Privacy Policy

Last updated: May 11, 2026

Vitandi ("we," "us," "our") operates vitandi.ai. This policy explains what data we collect, why, and how we handle it.

What We Collect

When you use Vitandi, we collect:

• Account information: Email address, first name, username, and password (hashed, never stored in plain text).
• Conversation transcripts: The full text of your conversations with Vitandi's AI.
• Psychological profile data: Based on your conversations, we build a profile that includes key language patterns, values, resistance patterns, representational system (visual/auditory/kinesthetic), session summaries, belief shifts, and progress notes. This is sensitive personal information.
• Voice recordings: If you use the voice input feature, audio is temporarily processed for transcription and is not stored after conversion to text.
• Usage data: Session count and conversation timestamps.

How We Use Your Data

• AI-powered conversation: Your messages and profile data are sent to our AI provider to generate personalized responses that maintain continuity across sessions.
• Profile building: After each conversation, an AI model analyzes the transcript to update your psychological profile, enabling deeper and more relevant future conversations.
• Product improvement: We may review anonymized, aggregated patterns to improve Vitandi. We will never sell your data or use it to train third-party AI models.

Third-Party Services

Your data is processed by the following services:

• Anthropic (Claude API): Receives conversation transcripts and profile data to generate AI responses and reflection analysis.
• ElevenLabs: Receives audio recordings for voice-to-text transcription only. Audio is not stored after transcription.
• Supabase: Hosts our database. All data at rest is encrypted. Row-level security ensures users can only access their own data.
• Cloudflare: Hosts our website and handles request routing.
• Google: If you sign in with Google, we receive your name and email from Google's OAuth service. We do not access any other Google data.

Data Retention and Deletion

We retain your data for as long as your account is active. You may request complete deletion of your account and all associated data — including conversation transcripts, profile data, and reflection history — by contacting us at the email below. We will process deletion requests within 30 days.

Sensitive Data

Vitandi collects and processes psychological profile data, which may qualify as sensitive personal information under California (CCPA) and European (GDPR) privacy laws. We process this data only with your explicit consent, provided when you agree to these terms during account creation. You may withdraw consent at any time by requesting account deletion.

Your Rights

All Users

• Request a copy of your data
• Request deletion of your data
• Withdraw consent for data processing

California Residents (CCPA)

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt out of the sale of personal information — we do not sell your data
• Right to non-discrimination for exercising your privacy rights

European Residents (GDPR)

• Right to access, rectify, or erase your personal data
• Right to data portability
• Right to object to or restrict processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

Security

We use encryption in transit (HTTPS), encrypted data at rest, and row-level security policies to protect your data. Access to production systems is restricted to authorized personnel only.

Children

Vitandi is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately.

AI Processing Disclosure

Vitandi is an AI system. All responses are generated by artificial intelligence, not a human. The AI makes inferences about your psychological patterns, values, and beliefs based on your conversations. These inferences are stored in your profile and used to personalize future interactions. Vitandi is not therapy, medical advice, or a substitute for professional mental health care.

Changes to This Policy

We may update this policy as Vitandi evolves. Material changes will be communicated via email or an in-app notice. Continued use after changes constitutes acceptance.

Contact

For privacy-related requests or questions: privacy@vitandi.ai