VitaCrypt

What happens to your data

What the VitaCrypt app keeps, what leaves it and to whom, how to erase it, and what is not finished yet. VitaCrypt is an early-stage MVP and not medical advice.

Describes the app at app.vitacrypt.xyz as of 29 October 2026.

01 · What we keep

Stored encrypted, with a key made for you

Your health data is stored on our server: DNA results, lab results, questionnaires, daily check-ins, wearable values and your health profile. It is encrypted with a key made for you.

Our server holds that key, so the app can read your data to build your insights. This is not end-to-end encryption: we are able to read your data, and we do not claim otherwise.

Some things are stored without encryption: your account email, the summary score from your DNA file and how many variants it contained, air-quality readings and history for your area, your habits and the reasons shown with them, file names, which tests you ordered and when repeat tests are due, the type and date of each record, and the log of what left the app.

Lab files are read on our server. Reading photos or scans with a cloud service is switched off, so the app asks for a PDF that contains text.

02 · What leaves, and to whom

Who receives what

When you use a feature

  • Anthropic (Claude)Lab AgentCoded facts only, without your name or email: the marker, whether it is low, normal or high, how it changed, and for DNA the gene, the variant ID and your genotype letters. No exact values, dates, places or file text. A second call sends general research claims with paper summaries, to check which papers support them.
  • PubMed, Europe PMCResearch searchGene, marker and condition names drawn from your results, or the words you type into research search.
  • NCBI dbSNP, GWAS CatalogDNA lookupsThe IDs of your DNA variants, to fetch what is published about them.
  • Open-Meteo, OpenAQ, WAQI, Sensor.Community, OpenStreetMapLocal airYour location, rounded to about 1 km.
  • Anthropic (Claude)Insight cardsA fuller profile than the Lab Agent sends. See Not done yet.
  • Anthropic (Claude)Sleep and activity reportsIf you upload one, up to 2,000 characters of its text, to pull out the numbers. The text is sent as it is, including any name or date printed in it.

Only when you tap

  • Your deviceCalendar reminderA calendar file you download, with a neutral title and a date. Nothing goes to anyone else.
  • TelegramTelegram reminderAfter you link Telegram, a fixed reminder sentence 3 days before and on the day of each repeat test. No health data.
  • OpenStreetMap, Overpass APILabs near youThe city you type, then its location rounded to about 1 km.
  • Junction (US, sandbox)Repeat lab orderAfter you confirm: your name, date of birth, gender, phone, email and address, and which tests. This runs in test mode; in the demo the order is simulated.
  • Whoever you give the link toClinician linkOnly the items you pick, after a preview of exactly what they will see. The link works for 1 to 30 days and you can revoke it at any time. We send it nowhere; you pass it on. Each opening is logged with its time.

03 · The log

"What left VitaCrypt"

Sends from these features are written to a log in the app. Open Profile, then "What left VitaCrypt", to see when something was sent, where it went and which kinds of fields it carried.

The log names the fields, never their values. It shows the latest 200 entries. Some literature searches made for insight cards are not logged yet.

What left VitaCrypt screen: each destination and the kinds of fields sent
The log in the live demo. Synthetic data.

04 · Erasing

Deleting your data destroys your key

In Profile, "Permanently delete my health data" destroys your key and deletes your health records and Lab Agent data, including the log. Once older backups are deleted, anything encrypted with that key can no longer be read, by anyone, including us. This cannot be undone.

Habits you added yourself stay. Copies already sent to others, such as a lab order or a clinician link someone has opened, are not affected.

Your sign-in account stays. To have it removed as well, write to privacy@vitacrypt.xyz.

05 · Not done yet

What is not finished

  • The older insight cards still send Claude a fuller profile than the Lab Agent does: lab values, DNA findings, microbiome, wearable and lifestyle numbers, questionnaire scores, check-in summaries, habits, local air and weather, and your city name. Emails, phone numbers and dates are filtered out.
  • Server backups made before you erase your data still hold your key in protected form, and the unencrypted items listed above, until those backups are deleted.

06 · Contact

Questions

Write to privacy@vitacrypt.xyz.

This page is about the app. This website, vitacrypt.xyz, uses Google Analytics; the app does not.