> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vitasync.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy

> What leaves your phone, when, and who holds it.

The short version: nothing you log leaves the phone until you turn on cloud backup. The full policy is at [vitasync.io/privacy](https://vitasync.io/privacy). This page shows the mechanism.

```mermaid theme={null}
flowchart TB
  subgraph stays["Stays on your phone"]
    direction LR
    s1["Everything you log,<br/>while cloud backup is off"]
    s2["Your choice to allow<br/>cloud backup"]
    s3["Insights, calculated<br/>on the phone"]
    s1 ~~~ s2 ~~~ s3
  end
  subgraph acts["Leaves only when you act"]
    direction LR
    a1["Entries and settings,<br/>after you turn on cloud backup"]
    a2["Your email,<br/>when you add it for restore"]
    a3["A search term,<br/>when you search the food database"]
    a4["Usage events, if you opt in to analytics.<br/>Metric names, never values."]
    a1 ~~~ a2 ~~~ a3 ~~~ a4
  end
  subgraph diag["Diagnostics"]
    direction LR
    d1["Crash reports, stripped of your data<br/>before they are sent"]
  end
  stays ~~~ acts ~~~ diag
```

## One choice gates every upload

Every path that could upload asks the same question first: did you allow cloud processing on this phone? That answer is recorded with the version of the notice you read. It is kept on the phone only. A backup never contains it, so restoring an account cannot turn uploading on by itself.

## Analytics see names, not numbers

If you opt in to product analytics, an event says "logged sleep". It never says "slept 5 h 30". The same rule applies to crash reports.

## Who holds what

| Who | What | When |
| - | - | - |
| Supabase | Your account: sign-in and the private copy of entries and settings | Only once cloud backup is on |
| Resend | Sends the six-digit sign-in code | When you add your email or restore |
| Open Food Facts | Receives your search term | When you search the food database |
| Sentry | Crash reports, with your data stripped out | When the app crashes |
| PostHog | Event names and timings | Only if you opt in |

The authoritative list, with locations, is at [vitasync.io/sub-processors](https://vitasync.io/sub-processors).

## Deleting

Delete account and data removes the account and every row in it, then wipes the phone. See [Export and delete](/help/export-and-delete).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.