Privacy Policy

1. Who is responsible

The data controller is Vito (govito.app), located at Calle 2B # 1-29, Bogotá, Colombia, 110731. Email: vito@govito.app. Phone: +57 314 331 6466.

2. What data we use

Only what Vito needs to work. Some of it you give us, some is created as you use the app:

• Your account. Name and email and, if you sign up with email, your date of birth and gender. Your password is handled by Firebase Authentication (by Google): we never see it. If you sign in with Google, we receive that account's name, email and photo.
• Your profile photo, if you choose one. It's stored, resized, in your account.
• What you log in the app. Your answers to the starter plan (what you want to work on, when you wake up, what your day looks like), your habits and when you complete them, your water intake (and your weight and sex, if you set up hydration), your mood and what you write in the journal, your missions, your Library, your Movies & TV and your workouts.
• Your conversations with Vito. Chat messages and a summary Vito keeps to remember your context: your goals, what works for you, what's hard and the themes that come up again.
• Health data, if you connect it. Sleep (sessions and stages), steps and weight, read from Health Connect only with your permission.
• Your calendar, if you connect it. The app reads on your phone how many timed events you have today. Only that number leaves your phone: never the titles, people or details of your events.
• Your approximate location, for the weather. We don't ask for location permission. For the forecast, the app estimates your city from your IP address and keeps those approximate coordinates on your phone only.
• Challenges with friends and partner habits, if you join one. In a challenge, other participants see your name and how many perfect days you have this week. In a partner habit, the other person sees your name, the habit's name and the days you complete it, and can send you a nudge (a notification).
• Vito Plus purchases, if you buy. Google Play sends us a receipt: the product, its status, the renewal or expiry dates and a purchase identifier. Google handles the payment: we never see your card or payment details.
• Gift codes, if you redeem one. We keep which code you used, when you redeemed it and how long it gives you Vito Plus.
• Technical data. App and device identifiers, usage events (for example, which screens you open), crash reports and the identifier that lets us send you notifications.
• Whatever you write to us if you contact us by email.

3. What we use it for

• Creating and maintaining your account.
• Building your plan, arranging your day around your sleep, mood, schedule and the weather, reminding you of your habits and showing your progress.
• Letting Vito answer you in the chat with context, create or adjust habits and missions when you ask, and recommend books, movies or shows based on what you saved.
• Calculating your water goal from your weight.
• Turning on Vito Plus if you buy it or redeem a code, confirming your purchases with Google Play and keeping it up to date with renewals and cancellations.
• Showing the other person in a challenge or a shared habit your progress on what you share, and delivering your nudges.
• Sending you notifications (reminders and messages from Vito) and service emails, like the welcome email or the goodbye email if you delete your account.
• Understanding, in aggregate, how the app is used, to improve it and fix bugs.
• Keeping the service secure and complying with the law.

We don't use your data for advertising, we don't sell it and we don't build profiles for commercial purposes.

4. Sensitive data: health, mood and journal

Your health data and what you log about your mood are sensitive data. Giving them is optional: Vito works without them and you don't have to answer questions about them.

We use them only to personalize your experience: fitting your day to how you slept or how you feel, adjusting your water goal and putting together your weekly report. Never for advertising.

Use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. You can remove Vito's access anytime in Health Connect (App permissions → Vito) without losing the rest of the app.

Vito is not a medical or psychological service: it doesn't diagnose or treat any condition.

5. Artificial intelligence

Vito's replies, your daily greeting, the reasons behind your priorities, the summaries and the weekly report are generated by Gemini, Google's artificial intelligence model.

To do that, we send what's needed to answer: your message and a context with your habits, your recent mood, your sleep hours and steps if you connected them, and your profile summary. Google processes that data under the Gemini API terms.

Artificial intelligence can make mistakes. Don't use its replies as medical, legal or financial advice.

6. Who we share your data with

We don't sell or rent your data. We only share it with providers that help us run the service, and only what each one needs:

• Google: Firebase (account, database, notifications, usage statistics and crash reports), Google Cloud (our server), the Gemini API (artificial intelligence) and Google Play (Vito Plus payments).
• Resend: sending service emails (your name and email).
• ipapi.co, ipwho.is and Open-Meteo: approximate location and weather forecast (your IP address and approximate coordinates).
• TMDB (The Movie Database): movie and show search (what you type in the search box).
• Google Books and Open Library: book search and covers (what you type in the search box).
• Authorities, when the law requires it.

Also, the people you share a challenge or a habit with see what's described above, and only that.

If Vito merges or is sold, your data would pass to the new controller with the same protections, and we'd let you know beforehand.

7. Where it's stored

Your data is stored on Google servers in the United States, and some providers may process it in other countries. By using Vito you authorize that international transfer; we require our providers to keep appropriate security and confidentiality measures.

8. How long we keep it

As long as you have your account. If you delete it, we erase your account and all your data from our databases. We'd only keep what a law requires us to keep, for as long as it requires.

Usage statistics and crash reports don't contain what you write and are deleted automatically over time.

Your Vito Plus purchase receipts and the codes you redeemed are deleted with your account. Google keeps its own payment records under its policies and billing laws.

9. Your rights

Under Colombian Law 1581 of 2012 and related rules, you have the right to:

• Know, update and correct your data.
• Ask for proof of the authorization you gave us.
• Know how we've used your data.
• Revoke your authorization and ask us to delete your data.
• Access your data free of charge.
• File complaints with Colombia's Superintendence of Industry and Commerce, after making your request or claim with us.

To exercise them, email vito@govito.app from your account's email address. We answer requests within 10 business days and claims within 15 business days. If you live in another country, we also honor the rights your local law gives you.

Asking us for a copy of your data is free for everyone. With Vito Plus, you can also download it yourself as CSV files from Profile → Export your data.

10. How to delete your account

• In the app: Profile → Privacy → Delete account. Confirm with your Google account or your password, and that's it.
• Your account and everything you saved is erased: habits, plan, mood and journal, conversations with Vito and their summary, saved sleep and weight, water, Library, Movies & TV, workouts, missions, your spot in challenges with friends and in partner habits, your Vito Plus receipts and the codes you redeemed. We send you a goodbye email to confirm it.
• If you have a Vito Plus subscription, cancel it in Google Play (Payments & subscriptions → Subscriptions): deleting your account doesn't cancel it.
• Without the app: email vito@govito.app from your account's email address and we'll delete it within 15 business days.
• Data stored in Health Connect lives on your phone: Vito only reads it and doesn't delete it.

More detail in Delete your account.

11. Security

Your data travels encrypted (HTTPS). Every request to our server is verified with your session, and the database rules prevent one account from reading another's data. No system is infallible: if we detect an incident that affects you, we'll let you know.

12. Minors

Vito isn't meant for children under 13. If you're between 13 and 17, you need permission from your parent or legal guardian to use Vito. If you believe a minor gave us data without that permission, email us and we'll delete it.

13. govito.app

The website doesn't use cookies or trackers. It only stores in your browser, for the length of the visit, where you came from (for example, an ad), to pass it to Google Play if you download the app. Our hosting provider (Firebase Hosting, by Google) logs technical data such as your IP address to serve the page.

14. Changes to this policy

If we change anything important, we'll let you know in the app or by email before it applies. The date above shows the last update.

15. Contact

Email

vito@govito.app

Address

Calle 2B # 1-29, Bogotá, Colombia, 110731

Phone

+57 314 331 6466