Privacy
Consumer Health Data Privacy Policy
About this policy
Effective date: 10 October 2026. Last updated: 10 October 2026.
MyVector is for adults 18 and older.
What we collect and why
- Medication status and history: the GLP-1 medication status, name, dose, and dates you report, plus the refill, pharmacy and prior-authorization dates you record
- Symptoms: side effects and dose-week symptom patterns you log
- Food, protein, and hydration logs: meals, protein totals, and water intake you choose to track
- Activity, sleep, and mood: exercise, sleep, mindfulness and mood entries you choose to log
- Journal notes: the free-text notes you choose to type or dictate into your journal
- Onboarding safety answers: your pregnancy, eating-disorder, upcoming-anesthesia, and new-or-worsening-symptom screening answers
- Body weight: Your current weight, if you choose to enter it. Used only to suggest a starting protein target.
- Your goals and coach preferences (for example your focus areas and targets): the targets and focus areas you set so the coach can tailor its replies
- Mindfulness and mood notes you choose to log: mindfulness practices and mood notes you choose to record (an AI provider reads these to sort them into records; they are not used in the AI coach chat)
- Voice transcripts: text transcribed from voice notes you choose to record (we never store the audio; see the schedule for the speech service)
MyVector uses this data to calibrate your dashboard, generate AI coaching responses personalized to what you log, turn the entries you log into structured records, prepare the clinician export you can choose to download, and route you to safety information when what you log suggests you may need it.
Where the data comes from
The data comes from you: the entries you log, the text of voice notes you choose to record, your onboarding answers and your purchases. No other person or company gives us health data about you.
We do not sell your data
We do not sell, rent, loan or share for advertising your health data or any other data.
AI providers and model training
MyVector does not collect, use or sell your personal data to train large language models, and our AI providers' agreements do not allow them to train on it.
How we process your data
We store your data with a cloud provider, send the entries you log to AI providers, and send voice notes to a speech service, as listed above. Here is where your data is stored and what we remove before text reaches an AI provider.
Your data is stored in a private cloud project with a tier-1 cloud provider. The database has no public address, and the storage that holds your data blocks public access. Every request is checked against your sign-in, and you can reach only your own data.
Your records are labelled with a random account ID. The ID is only a label. Your name and email are stored in the same account, so your data is not anonymous.
Before text goes to an AI provider, we remove what we can detect: your name and email as they appear on your profile, other email addresses, phone numbers, purchase and account numbers, and sign-in tokens. We also replace dates written as year-month-day (such as 2026-10-03), or with slashes and a four-digit year (such as 10/03/2026), with relative ones, such as “3 days ago”. Other ways of writing a date, such as “October 3”, “3/10” or “the 14th”, are not changed. This applies to the text we send to AI providers only.
The AI still needs what you log to do its job, so your entries and coach messages are sent. Removing identifiers does not make the data anonymous. A name you type about another person, or a spelling of your own name that is not on your profile, may not be removed.
Voice audio cannot be edited this way. It goes to the speech service as audio, without your name or email.
Our payment processor, sign-in service and email service receive your account details, such as your email, to do their job. They receive no health entries.
How long we keep data and how to delete it
When you close your account, we start deleting your data. Our goal is to finish within 30 calendar days of confirming it is you, and backups within 6 months of authenticating.
If your subscription or trial ends, we keep your data until you close your account. You can still close it in the app, or email support@flifurther.com.
When you close your account we delete your health entries from our systems. We keep payment and tax records that the law requires us to keep; they hold your email, the amount, the date and the product name, never your health entries. Our payment processor and the app store keep their own records of your purchases under their own rules.
- Your account details, your logs and entries (including your onboarding safety answers, body weight and goals), your voice-note transcripts and your consent record
- Kept while your account is open. If your subscription or trial ends, we keep your data until you close your account. You can still close it in the app, or email support@flifurther.com.
- Close your account in the app (Settings, Delete account; if your subscription or trial has ended, “Manage or delete your data”).
- The record of what was sent to an AI provider to read your entries, and the result
- Kept with your entries while your account is open. In records made after 5 October 2026, the request we sent has the identifiers we can detect removed, as described below. The result is stored as the provider returned it. Older records may still include your name or email, and we are checking them.
- Deleted with your entries.
- Coach chat messages
- We do not store the text. A message disappears when you leave the screen. It is kept only if you save a message to your journal. The message is sent to an enterprise AI provider to get a reply. Our technical logs may record that a chat happened, with a scrambled code made from the message that cannot be turned back into the text.
- A saved message is a journal entry and is deleted with your entries.
- Voice recordings
- We never store the audio. It goes to a speech service without your name or email. We are still confirming how long the speech service itself keeps it. The text it returns is saved as an entry in your log.
- The text is deleted with your entries.
- Temporary working copies of what you type or say while it is processed
- Usually deleted within 3 weeks: 14 days, then 7 more days in a recovery hold, so a copy in that hold can still be restored. If processing stopped part way, up to about 4 weeks. Copies made before this update may stay longer. We have not yet counted them. Copies you upload directly, and copies set aside for safety checks, are deleted within 7 days plus a 7-day recovery hold.
- Removed automatically.
- Technical logs
- Technical logs record your random account ID, your device type, your IP address, the technical events of the app, and which parts of the app you used (for example, that you opened your mindfulness log), but not what you entered. They expire within 30 days. Before this update, our logs could also hold safety-alert categories next to your account ID. Those older lines expire within 30 days of the update. Our own log lines that carry your account ID name only the kind of request (health data or AI), not the web link it used, and leave out your IP address. Our hosting provider's request log records the web link of each request (not your home address) and your IP address, for up to 30 days; it does not carry your account ID. The two kinds of log are kept apart, but someone with access to both could still try to match a request to an account by its time.
- Cannot be deleted one account at a time. They expire on their own.
- Records of how you use the app while signed in (screens used, app errors, device and network type)
- Kept with your account ID and deleted 30 days after they are written. On health screens and for safety alerts we store only an error code, a status and counts, never the message text. Records written before this update keep their older fields until they expire.
- Cannot be deleted one record at a time. They expire on their own.
- The reason you type when you cancel (optional)
- Kept in our database until you delete your account, and included in Download my data. It is cut to 450 characters and is not sent to the payment processor. Cancellations made before this update may still have your note at the payment processor.
- Deleted with your account.
- Processing queues that carry your account ID
- Expire within 14 days.
- Cannot be deleted one message at a time. They expire on their own.
- Backups of our database
- Backups expire on a schedule. Our goal is that data from a closed account is gone from backups within 6 months of authenticating.
- Cannot be edited. They expire on their own.
- Copies held by service providers
- An enterprise AI provider may keep a request for up to 90 days if its checks for misuse of its service flag it, and its staff may read flagged requests.
- The provider's own rules decide how long it keeps what it holds.
- Purchase records
- The app store you buy through and our payment processor keep their own purchase records under their own rules and the law. We also keep a record of report exports you bought, and the link to your app store subscription, with your account ID. We have not yet set when the export record is deleted.
- The app store's records are held by the app store. Ask it about them.
- A short record that your account was closed
- Kept for 3 years, so we can show deletion was done, then deleted from our database. It holds your random account ID, the dates, and no health data. The notice we email to our own team is deleted by hand once a year, after it is 3 years old. Our deletion log keeps a coded reference (a hash prefix, not your account ID) with no email, name or health data, and has no end date.
- Ask us at support@flifurther.com if you want to know more.
- Newsletter sign-ups
- If you sign up for our newsletter, we keep your email address and sign-up record. Kept until you unsubscribe. When you unsubscribe, we delete your email address and keep only a coded marker so we don't email you again. Sign-ups made before this update also left a stored copy with your IP address, browser and referring page. We delete that copy when you unsubscribe, which may take longer than the deletion from our database.
- Ask us to delete yours at support@flifurther.com.
- Waitlist and early-access sign-ups
- If you joined our waitlist or early access, we keep your email address with the sign-up.
- Ask us to delete it at support@flifurther.com.
- Output files from our database maintenance jobs
- Deleted after 90 days. They are designed to hold counts, not personal data.
- Removed automatically.
- The copy of your data you can download
- Made when you ask and sent to your device. We do not keep it.
- Settings, Download my data.
Your rights and how to use them
You can ask us what we hold about you, ask us to delete it, or withdraw your consent, at any time, free of charge. We answer within 45 days of receiving your request, and we finish a deletion within 30 days of confirming it is you (backups within 6 months). If you disagree with our answer, reply with "Appeal" and we will answer the appeal in writing within 45 days. If we still say no, we will tell you how to contact your state Attorney General.
To make a request, email support@flifurther.com with the subject PRIVACY. To appeal an answer, email support@flifurther.com with the subject APPEAL. In the app, Settings lets you download a copy of your data, withdraw your consent and close your account.
You can review what you have logged in the app, and you can edit your profile, including your body weight, in Settings → Profile.
You can withdraw this consent at any time from Settings → Health Data Consent. Withdrawing stops MyVector from collecting any new health data from you; it does not by itself delete health data already collected.
To start deleting, close your account in the app (Settings, Delete account; if your subscription or trial has ended, “Manage or delete your data”). To ask about deleting some of your data, or to ask for a copy, email support@flifurther.com.
How to complain
Attorney General complaint forms
Tracking across websites
No third party collects consumer health data about you across other websites or services through MyVector.
Changes to this policy
We tell you in the app before a change takes effect, and ask you to consent again when the change affects what we collect or share.