Effective 10 November 2026
Vantal is a personal health log. It keeps your data on your device. You need no account to use it, and there is no advertising, no analytics and no tracking. A few features you choose to use send data to our server, and this policy explains exactly which ones, what is sent, and what happens to it.
Vantal is provided by Vantal (Pty) Ltd ("we", "us"). We are the controller of the limited personal data described here. Contact us about privacy at hello@vantal.app.
Everything you log stays on your device unless you turn on one of the features below: doses, schedules, protocols, vials and supplies, weigh-ins, check-ins and side effects, nutrition, workouts, lab results, notes, settings, and data imported from Apple Health or Health Connect. It is stored in the app's private storage on your phone. We cannot see it.
Vantal keeps backup snapshots of this data on your device (the newest 7). On iPhone it also saves copies as files in the app's private storage, which is left out of iCloud backup. On Android it may save copies to a Vantal/Backups folder in your device's Documents folder; this folder stays after you uninstall the app until you delete it. Vantal's data is left out of Android's Google backup and device-to-device transfer. On iPhone, an iCloud or computer backup of your whole device may include Vantal's app data; that backup is handled by Apple under your own account settings.
If you tap Track with GPS on a cardio set, Vantal reads your location only while tracking is on and the app is open. It never asks for background location. It saves the set's distance, time and a simplified route with the workout on your device, and inside your encrypted sync data, backups and full export if you use them. The route is never sent to the AI features or to Community, is left out of CSV exports, and is drawn without map services. If you turn on motion rep counting, Vantal reads your phone's motion sensor only while it is counting and keeps only the number of reps you accept.
If you install the Vantal watch app, your phone sends your paired watch the next set of the workout in progress (the exercise name, reps, weight and rest time) so you can log it from your wrist. The watch is never sent doses, compounds or health data.
If you turn on sync, your data, including any data imported from Apple Health or Health Connect, is encrypted on your device before it is uploaded, using a key made from a recovery key that only you hold (AES-256-GCM). Our server stores only that encrypted copy, a hash of a write token, a version number and the dates it was last changed and last used. We cannot read your synced data and cannot recover it if you lose your recovery key. Lab files and photos themselves are never synced.
When you choose to scan a lab report or a medication label, and only after you agree the first time, the file or photo you pick is sent over an encrypted connection to our server, which passes it to Anthropic's Claude AI model to read the printed results or label text. The result comes back to your device. The file may show your name or other details printed on it.
Our server holds the file in memory only for that one request. It does not save it to disk or a database and does not log it. Anthropic processes it as our service provider and may keep it for a limited time under its own terms, for example for safety and abuse monitoring; under its commercial terms Anthropic does not use it to train its models. You can withdraw your consent in Settings › Privacy at any time; you can always enter results by hand instead.
When you send a question in Ask, and only after you agree the first time, the question you typed is sent to our server, which passes it to Anthropic's Claude to write an answer. Only if you turn on "Include my current protocol" is a short summary added (compounds, doses, schedules and recent side effects), and the screen shows you that summary before you send it. Our server does not store or log your question or the summary. Anthropic may keep them for a limited time under its own terms, as above. You can withdraw this consent in Settings › Privacy too.
Only if you turn on "Include my training summary" is a short training summary added: sessions and hard sets a week, the estimated maximum of your main lifts and how it changed, protein on training days, and the trend of weigh-ins you entered yourself. Custom exercise names are replaced, and the screen shows you the summary before you send it.
When you tap "Explain in plain words" on a training result, and only after you agree the first time, the numbers that result shows and the names of built-in exercises are sent to our server, which passes them to Anthropic's Claude to put them into plain words. Custom exercise names, notes, dates and weigh-ins imported from Apple Health or Health Connect are not sent, and the screen shows you what will be sent. Our server does not store or log them; Anthropic may keep them for a limited time under its own terms, as above. You can withdraw this consent in Settings › Privacy.
These are off unless you turn on Training AI tools in Settings › Training, and each asks you the first time. What you give is sent to our server, which passes it to Anthropic's Claude:
Photos are made smaller on your device first, which also removes hidden details such as where they were taken. Nothing else is sent: not your doses, compounds, lab results, notes, your other workouts or anything imported from Apple Health or Health Connect. You check the result before anything is saved or imported. Our server does not store or log what you send; Anthropic may keep it for a limited time under its own terms, as above. You can withdraw this consent in Settings › Privacy.
Community lets you share workouts and training programs with other people who use Vantal. Nothing is sent until you join, and after that only what you choose to share. To join you pick a handle and, if you like, a display name. There is no email address or password: your device keeps a secret token that proves the profile is yours, and our server stores only a hash of it.
Never sent to Community: the time of day, your body weight, heart rate, routes or location, notes on sets, doses, compounds, lab results, check-ins, food, or anything imported from Apple Health or Health Connect.
Your profile is private unless you change it, so only people you approve see your workouts. Programs you share go into a library that everyone in Community can browse, and your handle and display name are visible to everyone in Community. What you share is stored on our server unencrypted, so that other people can read it. It is kept apart from sync, which stays end-to-end encrypted. Our server also stores who you follow and who follows you, the people you block, the kudos you give, and any report you send about a workout, program or profile, which we read to moderate Community. We may hide content or suspend a profile that breaks the Community rules; you can still read and delete a suspended profile.
Two tools are there only if you set them up: an API token that lets software you choose read what you shared, and a webhook that sends each workout you share to a web address you enter. Our server stores a hash of the token, and the webhook address with its signing secret, until you remove them or delete your profile.
When you use Describe, Photo or Label in the food log, import a recipe from a link or ask for an AI recipe, and only after you agree the first time, what you give is sent to our server, which passes it to Anthropic's Claude to estimate the food and its nutrients:
Nothing else is sent: not your food log, your other data or anything imported from Apple Health or Health Connect. The estimate comes back to your device and you check every item; it is saved on your device only if you log or save it. Our server does not store or log what you send or the page it opens. Anthropic may keep them for a limited time under its own terms, as above. You can withdraw this consent in Settings › Privacy.
When you search for a food or scan a barcode, and only after you agree the first time, the words you typed or the barcode number are sent to our server with your device's region (for example "GB"), so foods from your country come first. The server looks them up in its own copy of free public food databases and sends the matches back. It does not store or log your searches. Foods you log are saved on your device. You can turn this off in Settings › Privacy.
To stop abuse and limit costs, requests to our server include a random install ID that Vantal creates on your device. It is not linked to your name, email or any other identity, and it is not used for advertising. Our server also sees your IP address, as every internet service does. The server uses the install ID and IP address only to count requests; it keeps those counts in memory until at most one day after your last request and does not write them to its database or logs. Our hosting provider may keep standard network logs for security under its own terms.
When you open Settings › Training or the Community screens, Vantal asks our server which optional features it offers. That request carries nothing about you beyond the technical data above.
If you change the server address in Settings › Privacy to a server someone else runs, this policy does not cover that server.
With your permission, Vantal reads activity, heart, sleep, body measurement, vitals and nutrition data from Apple Health (iPhone) or Health Connect (Android), for example steps, workouts, resting heart rate, heart rate variability, sleep, weight, blood pressure and blood glucose. This data is read and stored on your device to show it next to your doses, levels and check-ins. You choose which types Vantal reads, and you can revoke access at any time in Settings › Health in Vantal or in the Health app or Health Connect settings.
If you turn them on in Settings › Health, Vantal writes to Apple Health or Health Connect the weight and body fat entries you log, each finished day's calorie and water totals, and each finished workout (as strength training, with its start and end time and, on Android, its name). It writes nothing else.
Health data from Apple Health or Health Connect is never sold, never used for advertising or marketing, never shared with data brokers, and never sent to the AI scanning, Ask, training explanation, training program, routine and workout log reading, or food estimate and recipe features, or to Community. It leaves your device only inside your encrypted sync data, if you turn sync on.
Heart rate shown for a set or an exercise is read from Apple Health or Health Connect when you open the workout. It is shown on your device and is not saved with the workout or sent anywhere.
The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.
We do not sell or rent personal data, and we do not share it for advertising. The only parties that receive data are:
Vantal contains no advertising, no analytics or crash-reporting SDKs, and no trackers. We do not track you across other apps or websites.
You do not need to ask us: you hold the only key to your synced data, and a Community profile is deleted from inside the app. In Vantal:
If you joined Community and no longer have the device, email us your handle and we will delete the profile. We may ask you to show that it is yours.
Step-by-step instructions, including what stays behind, are on the delete your data page.
If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR gives you the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority. We rely on your consent for health data, scanning, Ask and the other AI features, and on our legitimate interest in keeping the service secure for rate limiting. Because we cannot read your synced data or link it to you, most of these rights are exercised directly in the app: export gives you a copy (Settings › Backup & export › Export) and delete erases it.
If you are a California resident, the CCPA gives you the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information to infer characteristics about you.
For any request, email hello@vantal.app.
Our server is located in {{SERVER_REGION}}. Anthropic may process scanned files, questions, training requests and food requests in the United States or other countries. Where data leaves the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Data sent to our server travels over HTTPS. Sync data is end-to-end encrypted on your device. What you share in Community is not end-to-end encrypted, because other people need to read it. Data on your device is protected by your phone's own security, so use a passcode or biometric lock.
Vantal is for adults 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18.
Vantal is a personal log, not a medical device, and it does not give medical advice. See the terms of use.
If we change this policy we will post the new version on this page and update the effective date above.
Vantal (Pty) Ltd. Email hello@vantal.app.