Back to home

Privacy Policy

Last updated: February 19, 2026

Overview

Vivera is an AI health engine that aggregates personal health data to compute your biological age. We are designed from the ground up to minimize data collection and to keep you in control of your information. We do not require an email address, name, or any traditional personally identifiable information to use our service.

1. Who We Are

Vivera ("we", "us", "our") operates the Vivera application at vivera.art and app.vivera.art. For privacy inquiries, contact us at privacy@vivera.art.

2. What We Collect

Your wallet address (pseudonymous identifier)

Authentication is handled via Privy (privy.io) using wallet-based sign-in. We store your Ethereum wallet address in lowercase as your account identifier. Your wallet address is a pseudonymous — not anonymous — identifier: it does not directly reveal your identity, but could theoretically be linked to on-chain activity.

Health data you submit

We store the health data you voluntarily provide: lab report contents, wearable metrics, food photo analyses, voice memo transcripts, screenshots, and freeform text entries. This data is stored in our database keyed to your wallet address.

Optional profile data

Age, sex, height, weight, and health goal — all optional, and only used to personalize your biological age computation and AI insights.

Usage analytics

We use PostHog to track product usage events (e.g. features used, screens visited). This helps us improve the product. Analytics are tied to your wallet address. You can opt out by contacting us.

3. What We Do Not Collect

  • No email address or name in our database (Privy may hold email-to-wallet mapping separately under their own privacy policy)
  • No advertising identifiers or third-party tracking pixels
  • No sale of your data to third parties — ever
  • Audio files are processed and immediately deleted — only the transcript and extracted metrics are stored

4. How We Use Your Data

  • To compute your biological age and aging velocity
  • To generate AI-powered health insights via Anthropic's Claude models
  • To display your health trends and history
  • To improve Vivera's features using aggregate, anonymized analytics

We do not use your health data for advertising, do not sell it, and do not share it with third parties except as described in Section 5.

5. Third-Party Services

Privy (privy.io)

Wallet-based authentication. Privy may store your email or social login if used to create a wallet.

Anthropic (anthropic.com)

AI processing — your health data is sent to Claude models for extraction and insight generation. Anthropic's API terms prohibit using API data for model training.

Supabase (supabase.com)

Database storage. Your health data is stored in Supabase-hosted PostgreSQL in the EU (Frankfurt region).

PostHog (posthog.com)

Product analytics. Usage events are captured to help us improve the product.

Stripe (stripe.com)

Payment processing for Pro subscriptions. Stripe handles all payment data under their own PCI-compliant infrastructure.

Vercel (vercel.com)

Application hosting and CDN. Vercel may log request metadata (IP, user agent) per their standard infrastructure logging.

Wearable providers (Strava, WHOOP, Oura, Garmin, Fitbit)

When you connect a wearable, we access your data via their OAuth APIs under their respective privacy policies.

6. Voice Data & BIPA Compliance

If you use the Voice Memo feature, your audio recording is transmitted to our servers solely for transcription and health metric extraction. The audio file is deleted immediately after processing — only the text transcript and extracted metrics are retained. If you are an Illinois resident, we obtain your consent before enabling voice recording in compliance with the Illinois Biometric Information Privacy Act (BIPA).

7. Data Retention

Your data is retained for as long as your account exists. When you delete your account via Settings → Delete My Account, all your data is permanently and irreversibly deleted from our database, including all health inputs, metrics, habits, and chat history.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:

  • Right of access (Art. 15) — Export all your data via Settings → Export All My Data
  • Right to erasure (Art. 17) — Delete all your data via Settings → Delete My Account
  • Right to rectification (Art. 16) — Contact us to correct inaccurate data
  • Right to data portability (Art. 20) — Data export is available in JSON format
  • Right to object (Art. 21) — Contact us to object to specific processing activities

Our legal basis for processing your health data is your explicit consent, given when you create an account and voluntarily submit data.

9. Security

Health data is stored in PostgreSQL with row-level security enforced by your wallet address — only you can read your own data. All data is transmitted over HTTPS. We do not store encryption keys alongside data. No system is perfectly secure; we commit to notifying affected users promptly in the event of a breach.

10. AI Disclaimer

Vivera's AI-generated insights are for informational purposes only and do not constitute medical advice. Always consult a qualified healthcare professional before making health decisions.

11. Changes to This Policy

We may update this policy as the product evolves. Material changes will be communicated via in-app notification. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions, data requests, or GDPR inquiries, contact: privacy@vivera.art