Privacy policy — Vitna

Who we are

Vitna is made and run by Magnusbm Properties Limited, Flat 7, 46 Cintra Park, London, SE19 2LQ. Questions about this policy or about your information: [email protected].

What the app collects, and why — in plain words

The app collects only what it needs to do its job:

• Your account — your email address and your organisation's name. Why: to create and run your account. Required: yes, the app is account-based. The app also gives you an internal user ID so your own data can be told apart from everyone else's.
• Your job content — the jobs you record, and the evidence you choose to capture for them: photos, videos and stills taken from videos, voice notes, written notes, and documents you attach (PDF or Word files). Why: this is the app's purpose — turning what you capture into reports. Required: you choose what to capture; nothing is captured without you doing it.
• Your reports — the reports the app writes from your evidence, including priced lists, and the signatures and names you type when signing. Same purpose.
• A job's location — only if you allow it: where you are (from the phone's GPS), where a photo was taken (from the photo's own location tag), or an address you type in. Why: to record where a job was. Required: no — the app asks your permission first, and you can use it fully without giving location.

What we deliberately do not collect: no advertising identifiers, no third-party analytics, no crash-reporting tools, no tracking of what you do in other apps. None of these are built into Vitna (verified in the app's code).

The legal basis, in plain words

The app's own data — your account, your jobs, the evidence you capture and the reports written from it — is processed under legitimate interest: running the service you signed up for is the service itself, and we process nothing beyond it.

Health & Care is different, and always will be. Anything in the Health & Care area of the app is processed only with your separate, explicit consent — asked on its own, in plain words, never bundled into a general tick-box, and never a condition of using the rest of the app. (During the closed test, testers are not shown Health & Care at all.)

Where your information goes

• Supabase — our hosted database, authentication and file-storage provider — stores your account, your jobs, your evidence files and your reports.
• Google (the Gemini AI service) — when you ask for a report, the evidence you have selected is sent to Google's Gemini API, which writes the report text from it. It is used only as a processor, on our instructions, for that purpose. Closed-test accounts always use this hosted AI: testers' evidence goes to the hosted AI only, and the "your own computer" option below is not offered to closed-test testers.
• Your own computer, instead (optional) — if you turn on "my own computer" mode, a small program on your own computer reads your evidence on your own network and writes the report there; for those reports your evidence does not go to the cloud AI service. (Not available to closed-test accounts.)
• RevenueCat — our payments provider — comes into play only if and when payments are switched on. The closed test is free; while it is, RevenueCat processes nothing for Vitna and holds nothing about you.

We do not sell your information, share it for advertising, or use it to profile you.

How long we keep it

Your data is kept while your account exists — and no longer. Delete a job, a piece of evidence or a report in the app and it is deleted from your account. Delete your account (below) and everything in it is hard-deleted — removed, not hidden. Copies inside routine safety backups expire on their own schedule — the exact period will be stated here before this is published.

Closed-test accounts: your data is kept while your account exists, and if the test ends first, whatever is left is hard-deleted within 30 days of the programme ending or your tester access being withdrawn.

How it is kept safe

Information travels to and from the app encrypted (HTTPS). The providers named above store it encrypted. The app keeps its own on-phone storage encrypted. Access to your information is limited to the people running the service.

Your rights (UK GDPR)

You have the right to: see the information we hold about you; correct what is wrong; have it deleted; take a copy with you (the app can export your data); and object to how we use it. To use any of these rights, email [email protected] — or use the tools in the app (export your data; delete your account). If you are unhappy with our answer you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local data-protection authority if you live outside the UK.

Deleting your account

In the app: More → Settings → "Rarely used below" → "Delete my account". You will be asked to type your organisation's name — or your email address, if you have no organisation — to confirm (this stops accidental deletion), then to confirm once more ("Delete Anyway") — then everything in the account is hard-deleted. Without the app: email [email protected] from your account's email address and we will delete it, handled within 30 days. Either way, deletion removes the account, your jobs, your photos and other evidence, your reports, your templates, your acknowledgements and your settings. Full instructions are on the account-deletion page that lives next to this policy.

Children

Vitna is a work tool and is not made for or directed at anyone under 18.

Changes to this policy

If this policy changes, the new version will be dated here. This draft: 28 September 2026.