Privacy Policy

1. Introduction

Vigil ("we," "our," or "us") refers to the suite of Vigil applications, including Vigil Med, Vigil Pet, Vigil Supp, Vigil Circle, Vigil Glow, and Vigil Meal (collectively, the "Apps"). This Privacy Policy describes how we collect, use, store, and protect your personal information, including sensitive health and wellness data, when you use any of the Vigil Apps.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Health Insurance Portability and Accountability Act (HIPAA) where applicable (for Vigil Med), and Google Play's Health Data policies.

By using any Vigil App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Apps.

2. Health Data Disclosure

The Vigil Apps handle the following categories of health and wellness data, depending on the specific app you are using:

3. How We Collect Data

3.1 Data You Provide Directly

You provide data when you manually enter information into any of the Apps, such as setting reminders, logging activities, recording health measurements, creating profiles (e.g., for pets or family members), or entering details about medications, supplements, skincare products, or meals.

3.2 Data Collected Automatically

The Apps may collect:

• Device information: Device model, operating system version, and app version (for crash reporting and compatibility).
• Notification interaction data: Whether notifications were received, opened, or dismissed (to improve reminder effectiveness across all Apps).

3.3 Camera and OCR Data

Some Apps (e.g., Vigil Med, Vigil Meal) may access your device camera to capture images for features like scanning prescription labels or food items. Image processing is performed locally on your device. Photographs of prescription labels are never uploaded, stored on our servers, or sent to any third party. Where a scanned or typed medicine name is checked against an external drug dictionary, that is described in Section 6 and the App asks for your permission first.

3.4 Data We Do NOT Collect

• We do not collect precise location data (any location-based features use on-device processing only).
• We do not use advertising trackers, ad networks, or cross-app fingerprinting technologies, and we do not build advertising profiles.
• We do not send your data to any artificial-intelligence or machine-learning service. Drug interaction checks, prescription label matching, and health reports are produced on your device from reference tables built into the App.
• We do not sell, rent, or trade your data.

3.5 Account and Diagnostic Data We Do Collect

To be explicit, because Section 3.4 previously overstated our position:

• Account data. If you sign in with Apple, Google, or email, we receive and store your email address and an account identifier so your subscription can follow you between devices.
• Subscription data. We store your plan, its status, and a ledger of subscription events for billing and support.
• Product analytics. We record a small number of in-app events, such as a paywall being shown or a free-plan limit being reached, together with the platform you are on. These events do not contain medication names, dosages, vitals, journal entries, or any other health data.
• Crash diagnostics. If the App encounters an error we send crash diagnostics to our error-reporting provider with personal identifiers disabled and all on-screen text and images masked.

4. How We Use Your Data

Your data is used exclusively for the following purposes, depending on the App you are using:

• Core functionality: Providing the primary features of each App, such as scheduling reminders, tracking adherence, logging activities, and generating reports.
• Specific App Features: For example, Vigil Med checks drug interactions on your device against reference tables compiled from NIH DailyMed, NIH NCCIH, and NIH MedlinePlus, and can optionally confirm a medicine name against NIH RxNav with your permission; Vigil Circle facilitates sharing with designated caregivers; and Vigil Meal tracks nutritional intake.
• Cloud sync (Premium, optional): If you opt into cloud sync, your data is encrypted and stored on secure servers to enable cross-device access for the specific App.
• App improvement: Aggregated, anonymized usage patterns may be used to improve app features across the Vigil suite. No individual health data is used for this purpose.

5. Data Storage and Security

5.1 Local Storage (Default)

By default, all user-entered data is stored exclusively on your device using the platform's native encrypted storage (e.g., iOS Keychain / Android Keystore-backed storage). We do not have access to this data.

5.2 Cloud Storage (Premium Feature)

If you opt into cloud sync (a Premium feature available in some Apps), your data is:

• Encrypted using industry-standard encryption (e.g., AES-256) before leaving your device.
• Transmitted over secure, encrypted connections (e.g., TLS 1.3).
• Stored on secure servers with appropriate compliance certifications (e.g., SOC 2 Type II).
• Accessible only by you and, if applicable, your designated care circle members (e.g., in Vigil Circle).

5.3 Data Retention

Local data is retained on your device until you delete it. Cloud-synced data is retained for the duration of your active subscription to the relevant App plus a grace period (typically 30 days) after cancellation, after which it is permanently deleted.

6. Data Sharing

We do not sell, rent, or trade your personal or health data to any third party. Your data may be shared only in the following limited circumstances, depending on the App and features you use:

6.1 No Artificial Intelligence Services

The Vigil Apps do not transmit your personal or health data to any artificial-intelligence, machine-learning, or large-language-model service, and no such service is embedded in the Apps. Features that describe your data back to you — drug and food interaction warnings, prescription label matching, adherence statistics, and the shareable health report — are computed on your device from reference tables that ship inside the App. Nothing is uploaded in order to produce them.

6.2 Protection by Recipients

Each recipient listed above is bound by a written agreement or published terms that require a level of data protection equal to or greater than that described in this Policy. We share only the minimum data each recipient needs for the stated purpose, none of them is permitted to use it for their own advertising or profiling, and none of them receives your medications, doses, vitals, journal entries, appointments, or caregiver details. Where the recipient is a U.S. Government service (NIH RxNav), it operates under the U.S. National Library of Medicine web policies.

6.3 Asking Before We Send

The only feature that transmits information you typed or scanned is medication lookup. Before the first lookup, the App tells you what will be sent and who will receive it, and asks for your permission. You may decline and continue to use the App by entering medication details yourself, and you can change the choice at any time in Settings › Data & Privacy.

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your data:

• Right to Access: You can view all your data within the App at any time.
• Right to Portability: You can export your data as a PDF report from the App.
• Right to Deletion: You can delete all local data from Settings > Delete All Data. For cloud data, submit a data deletion request.
• Right to Rectification: You can edit any medication or health data within the App.
• Right to Restrict Processing: You can disable specific features (e.g., Care Circle, cloud sync) at any time.
• Right to Withdraw Consent: You can stop using the App and delete your data at any time.

8. Children's Privacy

Vigil is not intended for use by children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at admin@vigilmed.health and we will delete it promptly.

9. International Data Transfers

If you enable cloud sync, your encrypted data may be transferred to and stored on servers in the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EU/EEA users.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through an in-app notification or by updating the "Last Updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: