not used to train AI models.
AI-generated recommendations are advisory and do not constitute medical advice. No automated decisions have legal or similarly significant effects on you.
We never sell your personal data. We share data with the following recipients:
Data processors (user data):
| Processor | Service | Country |
|---|---|---|
| DigitalOcean | Hosting and data storage | EU (NL/DE) |
| OpenAI | AI features (chat, meal photo analysis, reports, notifications) | USA |
| Stripe | Payment processing (website) | USA |
| RevenueCat | Subscription management (App Store) | USA |
| Apple APNs | Push notifications | USA |
| Mailchimp | Newsletters | USA |
We also use processors for internal administrative purposes (payroll, bookkeeping, project management, communication). These processors do not have access to user health data.
Joint controllership (Meta): For ad measurement via Meta Pixel/Conversions API, AIVITA and Meta Platforms Ireland Ltd are joint controllers under GDPR Art. 26. Meta only sets cookies with your consent.
Authorities: When legally required.
Some of our processors are based in the USA. We protect your data through EU-US Data Privacy Framework certification and EU Standard Contractual Clauses (SCC). All user data is stored on EU servers (Amsterdam/Frankfurt). AI requests are processed by OpenAI in the USA under these safeguards and are not used to train AI models.
| Data | Retention |
|---|---|
| Account and profile data | Until you delete your account. Accounts inactive for 24 months are deleted after a 30-day email reminder. |
| Health data | Until account deletion. Deleted within 2 days of a valid request. |
| AI-generated data | Deleted within 30 days of a valid request. |
| Payment and transaction data | 5 years (Danish Bookkeeping Act). |
| Newsletter (email) | Until you unsubscribe. |
| Push notification tokens | Until account deletion. |
Delete your account: In the app via "My Profile > Delete Profile" (immediate) or by email to [email protected] (within 2 days).
Under the GDPR, you have the right to:
Contact [email protected] — we respond within 30 days.
You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark ([email protected], www.datatilsynet.dk).
Data is encrypted in transit and at rest, stored on EU servers, and access is limited to authorized personnel with two-factor authentication and logging. We have data processing agreements with all processors and breach response procedures within 72 hours.
Necessary cookies: Session management and security (session-based, cannot be disabled).
Analytics: We use Plausible.io, which is cookie-free and does not collect personal data.
Marketing cookies (require consent): If you visit us via a Meta ad, Meta may set cookies (_fbp, _fbc) for ad measurement (90 days). These are only set with your consent via our cookie banner.
You can change or withdraw your cookie consent at any time via the cookie settings on our website.
We may update this policy and will inform you of significant changes via email or in the app.
AIVITA ApS Kong Georgsvej 17, 2950 Vedbæk, Denmark CVR: 45641694 Email: [email protected]
