Privacy Policy
This policy explains how Vital Quest 360 collects, uses and protects your information across our website, web app, mobile apps and services.
Our Promises to You
Quick Navigation
1. Who We Are and What This Policy Covers
VitalQuest360 ("Vital Quest 360," "we," "us," or "our") is a health and wellness company based in Pittsford, New York. This Privacy Policy explains how we collect, use and protect information through our website vitalquest360.com, the Vital Quest 360 web app at app.vitalquest360.com, our mobile apps, and our services (together, the "Platform").
About HIPAA. When you use the Platform on your own to track your health, your information is protected by this Privacy Policy and applicable federal and state consumer protection laws, but generally not by HIPAA. When a healthcare provider who is covered by HIPAA uses the Platform to care for you, or you receive care from a licensed provider through the Platform, the information handled for that care is also protected under HIPAA. That provider's Notice of Privacy Practices then applies.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email, phone number, date of birth, password | You |
| Health information | Vital signs, medications, exercise, sleep, nutrition, weight, symptoms, health goals, fitness level | You, with your consent |
| Connected device data | Steps, heart rate, sleep and activity data from wearables or Apple Health / Google Health Connect | Apps and devices you choose to connect |
| Specialist communications | Messages, appointment details and notes from health specialists you connect with | You and the specialist |
| Payment information | Subscription status and purchase history (card details are handled by the app store or payment processor, not stored by us) | You, app stores, payment processor |
| Support communications | Emails and messages you send to our team | You |
| Technical and usage data | Device type, operating system, app version, IP address, crash logs, features used | Automatically, from your device |
| Website data | Pages visited, referring site, browser type | Automatically, through cookies on our public website |
We do not collect your precise GPS location, contacts, photos or microphone data unless a feature clearly asks for it and you give permission in your device settings.
3. How We Use Your Information
Health information is used only to:
- Show your health data, trends and reports to you
- Provide AI-powered goal setting and personalized wellness recommendations
- Share with specialists you choose to connect with
- Send reminders you set up, such as medication or activity reminders
- Keep the Platform secure and fix problems
Account, contact and usage information is used to:
- Create and manage your account and subscription
- Provide customer support
- Improve the Platform, using aggregated or de-identified data wherever possible
- Market Vital Quest 360's own services, such as new features, programs and offers, by email, push notification or text message
- Prevent fraud and meet legal obligations
Marketing rules we follow
- Marketing emails include an unsubscribe link, and we process requests within 10 business days.
- We send marketing text messages only with your prior express written consent. Reply STOP to opt out. Mobile numbers and text consent are never shared with third parties for their marketing.
- You can turn off marketing push notifications in the app or your device settings.
- Marketing messages are never based on your specific health conditions, medications or health data unless you have given separate, express consent.
What we will never do: Sell your data; share health information with advertisers, data brokers or social media platforms; or use health information obtained from Apple Health, Google Health Connect or connected devices for advertising.
4. Your Consent for Health Information
We ask for your clear consent before collecting health information, when you create your account and when you connect a device or health app. We ask again before using or sharing health information in any new way not described in this policy.
You can withdraw consent at any time:
- Disconnect a device or health app in the app's Settings, and we will stop receiving that data.
- Delete specific entries directly in the app.
- Delete your account in Settings or by emailing admin@vitalhealthmedicalcare.com, and we will delete your health information as described in the "Security, Retention and Breach Notification" section.
Withdrawing consent may mean some features, such as personalized recommendations, no longer work.
5. When We Share Information
We never sell personal or health information. We share it only in these situations:
| Who we share with | Why |
|---|---|
| Health specialists you choose to connect with | To provide the care or coaching you request. You control which specialists can see your data. |
| Service providers (cloud hosting, databases, email and notification delivery, customer support tools, payment processing, AI processing) | To run the Platform. They may use data only to provide services to us, under written contracts requiring them to protect it. Providers that handle health information on behalf of healthcare providers sign Business Associate Agreements. |
| Apps and devices you connect | Only the data you authorize, when you choose to connect them |
| People you choose to share with | For example, a family member or caregiver you invite, if that feature is available |
| Government agencies, courts and law enforcement | When required by law or valid legal process, or to prevent serious harm to someone's health or safety |
| A buyer or successor business | In a merger or sale, under the same protections. We will notify you before your information becomes subject to a different privacy policy. |
We may publish or share aggregated statistics that cannot identify you, such as the average number of daily active users.
7. Security, Retention and Breach Notification
Security. We maintain reasonable administrative, technical and physical safeguards as required by New York's SHIELD Act (General Business Law § 899-bb), and follow HIPAA safeguards where HIPAA applies. These include:
- Encryption of data in transit and at rest
- Secure login, with multi-factor authentication available
- Access to health information limited to authorized staff who need it, with access logging
- Written data protection contracts with service providers
- Regular security reviews and staff training
No system is 100% secure, so we cannot guarantee absolute security.
Retention. We keep your information while your account is active. When you delete your account, we delete or de-identify your health information within 30 days, and remove it from backups within 90 days. We may keep limited records, such as billing records or your marketing opt-out, where required by law.
Breach notification. If a breach affects your information, we will notify you and the required authorities as required by New York General Business Law § 899-aa, the Federal Trade Commission's Health Breach Notification Rule, and HIPAA where it applies.
8. Your Rights and Choices
Wherever you live, you can:
- Access and download a copy of your data
- Correct information in your profile or health entries
- Delete specific entries or your entire account
- Withdraw consent for health data collection or a connected device
- Opt out of marketing by email, text or push notification
- Ask which third parties have received your personal information
Most of these can be done in the app's Settings. You can also email admin@vitalhealthmedicalcare.com with the subject line "Privacy Request." We will verify your identity and respond within 30 days. We will never charge you or treat you differently for exercising these rights.
State health data laws. Some states, such as Washington, Nevada and Connecticut, give residents additional rights over consumer health data. If you live in one of these states, contact us and we will honor your rights as required by your state's law. If we deny a request, you may appeal by replying to our decision, and we will respond within the time required by law.
HIPAA rights. Where HIPAA applies to care you receive through the Platform, you also have the rights described in the treating provider's Notice of Privacy Practices, including the right to file a complaint with the U.S. Department of Health and Human Services.
9. Children's Privacy
The Platform is intended only for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18, in line with the New York Child Data Protection Act. If we learn that a user is under 18, we will close the account and delete their information. If you believe a minor has created an account, please contact us.
10. Changes to This Policy
We will post any update on this page with a new "Last updated" date and notify you in the app or by email before significant changes take effect. We will not use health information you have already given us in a materially different way without first getting your consent.
11. Contact Us
If you have any questions about this policy or how we handle your information, please reach out to VitalQuest360.