1. Scope and contact
Vanoa is a health and fitness app operated by independent developers, not an incorporated company. In this notice, “we”, “us” and “our” refer to those developers. This notice covers the Vanoa Android app, its account services, and this website. Vanoa is not currently available on iOS and does not connect to Apple Health.
For privacy questions or requests about your information, email support@vanoa.app. Please do not send passwords, sign-in codes or unnecessary health details.
2. Information we process
Information you save in Vanoa is linked to your Vanoa account. Some features also keep copies or settings on your phone. Where a feature is optional, you can choose not to use it; turning a feature off does not by itself erase information already saved, but you can delete it as described in Retention and deletion.
Accounts, profile and setup
To run your account we process your email address, account identifier, sign-in credentials, verification and recovery requests, sessions, and any two-step verification you set up. If you sign in with Google, Google shares your basic profile details (such as name and email) with us; we never receive your Google password. Passwords are handled by our authentication provider and are never stored in readable form.
Profile and setup information includes your display name, optional bio and profile photo, date of birth, height, weight, sex (used for calorie formulas), body measurements, activity and dietary preferences, training choices, sleep schedule, goals and app settings. Some setup details are needed to calculate your targets; a profile photo, bio and individual logging features are optional. We also record your acceptance of these documents, your 18+ confirmation and your choices for optional features. Account-linked counters for scans, data exports and security checks, and subscription records, help us apply usage limits, protect accounts and run the service.
Health, fitness and derived information
When you enter, save or import records, Vanoa processes nutrition and meal details, energy and nutrients, custom foods and recipes, water intake, steps, sleep timing, duration, notes and stages, weight and body measurements, workouts, exercises, sets, routines, programmes, personal records, fasting, and medicine or supplement names, labels, schedules, taken/skipped records and stock. Records can include dates, times, quantities, units, notes and their source.
Vanoa uses these records and your profile to calculate goals, calorie estimates, scores, progress, weight trends and related insights. These are fitness estimates, not medical advice or diagnoses. Your records and saved results are stored in your Vanoa account and cached on your phone so the app works quickly and offline.
Photos and scanning
You can take or choose a profile photo, which is uploaded to your account storage. Profile photos are served from a public web address, so anyone who has that address can view the image; do not use a photo you want to keep private. Optional food and label scans send a photo for processing as explained in AI image scanning. Barcodes are read on your phone and the barcode number is looked up in Open Food Facts.
Optional location
Location is off by default. If you turn it on, Vanoa takes a single, approximate (coarse) location reading to rank regional foods higher in search, or you can type a place instead. The reading is rounded to two decimal places (about one kilometre) and saved with a place name to your settings and your account. A place you type is converted to a location by your phone’s geocoding service. A typed place is saved as you enter it, so avoid entering a street address. Vanoa never requests precise or background location and does not track your location over time.
Your phone’s time zone is sent to our servers so that days and dates are calculated correctly.
You can decline location access, enter a place manually, or turn location off at any time. To remove a location already saved to your account, change it in the app or contact us.
Searches, contributions and quality information
Online food and exercise searches send your search terms and filters to our servers to return results. Barcode lookups send the barcode number to Open Food Facts. Search terms can reveal health interests even when they do not contain your name.
Food catalogue contributions are a separate choice that is off by default. If you turn them on, the food or recipe names, portions and nutrition values you create are submitted to improve the shared catalogue. Submissions stay linked to your account while they are reviewed, so you can withdraw them and so they are deleted with your account; reviewers see the food information without your name or email. Removing identifiers does not guarantee that free-text content is anonymous, so avoid personal details in food names.
The app keeps search-quality counts, such as searches that found no result, on your phone. Vanoa does not currently upload them. A separate search-quality setting controls any future upload, which would only happen with your opt-in and after this notice is updated.
Vanoa Plus and technical information
Vanoa Plus is sold through Google Play, which handles your payment; we never receive your card or bank details. Our subscription provider, RevenueCat, processes your Vanoa account identifier and subscription status, including before you buy, together with the product, transaction identifiers, purchase, renewal and expiry dates, and the store environment.
Like any online service, our providers receive technical request information such as IP address, headers and timing. Cloudflare Turnstile checks sign-in and sensitive account requests to block bots. The app contacts Expo to check for and download updates. Vanoa contains no advertising, no advertising identifiers, and no third-party analytics or crash-reporting tools, and we do not sell your personal information.
Reminders, exports and support
Reminders and sleep alarms are scheduled on your phone. Their text may show health or medicine information on your lock screen; you control this in Vanoa and your device settings. Vanoa does not use push notifications and does not collect a push token.
You can export a copy of your account data, and you can choose to share workout or achievement summaries with people or apps you pick. Files you save or send are separate copies under your control. When you contact support, we process the details, messages and attachments you choose to send.
3. Android Health Connect
Health Connect is optional. It is Android’s on-device health data store, not a Vanoa cloud account, Google Fit account, Samsung Health account or Apple Health connection. Other apps may read or write records there under their own permissions.
With your permission, Vanoa imports records into its fitness features and can write records you log in Vanoa back to Health Connect. Imported records are saved to your Vanoa account (stored with Supabase) and cached on your phone, so your history is available across devices.
| Record | Access | Feature and information used |
|---|---|---|
| Steps | Read and write | Step counts and time ranges for daily totals and progress. Imported daily totals and estimated step calories are saved to your account; steps you log by hand can be written to Health Connect. |
| Sleep sessions | Read and write | Start, end and duration for sleep history; sleep stages for the night you open on the Sleep screen, which are saved to your account. Sleep sessions you record in Vanoa can be written, without stages. |
| Weight | Read and write | Weight and time for weight history and trends; a day’s latest valid reading is saved, and your manual entries take priority. Weights you log can be written. |
| Hydration | Read and write | Volume and time for water tracking. Imported water records are saved; amounts you log can be written. |
| Nutrition | Read and write | Food or meal name, time, energy, protein, carbohydrate, fat and fibre for nutrition logs. Meals you log, including supplement nutrients, can be written. |
| Exercise sessions | Read and write | Session time, type and title for workout history. Workouts you complete in Vanoa can be written. Exercise routes are never requested. |
| Active calories burned | Write only | Estimated calories for workouts you complete in Vanoa. Vanoa does not read this record type. |
| Heart rate and respiratory rate | Optional, read only | Overnight minimum, maximum and average for the night shown on the Sleep screen. Calculated on your phone and not uploaded to our servers. |
Vanoa uses only the fields described above. It does not request exercise routes, background health access or access to history older than Health Connect normally allows.
How synchronization works
Vanoa reads the records you allow, converts them into its units, combines certain daily values, and uses record identifiers to avoid importing the same record twice. The first sync looks back over the last 30 days; later syncs continue from where the last one stopped. That 30-day window only limits what is imported; it is not a retention period.
Sync runs when you open or return to the app and when you start it yourself. Health Connect data is used only for the fitness features described here. It is never sent to our AI scanning provider and is not included in subscription requests.
Permissions, cloud copies and your choices
During onboarding Vanoa asks for a smaller set of read permissions; connecting Health Sync requests the full read and write set above. Regular sync needs all of the core permissions in the table; heart rate and respiratory rate are optional and only used on the Sleep screen. You can grant or remove any permission at any time in Android Settings → Health Connect → App permissions → Vanoa. Manual logging works without Health Connect.
Disconnecting Health Sync in Vanoa stops syncing but does not delete records already imported to your account or records Vanoa has written to Health Connect. To stop all access, including the optional Sleep-screen heart-rate reading, remove Vanoa’s permissions in Android’s Health Connect settings.
Deleting a log in Vanoa does not delete the original record in Health Connect, so a later sync can import it again unless you delete it there too. Deleting your Vanoa account deletes imported records from your account, but it does not remove records in Health Connect or revoke Android permissions; manage those in Health Connect and the app that created them.
Limited Use. Vanoa’s use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. In particular, we use Health Connect data only to provide the fitness-tracking features described above; we never sell it, never use or transfer it for advertising, credit, insurance or lending decisions, and never give it to data brokers; we transfer it only to our infrastructure provider (Supabase) to provide those features, or where required for security, to comply with law, or as part of a merger or acquisition with notice to you; and people at Vanoa do not read it unless you ask us to (for example, in a support request), it is needed for security, or the law requires it. We do not use Health Connect data to train AI models.
4. AI image scanning
Vanoa has two optional AI scanners: a food-photo scanner that estimates a meal’s nutrition, and a label scanner that reads food or supplement labels. There is no AI chat or AI coach, and scanners never change your diary on their own.
When you scan, the photo is resized on your phone and sent to our server, which forwards it with the scanning instructions to an AI model through OpenRouter, our AI provider. Every request is sent with zero-data-retention routing, so OpenRouter only uses model providers that have committed not to keep the request; no fallback to other providers is configured. The request contains the photo and instructions only, not your name, email, account identifier or health logs. Vanoa does not store scan photos on its servers, and temporary copies on your phone are cleared when you sign out. A photo can include faces, handwriting or other details, so crop the photo to the food or label.
Results are estimates. You review and can edit them before anything is saved, and they are not medical or dietary advice. You can always log food by search, barcode or by hand instead. We do not use your photos or data to train AI models.
5. Purposes and choices
Vanoa uses information to provide your account, save and show your fitness history, calculate estimates and goals, run the optional features above, schedule reminders, answer support requests, protect accounts and verify Vanoa Plus subscriptions. Optional contributions are used to improve the shared food catalogue. We do not use your information for advertising.
- Use device permissions for camera, photos, location, notifications and Health Connect.
- Use Profile → Privacy & Data for the contribution and search-quality settings and to export or delete your data.
- Choose manual entry instead of AI scanning, and manual logging instead of Health Connect.
- Use app and device notification settings to limit reminders and lock-screen content.
- Ask for access, correction or deletion, or withdraw consent, using the contact details below.
Processing grounds
We process your information to provide the service you signed up for, to keep accounts secure and prevent abuse, and to meet legal obligations. Health and fitness information, Health Connect access, location, AI scanning, contributions and search-quality uploads rely on your consent, which you give by using those features and granting the related permissions. You can withdraw consent at any time; this does not affect processing that already took place.
7. Storage and international processing
Your account data is stored by Supabase in Mumbai, India, and cached on your phone. Some of our providers, and the developers who operate Vanoa, may process information in other countries, including India, the United Arab Emirates and the United States. Where information is transferred internationally, we rely on our providers’ data-protection terms, including standard contractual clauses where they offer them.
8. Retention and deletion
We keep your account and fitness records while you have an account, so your history stays available. You can delete individual entries at any time, and you can delete your whole account in the app or by email; see Delete Account.
- Account, profile, photos and fitness records: deleted when you delete your account, and within 30 days of an emailed request.
- Backups: we do not keep database backups, so deleted data cannot be restored. If we start keeping backups, we will update this policy first, including how long backup copies are kept.
- Contributions: your submissions and the link between them and you are deleted with your account. Food information already added to the shared catalogue may remain, without anything that identifies you.
- Purchase records: kept as long as needed for subscription management and legal, tax and accounting obligations. They contain no health data.
- On your phone: cached data and temporary photos are cleared when you sign out or delete your account. Exports you saved, records in Health Connect and copies in other apps are separate and are not deleted remotely.
Disconnecting Health Sync, removing permissions, uninstalling the app, deleting a record, deleting your account and cancelling Vanoa Plus are separate actions. Deleting your account does not cancel a Google Play subscription; cancel it in Google Play. If a deletion fails or you are unsure it completed, contact support.
9. Security
All connections between the app, our servers and our providers are encrypted in transit (HTTPS). Our database enforces per-account access rules, server requests require your signed-in session, sign-in sessions are kept in your phone’s protected storage, and Android app backup is disabled for Vanoa. You can add two-step verification in the app.
No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission. Please keep your phone and sign-in details secure, and avoid putting sensitive information in profile photos, free-text fields, scans and support messages.
10. Age eligibility
Vanoa is only for adults aged 18 or over. You must confirm you are 18 or over when you create an account, and Vanoa does not offer accounts managed by a parent or guardian. If we learn that someone under 18 has created an account, we will delete the account and its data.
If you believe a child has given information to Vanoa, contact support@vanoa.app without sending unnecessary details about the child.
11. Your rights and requests
Depending on the law that applies to you, you may have rights to know how your information is processed, to access and get a copy of it, and to correct, delete or move it, restrict or object to its processing, withdraw consent, and ask for review of certain automated decisions. You can also complain to your data-protection authority. Choosing UAE law in our Terms does not remove rights that your local law gives you.
You can correct most details in your profile and settings. Profile → Privacy & Data lets you download a copy of your data as a ZIP file; email us for any information not included in it.
How to make a request
Email support@vanoa.app with your request and the email address of your Vanoa account. We will verify your identity before sharing or deleting account information, and we respond within 30 days. Never send your password, sign-in code or authenticator code. Someone acting for you may need to show they are authorised. You can also use the web deletion request without reinstalling Vanoa.
If we refuse a request, we will tell you why. You can appeal by replying to the same address or complain to your data-protection authority.
Other-market rights
If you live in a US state with a consumer privacy law, you may have the right to know what personal information we collect and who receives it, to access, correct, delete and get a portable copy of it, and not to be discriminated against for using these rights. We do not sell personal information, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. To make a request, email support@vanoa.app.
If you are in the EEA, UK, Switzerland or another region with data-protection law, you have the rights listed above. Contact us to use them, or contact your supervisory authority.
12. This website
This website is plain HTML. It does not require an account, does not use JavaScript, analytics, advertising pixels or cookies, and does not embed third-party services. Fonts and images are hosted with the site.
The website host, GitHub Pages, receives ordinary request information such as IP addresses. Following an external link or an email link takes you to that service.
Browser privacy signals
Because the website and app do not track you across sites or show advertising, there is no tracking for a Do Not Track or similar browser signal to switch off.
13. Changes and contact
We may update this notice. The date at the top shows when it was last changed. If we make important changes, we will tell you in the app or by email and ask for your agreement again where the law requires it.
Questions, corrections or privacy requests: support@vanoa.app. Also read the Terms of Service and Delete Account guide.