Vigor Privacy Policy

Last updated: 2026-09-25. Applies to the Vigor iPhone app and the Vigor Android app, and to their optional watch apps.

Summary

Vigor is built for privacy. The app reads certain health data from Apple Health on iPhone, or from Health Connect on Android, uses it only to compute your body-energy score on your phone, and never sends your health data to the developer or to anyone else. Vigor has no user account, no server of its own, no analytics, no advertising, and no third-party code that sends data to anyone. Your health data never leaves your own devices - your phone and, if you use one, your watch. The only thing you can choose to share is your energy score with friends, through the optional, opt-in Circles feature on iPhone described below, stored in your own Apple iCloud. Your health data stays under your control in Apple Health or Health Connect.

Who we are

Vigor is published by the developer named on its App Store and Google Play listings. For any privacy question, contact thomas.frosio@gmail.com.

Health data Vigor reads

With your explicit permission, Vigor requests read-only access to the health data types below. It uses them solely to estimate your body-energy score and the insights shown in the app. You can deny any of them: to compute a score Vigor needs at least heart rate and sleep, and every other type only refines it where you allow it.

On iPhone, from Apple Health

• Heart Rate Variability (SDNN, and RMSSD where your iPhone provides it)
• Beat-to-beat heartbeat series (RR intervals), used to refine heart rate variability
• Heart Rate, Resting Heart Rate, Walking Heart Rate Average, and Heart Rate Recovery
• Sleep Analysis, including sleep stages where available, and sleeping breathing disturbances where available
• Workouts
• Active Energy Burned
• Wrist Temperature (sleeping)
• VO2 max (cardio fitness)
• Respiratory Rate and Blood Oxygen
• Mindful Minutes
• Time in Daylight, used for the optional daylight pattern
• Menstrual Flow, used only for a note on the Body page; it is never part of the score, and it is never sent to your widgets or your watch
• Date of Birth and Biological Sex (characteristics), used to personalize the model

On Android, from Health Connect

• Heart rate and heart rate variability
• Resting heart rate
• Sleep, including sleep stages where available
• Exercise (workouts)
• Active calories burned
• VO2 max (cardio fitness)
• Oxygen saturation (blood oxygen) and respiratory rate
• Skin temperature
• Mindfulness sessions
• Menstruation, used only for a note on the Body page; it is never part of the score, and it is never sent to your widget or your watch

Vigor also asks Health Connect for two kinds of access, where your phone supports them: to read data older than 30 days, so that it can learn your personal baseline from about two months of history; and to read in the background, so that the widget, the watch, and the optional notifications stay current when the app is closed (about once an hour). Without the background permission Vigor reads nothing while it is closed. Health Connect does not provide age or sex; you can enter them in the app, and they are stored only on your phone.

On both platforms Vigor requests read-only access. It does not write any data into Apple Health or Health Connect.

How your data is used

All processing happens on your phone. Vigor reads the data types above, computes your body-energy score and timeline locally, and displays the result. That is the only use.

• Vigor does not send your health data to the developer or to anyone else. There is no Vigor server.
• Vigor does not sell, rent, or share your health data with anyone.
• Vigor does not use your health data for advertising, marketing, or data mining of any kind.
• Vigor does not store your health data in iCloud, CloudKit, Google Drive, or any cloud service of its own. The only cloud storage Vigor itself uses is the optional Circles feature on iPhone: if you opt in, your chosen display name and values derived from your energy score are stored in your own Apple iCloud (see the Circles section below). Your phone's own backup is covered under "What Vigor stores on your device" below.
• Vigor contains no analytics or crash-reporting SDKs, and no code that sends data anywhere except to your own watch, as described below.
• On Android, neither the phone app nor the watch app requests Android's internet permission, so neither can open a network connection of its own.

Your watch

The watch apps are optional.

• With the iPhone app, the phone sends the watch your current reading and the look you chose, and the watch app can also compute a reading on the watch from the health data it is permitted to read there, in the same way as the phone.
• With the Android app, the watch does not read Health Connect and does not compute a score. The phone sends it what it needs to draw your reading, such as the score and the day's curve, the charge and drain, the readiness inputs, last night's sleep window, the heart-rate levels the watch compares against, your day tags, your model settings, and the look you chose. The watch sends back only the day tags you set on it and requests to refresh.
• On Android this travels through Google Play services' Wearable Data Layer, which only the Vigor app on your own paired phone and watch can read. Google describes it this way: over Bluetooth the two devices share an encrypted channel, and when Bluetooth is unavailable the data is routed through Google's servers, end-to-end encrypted. The developer never receives it.
• Live heart rate, with the Android app: the watch's Now page can show your heart rate as it is measured, using the watch's body sensors, if you allow it. The sensor is read only while that page is on screen, the reading is shown and not stored, and it is never sent to the phone or used in the score.

Circles (optional friend sharing on iPhone, off by default)

Circles lets you share your current energy score with individual friends, one connection at a time, and see theirs. It is available in the iPhone app only. It is turned OFF by default: nothing in this section applies unless you deliberately turn it on in the app.

• One to one, never a group: each friend is a separate, private connection. Your friends cannot see each other, and they cannot see who else you are connected to.
• Both people must agree: entering someone's join code sends them a request. Nothing is shared in either direction until they accept it, and declining tells the other person nothing.
• What is shared: your chosen display name, an optional avatar, and values derived from your energy score - the score itself (0 to 100) and its zone, plus, only if you allow it for that particular person, the trend arrow, your week variation, your morning starting number, how much the night gave back, your average morning, how many days in a row you started above it, and the rough shape of your day. Your health measurements themselves (heart rate, heart rate variability, sleep, workouts, and so on) NEVER leave the device.
• You choose per friend: you set separately, for each person, which of those values they see, and you can pause a person without disconnecting.
• Who can see it: only that one friend. It is never public, and a shared link on its own grants nobody access - only the person you accepted can read what you share with them.
• Nudges: a friend can send a short, non-medical "rest", "cheer", or "check in" nudge, which carries only the sender's display name and the nudge type. You can mute a friend's nudges on your device.
• How it is stored: in Apple iCloud (Apple's CloudKit service), under your own Apple account. The developer operates no server, never receives your data, and cannot read what you share.
• Your controls: you can remove any friend at any time, which stops sharing in BOTH directions and deletes from iCloud what you shared with that person. Turning Circles off in the app's Settings removes every connection, deletes everything you shared from iCloud, retires your join code, and stops the notifications and sync subscriptions.

No account, no tracking

Vigor has no login and no user account of its own; the optional Circles feature uses your own Apple iCloud account, never a Vigor account. Vigor does not track you across apps or websites and does not link any data to your identity for advertising. No App Tracking Transparency prompt is shown on iPhone because Vigor does not track.

Notifications

The optional low-energy alert, morning briefing, and evening outlook are local notifications, composed and scheduled entirely on your phone. No notification content is sent to or through any server.

What Vigor stores on your device

Vigor saves on your phone your app settings (your chosen visual theme, your energy-model settings such as sensitivity preset, sleep need and morning target, and, on Android, the age and sex you entered), any day tags you add (for example alcohol, caffeine, sickness, or travel), whether sample-data mode is on, your latest reading for the widgets and the watch, and the end-of-day energy value used to seed the next day. It also keeps its own computed history - one summary per day, such as that day's morning start, high and low - so that the History and long-term charts open instantly. The watch apps keep the latest reading the phone sent. All of this lives in Vigor's private storage, which other apps cannot read.

Device backups: if you have turned on your phone's own backup (iCloud Backup or a computer backup on iPhone, or Android's backup to your Google account), your phone includes Vigor's settings, day tags, and latest reading in that backup, under your own account. Google describes Android's backup as end-to-end encrypted with your screen lock on Android 9 and later. On both platforms Vigor keeps its computed day-by-day history out of backups; it is rebuilt from your health data instead.

Security

Because Vigor has no server and no account, there is no central store of user data that could be breached. Your data stays in Vigor's private app storage on your devices, which the operating system keeps separate from other apps, and in Apple Health or Health Connect, which the operating system protects and where you control each app's access. Data that travels between your phone and your watch goes through the platform's own encrypted channel, as described above.

Data retention and deletion

• Your health data remains in Apple Health or Health Connect, under your control. Vigor keeps no copy of it anywhere except its own on-device computations described above.
• You can revoke Vigor's access at any time: on iPhone in Settings, Privacy and Security, Health, Vigor; on Android in Health Connect's settings, under App permissions, Vigor.
• In the app's Settings, "Re-read Apple Health data" on iPhone, or "Re-read Health Connect data" on Android, clears Vigor's computed history and rebuilds it from your health data.
• Deleting the Vigor app removes everything it stored on that device, including its computed history. Your Apple Health or Health Connect data is not affected by deleting Vigor.
• If you opted into Circles on iPhone, what you shared lives in your own Apple iCloud. Removing a friend deletes what you shared with that person, and turning Circles off in the app removes every connection, deletes everything you shared, and retires your join code - you do not need to go and clean it up by hand.

Exporting your data

You can export everything Vigor computed as CSV or JSON files from Settings. The files are created on your phone and go only where you choose to send them, through the system share sheet.

Children

Vigor is a general wellness app and is not directed at children. It reads health data only on your devices and shares nothing with anyone unless you deliberately opt into Circles on iPhone, which shares only your display name and values derived from your energy score, with individual friends who have accepted your request.

Not a medical device

Vigor is for general wellness and information only. It is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease. Consult a qualified healthcare professional before making health decisions.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.

Contact

Questions about privacy: thomas.frosio@gmail.com.