Privacy Policy — VIGR.ai

VIGR ("VIGR", "we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit our website, join our waitlist, or use the VIGR mobile application and related services (collectively, the "Services"), how we use that information, and the rights you have over it. By using the Services, you agree to the practices described below.

1. Who we are

VIGR is a wellness and performance product that helps people understand recovery, training load, and daily readiness. We act as the "data controller" for the personal information described in this policy. For any privacy question or request, contact us at support@vigr.app.

2. Information we collect

We collect only what we need to operate and improve the Services:

Waitlist & contact data: your email address (and optional name) when you sign up on our marketing site or contact us directly.
Account data: email, password hash, display name, country, and authentication identifiers when you create a VIGR account.
Health & fitness data: metrics you log or that are synced from connected devices and wearables — for example heart rate, heart-rate variability, sleep, steps, workouts, recovery, and subjective check-ins. This data stays tied to your account and is used to power the in-app experience.
Subscription & billing data: plan, trial status, renewal date, and a transaction reference. Payment card details are handled by our payment processors (Apple App Store, Google Play, and Stripe) — VIGR never sees or stores your full card number.
Device & usage data: device type, OS, app version, language, crash diagnostics, and basic usage events that help us debug and improve the product.
Cookies & analytics: on the marketing website we use a small number of first-party cookies and privacy-respecting analytics to measure traffic and improve the site. See "Cookies & analytics" below.

3. How we use your information

To provide, maintain, and improve the Services.
To compute the recovery, training, and readiness signals that are the core of the product.
To manage your account, subscription, trial, renewals, and billing history.
To communicate with you about product updates, security notices, and (if you opted in) launch news from the waitlist.
To detect, prevent, and address fraud, abuse, and technical issues.
To comply with our legal obligations.

4. Legal bases (GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following bases: performance of a contract (to provide the Services you signed up for), your consent (for waitlist emails, optional analytics, and processing of health data), our legitimate interests (to secure and improve the Services), and compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share data only with vetted service providers acting on our behalf and only to the extent needed to run the Services:

Cloud hosting & database: for storing your account data and app content.
Payments: Apple, Google, and Stripe process subscription payments and renewals.
Analytics & crash reporting: to understand aggregated product usage and fix bugs.
Email delivery: to send transactional and (where consented) waitlist emails.
Legal: when required by law, subpoena, or to protect our rights and users.

AI processing subprocessors

VIGR uses third-party AI providers to power specific features: OpenAI, LLC (AI coach conversations, voice coaching, and report insights) and Google LLC (Gemini API, for food photo recognition). These providers process data solely to deliver the feature you invoke, under data processing agreements, and API inputs are not used to train their models. Health and biometric data is shared with the AI coach only with your explicit consent, which you can grant or withdraw at any time in Profile → AI Coach Health Access; without consent, coaching features operate without your health data.

6. International transfers

Your information may be processed in countries other than your own, including the United States. When we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Data retention

We keep personal data only as long as needed for the purposes above. Waitlist emails are kept until you unsubscribe. Account and health data are kept while your account is active and for a short period after deletion to satisfy legal, accounting, and security obligations, after which the data is deleted or irreversibly anonymized.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent at any time. Users in the EEA/UK have rights under the GDPR. Users in California have rights under the CCPA/CPRA, including the right to know what we collect, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information — VIGR does not sell or share personal information in that sense.

To exercise any right, email support@vigr.app. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9. Cookies & analytics

Our website uses essential cookies that are required for the site to function, plus a limited set of analytics cookies to understand aggregated traffic patterns. You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use the marketing site or join the waitlist.

10. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and regular reviews — to protect your information. No internet-based service can be 100% secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page and, where appropriate, communicated by email. The "Last updated" date at the top reflects the most recent revision.

13. Contact

Questions, requests, or complaints? Email support@vigr.app.