Privacy Policy for Viatza Software Application

Privacy Policy for Viatza Software Application

Last updated: August 23, 2026

AI Garden Ltd (“AI Garden”, “we”, “us”, or “our”) develops and operates the Viatza iOS application (the “Software”). This Privacy Policy describes how personal information is handled in connection with the Software. By installing or using Viatza, you acknowledge the practices described in this policy.

Viatza’s health-record functionality is local-first. Viatza does not operate a cloud server for your health records and does not transmit your health records or user-entered medical information to AI Garden or RevenueCat. Your health information is stored locally on your device, subject to any device-level backup or synchronisation services that you independently enable through Apple.

Viatza uses RevenueCat to manage in-app purchases, subscriptions, premium-feature entitlements, and related subscription analytics. RevenueCat processes only purchase-related information, an anonymous identifier, and limited technical information required for those purposes. RevenueCat does not receive your health records, medications, symptoms, appointments, notes, attachments, HealthKit data, or any other medical content stored in Viatza.

1. Information We Process

The categories below distinguish between health and medical information processed locally on your device and the limited purchase-related information processed through Apple and RevenueCat.

1.1 Account Information

Viatza does not require you to create an account. There is no registration, no username, and no password held by AI Garden. RevenueCat assigns or processes an anonymous App User ID for the limited purpose of associating purchase and entitlement status with an installation of the Software. That anonymous identifier is not a Viatza account and is not linked by Viatza to your health records or medical content.

1.2 Feature-Specific Personal Data

The information you choose to enter into Viatza may include:

  • Patient profile details, including name, date of birth, and biological details.
  • Medications, intakes, dose schedules, and intake logs.
  • Symptoms and symptom records, including intensity and timestamps.
  • Appointments, appointment summaries, and visit notes.
  • Specialists and contact details.
  • Health notes, allergies, vaccines, and questions for healthcare providers.
  • File attachments, such as photographs and PDF copies of medical documents.
  • Locations associated with appointments.

All of this information is stored locally on your device. It is not sent to or stored by AI Garden or RevenueCat.

1.3 Apple Health (HealthKit) Data

If you choose to enable HealthKit features, Viatza may read from or write to Apple Health, but only for the data categories you authorise and only through Apple’s on-device HealthKit framework. HealthKit data remains under Apple’s control. AI Garden and RevenueCat do not receive or store your HealthKit data.

1.4 Standard and Technical Information

Viatza does not collect IP addresses, device identifiers for advertising or behavioural tracking, advertising identifiers, browser information, or analytics telemetry concerning your health records or your use of health-record features. The Software does not contain advertising SDKs or third-party behavioural-tracking SDKs.

The RevenueCat SDK processes limited technical information required to communicate with RevenueCat’s service, validate and restore purchases, determine entitlement status, prevent fraud, maintain service reliability, and produce subscription analytics. This may include device type, operating system, application version, store environment, last-seen time, and technical network information associated with a request. This information is processed separately from the health and medical information stored in Viatza. Viatza does not provide RevenueCat with health records or medical content.

1.5 Purchase Information

When you make an in-app purchase or subscribe, payment and billing are handled by Apple’s App Store. AI Garden and RevenueCat do not receive your full payment-card or bank-account details from Apple.

Viatza uses RevenueCat to validate purchases, determine whether a valid purchase or subscription exists, restore purchases, manage premium-feature entitlements, and understand subscription performance. For these purposes, RevenueCat may process:

  • An anonymous App User ID generated for the Software.
  • App Store receipt and transaction information.
  • Product and entitlement identifiers.
  • Purchase, renewal, expiration, cancellation, refund, trial, and billing-status information.
  • Limited technical information described in section 1.4.

RevenueCat does not receive health records, patient profile details, medications, symptoms, appointments, specialists, notes, allergies, vaccines, attachments, appointment locations, HealthKit data, or other medical content entered into or accessed through Viatza.

1.6 Information You Provide When Contacting Us

If you contact us by email, including to request support or exercise a legal right, we receive the information you choose to send, including your email address and the contents of your message. We use this information only to respond to and administer your request. You should not include health records or other sensitive medical content in support correspondence unless it is strictly necessary for your request.

2. How Viatza Uses Information

2.1 Providing the Software

Health and medical information you enter into Viatza is used to provide the Software’s health-record features, including displaying health records, scheduling reminders, organising appointments, generating summaries, and similar functionality. This processing is performed locally on your device.

Purchase-related information is processed separately through Apple and RevenueCat to offer purchases, validate transactions, restore purchases, determine entitlement status, and enable premium features.

2.2 Reminders and Notifications

Reminders for medications, appointments, and follow-ups are scheduled through Apple’s local-notification system on your device. AI Garden does not operate a server that sends push notifications containing health or medical information. Reminder content is not provided to RevenueCat.

2.3 No Advertising, Behavioural Tracking, or Health Profiling

Viatza does not use your health or medical information for advertising, behavioural tracking, profiling, marketing, or subscription analytics. Viatza does not sell your personal information.

RevenueCat’s processing is limited to purchase and subscription management, entitlement administration, fraud prevention, service operation, and subscription analytics. RevenueCat is not authorised by AI Garden to use Viatza health records or medical content, and no such content is provided to RevenueCat.

2.4 Communications With You

We may use the email address you provide when contacting us solely to respond to and administer your enquiry. We do not use support correspondence to send marketing emails.

3. How Information Is Shared

AI Garden does not receive your Viatza health records or user-entered medical information and therefore does not share that information with RevenueCat or other third parties. RevenueCat does not receive medications, symptoms, appointments, notes, attachments, HealthKit data, or other medical content from Viatza.

Limited information may, however, be handled by the following service providers:

  • RevenueCat — processes purchase, subscription, transaction, entitlement, anonymous App User ID, and limited technical information on AI Garden’s behalf to manage premium access and subscription analytics. RevenueCat acts as a service provider or processor in relation to this information. Its processing is subject to its contractual obligations to AI Garden and its privacy and security documentation. RevenueCat’s privacy policy is available at https://www.revenuecat.com/privacy.
  • Apple Health (HealthKit) — processes HealthKit information under Apple’s privacy practices and the permissions you grant. HealthKit information is not disclosed by Viatza to AI Garden or RevenueCat.
  • App Store — handles payment, billing, transaction, and subscription processing under Apple’s terms and privacy practices. Apple makes relevant receipt and transaction information available to RevenueCat for purchase validation and entitlement management.
  • iCloud — if you have enabled an applicable iOS device-backup or iCloud feature, your device backup may include Viatza’s locally stored data. Any such backup or synchronisation is controlled by you through Apple and is managed by Apple under its terms and privacy practices. It does not cause AI Garden or RevenueCat to receive your health records.

Viatza does not currently support exporting your health data outside the Software.

We may disclose information that we hold where required by law, necessary to establish or defend legal claims, or necessary to protect rights, safety, and security. Because AI Garden does not receive your locally stored health records, those records are not available to AI Garden for such disclosure.

4. Your Rights

Because Viatza stores your health and medical information locally and does not transmit it to AI Garden or RevenueCat, you exercise rights relating to that information directly on your device:

  • Access — open the Software to view the information stored about you.
  • Editing — records in Viatza can be edited in the Software.
  • Deletion of specific records — delete records individually within the Software.
  • Deletion of all data — delete records in the Software, use the in-app erase-all-data option where available, or uninstall Viatza to remove the Software’s local data from your device, subject to any separate device backup that you control through Apple.
  • Portability — Viatza does not currently support exporting your health data.

Purchase-related information processed through RevenueCat is not stored exclusively on your device. Depending on where you are located, you may have rights in relation to that information, including rights of access, correction, deletion, restriction, objection, or portability. To exercise an applicable right, contact AI Garden using the details in section 10. We may ask you to provide the anonymous RevenueCat App User ID displayed or otherwise made available by the Software so that the relevant purchase record can be identified without requesting health or medical information. We will communicate an appropriate request to RevenueCat where necessary.

If you are located in the European Union, the United Kingdom, or another jurisdiction that grants additional data-protection rights, AI Garden does not hold a copy of your Viatza health records on its systems. Rights relating to those locally stored records are therefore exercised through the controls on your device. This does not limit any rights you may have in relation to purchase-related information, support correspondence, or other personal information actually held by AI Garden or its service providers.

You may also have the right to lodge a complaint with the data-protection supervisory authority responsible for your place of residence, place of work, or the location of an alleged infringement.

5. Data Retention

AI Garden does not retain your health records, medications, symptoms, appointments, notes, attachments, HealthKit data, or other medical content on its systems because the Software does not transmit that information to AI Garden. Health and medical information stored locally by Viatza is retained on your device for as long as the Software remains installed or until you delete the information within the Software. Copies contained in an Apple-managed device backup may remain until you delete or replace that backup under Apple’s controls and retention practices.

RevenueCat retains purchase, subscription, transaction, entitlement, anonymous identifier, and limited technical information in accordance with its retention policies and for as long as reasonably necessary to provide purchase and subscription services, comply with legal obligations, resolve disputes, prevent fraud, and enforce applicable agreements. AI Garden retains access to such purchase-related information only for as long as reasonably necessary for premium-access administration, subscription analytics, support, accounting, fraud prevention, and compliance with legal obligations.

If you contact us by email, we retain the correspondence for as long as reasonably necessary to address your request, maintain an appropriate support record, comply with legal obligations, and resolve disputes, after which it is deleted or anonymised where appropriate.

6. Information Security

Viatza relies on the security features of iOS to protect locally stored health and medical information:

  • App sandboxing — other applications are generally prevented by iOS from accessing Viatza’s application data.
  • Encryption at rest — data stored by Viatza is protected on disk using the encryption and hardware-backed security features provided by iOS.
  • No Viatza transmission of health data to AI Garden or RevenueCat — Viatza does not send your health records or medical content to AI Garden or RevenueCat. Network communications with RevenueCat concern only the limited purchase-related and technical information described in this policy.
  • Protected purchase communications — information transmitted between the RevenueCat SDK and RevenueCat is protected in transit using transport-layer encryption. RevenueCat applies its own technical and organisational security measures to information processed through its service.

Like any iPhone application, Viatza’s locally stored data may be accessible while your device is unlocked. We recommend that you use a device passcode and, where available, enable Apple’s “Require Face ID” or corresponding Touch ID or passcode feature to lock Viatza at the iOS level. This feature is managed by Apple, not by Viatza. For setup instructions, refer to Apple’s guide, “Lock or hide an app on iPhone.”

No method of storing or transmitting information is completely secure. If you believe the security of information on your device or purchase-related information associated with Viatza has been compromised, please contact us.

7. Use by Children

Viatza does not impose an age restriction. Its health-record functionality stores information locally on the device and does not transmit a child’s health records or medical content to AI Garden or RevenueCat.

If a child uses premium features or an in-app purchase is made in connection with the child’s use of Viatza, Apple and RevenueCat may process the limited purchase, subscription, entitlement, anonymous identifier, and technical information described in this policy. RevenueCat does not receive the child’s health records, medications, symptoms, appointments, notes, attachments, HealthKit data, or other medical content from Viatza.

Parents or guardians who choose to record a child’s health information in Viatza do so on a device under their control. We recommend that an adult supervise the use of the Software when it is used to record a child’s health information and manage any purchase using Apple’s parental controls and purchase-authorisation features. A parent or guardian who believes that purchase-related personal information concerning a child has been processed improperly should contact AI Garden using the details in section 10.

8. International Operations

Viatza does not transfer your health records or user-entered medical information internationally because the Software does not transmit that information to AI Garden or RevenueCat. Your Viatza health and medical information remains stored locally on your device, subject to any Apple device-backup or synchronisation service that you independently enable.

Purchase, subscription, transaction, entitlement, anonymous identifier, and limited technical information processed by RevenueCat may be transferred to and stored in countries outside the country in which you live, including the United States. RevenueCat states that it stores customer data using Amazon Web Services in the United States and applies contractual and technical safeguards to cross-border transfers. Apple may also process transaction, payment, subscription, HealthKit, or backup information in accordance with Apple’s own terms, privacy practices, and international data-transfer arrangements.

Where applicable data-protection law requires safeguards for an international transfer for which AI Garden is responsible, AI Garden will use an approved transfer mechanism or otherwise ensure that an appropriate level of protection is applied.

9. Changes to This Policy

We may update this Privacy Policy from time to time, including to reflect changes to the Software, purchase and subscription services, legal requirements, or new features such as encrypted backup or synchronisation. Updated versions will be posted on this page with a revised “Last updated” date. Material changes will be communicated in the Software or through App Store update notes where appropriate.

By continuing to use the Software after an updated policy takes effect, you acknowledge the revised Privacy Policy.

10. How to Contact Us

For questions about this Privacy Policy, Viatza’s privacy practices, or the exercise of applicable data-protection rights, contact us at:

AI Garden Ltd
Registered office: 86–90 Paul Street, London, EC2A 4NE, United Kingdom
Email: viatza@aigarden.uk