Vector Privacy Policy

The short version

• You sign in with Apple. We never see your Apple password.
• We store the training, nutrition and body-measurement information you put into Vector, so we can show it back to you.
• When you use Describe a Meal, the meal description you type — and any meal photos or recipe files you add — are sent to OpenAI, a third-party AI provider, so it can suggest nutrition figures. We ask you first, and you can say no and keep logging meals by hand.
• We do not sell your information, we do not use it for advertising, and we do not track you across other apps or websites.
• You can delete your account from inside the app.

Who we are

Vector is operated by the developer of Vector Life AI. If you have a question about this policy or about your information, contact us at privacy@vectorlifeai.com.

What we collect

Your account

Vector uses Sign in with Apple. We never receive or store your Apple password.

When you sign in, our identity provider (Amazon Cognito, part of Amazon Web Services) creates a sign-in record for you and gives Vector an identifier that stands for "this person". We store that identifier, and the email address associated with your Apple sign-in when Apple gives it to us — depending on how you sign in, it often isn't provided, and we don't require it. If you chose Apple's "Hide My Email", we only ever see the relay address Apple gives us.

Training information

Everything you record about training: your workouts, the exercises and sets in them, weights, reps, times, rest, notes and corrections; the routines you create; and the workout history you import from Strong if you choose to.

Nutrition information

The meals you log: a description, the date and time, which meal it belongs to, quantities, and nutrition figures — calories, protein, carbohydrate, fat, sodium and any additional nutrients you record. Also your nutrition goals and daily targets, and the foods you save for re-use.

Body measurements

Body weight and body-composition measurements you enter, each with the date you recorded it, plus the profile details used to calculate your targets — height, date of birth, biological sex, activity level and training days per week.

Nutrition and body measurements are health-related information. We treat them accordingly: they are only ever used to run the features you are using them for.

Meal photos and recipe documents

If you add a photo of a meal, a photo of a recipe, or a recipe PDF while using Describe a Meal, those files are uploaded to Vector so the AI provider can look at them. See Meal photos and recipe documents under retention below — they are short-lived, and we do not keep them in your history.

Technical information

Our servers keep operational logs so we can tell whether Vector is working: the time of a request, which API route it hit, the response status, and an error category when something fails. These logs are built so they cannot contain what you wrote. They do not record meal descriptions, nutrition values, workout data, photos, your email address, your account identifiers, or the contents of any request or response.

We do not use analytics SDKs, advertising SDKs or crash-reporting services.

Why we use it

• To give you the app. Showing your workouts, routines, history, nutrition log, targets and measurements back to you, and keeping them in sync between your device and our servers.
• To calculate things for you. Daily totals, nutrition targets and similar figures are worked out by ordinary, predictable code from what you have recorded.
• To suggest nutrition figures with AI, when you ask for it and have agreed to it. See the next section.
• To keep the service working and secure. Diagnosing failures, preventing abuse, and keeping backups.

We do not use your information for advertising, and we do not sell it or share it with data brokers.

AI-assisted nutrition (Describe a Meal)

This is the one place Vector sends what you have written to another company, so it is worth being precise.

What happens

When you tap Describe in Describe a Meal, Vector's backend sends a request to OpenAI and asks it to turn your description into structured nutrition figures. OpenAI is a third-party AI provider.

What is sent to OpenAI

• The meal description exactly as you typed it.
• If the AI asks you a follow-up question, your answer, and the original description and question again (each request stands on its own — there is no ongoing conversation stored anywhere).
• If you added meal photos, recipe photos or a recipe PDF, the contents of those files.
• If you use Correct Result, what you typed to correct it, and the previous suggestion.

What is not sent to OpenAI

Your name, your email address, your Vector account identifier, your Apple identifier, your training history, your body measurements, your targets, your nutrition history, and your previously logged meals are not sent. The request contains the meal you are asking about and nothing that identifies you.

How the request is configured

• Vector sends these requests with the OpenAI option store: false, which asks OpenAI not to retain the request as part of your conversation history on their side.
• The AI is given no tools — it cannot search the web, browse, or look anything up. It only answers from the text and files in the request.
• Requests go from Vector's servers to OpenAI over an encrypted connection. Your device never talks to OpenAI directly, and the app never contains an OpenAI key.

OpenAI's own handling of API data is governed by their terms and privacy policy, which you can read at openai.com/policies. We can tell you exactly what we send and how we configure the request; how OpenAI processes it on their side is described by them, not by us.

What Vector keeps

Nothing from the AI exchange is saved. Vector does not store the prompt, the request, or OpenAI's response. A suggestion is not part of your nutrition log.

A meal only enters your log when you review the suggestion and tap Log. At that point what is saved is an ordinary nutrition entry — the description, the figures as you accepted or edited them, and a note that it started as an AI suggestion — exactly like a meal you typed in by hand.

Your permission

Before the first time Vector sends anything to OpenAI, the app shows you a disclosure explaining what is sent and to whom, and asks you to agree. If you decline, nothing is sent — and you can keep logging meals manually, with the full nutrition log, targets and history working exactly as before.

You can withdraw that permission at any time under Athlete → AI Nutrition. After withdrawing, Vector will ask again the next time you try to use Describe a Meal. Withdrawing does not delete meals you already logged; those are yours, and they stay in your history like any other entry.

Please don't rely on it for medical decisions

AI-suggested nutrition figures are estimates. Vector shows you what it proposes so that you can check and correct it before logging. It is not medical or dietary advice.

Who else processes your information

We use two service providers. Neither is given your information for their own purposes.

Amazon Web Services (AWS) hosts Vector. Your data lives in an AWS database and in AWS storage, our servers run on AWS, and Amazon Cognito — an AWS service — handles sign-in. Data is encrypted in transit and at rest.

OpenAI processes only what is described under AI-assisted nutrition above, only when you use Describe a Meal, and only after you have agreed.

That is the complete list. There are no analytics providers, no advertising networks and no third-party SDKs collecting information inside the app.

How long we keep things

Your training, nutrition, target and measurement records are kept until you delete them or delete your account. Deleting an individual workout, set or nutrition entry removes it.

Meal photos and recipe documents are deliberately short-lived. They are stored only so the AI can look at them while it answers, they stop being usable two hours after upload, and they are deleted within 24 hours at the latest — sooner if Vector rejects the file or you remove it before sending. They are never attached to your nutrition history, and a meal you log from a photo keeps the figures, not the photo.

AI prompts and responses are not stored at all.

Operational logs are kept for 30 days. As described above, they do not contain your content.

Backups. Our database is backed up automatically and those backups are kept for 7 days. A deleted record can survive in a backup until that window passes.

Deleting your account

You can delete your Vector account from inside the app, at Athlete → Delete Account. It needs no email and no support request.

What deletion removes. Your profile, your routines, your entire workout history — every workout, set, correction and import — your nutrition entries, targets and saved foods, and your body measurements are permanently deleted from Vector's database. This cannot be undone. Signing in again with the same Apple ID creates a brand-new, empty Vector account with no access to any of your previous data.

What deletion does not remove, and we would rather say so than imply otherwise:

• Your sign-in record with our identity provider. Vector cannot yet remove your profile from Amazon Cognito. That record holds your sign-in linkage and the email address associated with it, if we have one. It holds none of your training, nutrition or measurement data. Removing it is planned work, and we will update this policy when it is done.
• Your Sign in with Apple authorization. Vector cannot revoke it for you. You can remove it yourself under Settings → your name → Sign-In & Security → Sign in with Apple on your device.
• A small erasure record. We keep a record that a deletion was requested and completed, and the date. It contains no name, no email address and no training data. We keep it so we can answer the question "was this account deleted?" honestly.
• Backups, for up to 7 days, as described above.

If you want a copy of your data first, use Export My Data on the same screen. Exporting is optional and deletion never waits for it.

Security

Vector is built to keep your information to itself:

• All traffic between the app and our servers uses HTTPS. The app refuses to send anything over an unencrypted connection.
• Your data is stored in a private database that is not reachable from the internet, and it is encrypted at rest.
• Every request is authenticated, and the server checks on every request that the data you are asking for is yours.
• Credentials — including the AI provider key — live in a managed secrets service on the server. None of them is ever placed in the app, and the app has no way to reach the AI provider on its own.
• Our logs are built so that content and identifiers cannot end up in them, and this is verified by tests rather than left to care.
• Photo and document storage blocks all public access and can only be read by Vector's own servers.

No system is perfectly secure, and we will not pretend otherwise. But we would rather design so that a mistake cannot expose your information than rely on nobody making one.

Children

Vector is not directed at children and is not intended for anyone under 13. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

Your choices, in one place

• Decline AI — tap Not Now on the disclosure. Everything except Describe a Meal works normally.
• Withdraw AI permission later — Athlete → AI Nutrition.
• Export everything — Athlete → Export My Data.
• Delete an individual record — from the workout, set or nutrition entry itself.
• Delete your account — Athlete → Delete Account.
• Ask us anything — privacy@vectorlifeai.com.

Changes to this policy

If we change how Vector handles your information, we will update this policy and change the date at the top. If a change materially affects information you have already agreed to share — for example, if we sent something new to the AI provider — we will ask for your agreement again inside the app rather than relying on you re-reading this page.

Contact

privacy@vectorlifeai.com