Privacy Policy

SolarVita handles health data, which deserves a plain account of what happens to it. This describes what the app actually does, not what a template says.

Last updated 19 September 2026

Draft — 7 sections are awaiting legal review

The descriptions of what data is collected, where it goes and how long it is kept were written from the source code and are accurate. The clauses marked below need a qualified adviser and are not yet written. This document is not final.

Who we are

Awaiting legal review

The data controller — the legal entity or individual responsible for this data, and a postal address — must be identified here. This is a legal and factual question about the business, not something that can be read out of the source code.

SolarVita is a health, fitness and sustainability app for Android. Questions about this policy or about your data can be sent to privacy@solarvita.co.uk.

What we collect

The list below describes what the app actually reads and stores, established by reviewing the source code rather than from a template.

CategoryWhat it includes
Health and fitnessSteps, heart rate, sleep, hydration, exercise sessions, distance, and calories burned — read from Health Connect with your permission.
Body metricsAge, height, weight and gender, which you enter yourself. Used to calculate calorie and activity targets.
NutritionMeals you log, photographs of food you scan, calories, protein and other nutrients.
Allergies and dietary restrictionsEntered by you, and shared with the AI assistant so it never suggests something you cannot eat.
LocationYour approximate position, used to fetch local weather and air quality. Not stored as a location history.
AccountEmail address, display name, and a profile photograph if you add one.
Content you createPosts, comments, chat messages, community recipes, stories, and photographs you upload for challenges or meal verification.
SustainabilityEco activities you log and the carbon savings calculated from them.
PurchasesSubscription and purchase records from Google Play. We never see your card or payment details — Google does not share them with us.

What we do not collect

SolarVita contains no analytics, no crash reporting, no session replay, no advertising SDK and no attribution SDK. It does not request the Android advertising ID. We do not build a profile of you for advertising, and we do not sell or share your data with data brokers.

This is unusual enough to be worth stating plainly, and it is verifiable: the app's dependency list contains none of those libraries.

Who else receives your data

Some features work by sending data to other companies. Each one below receives only what that feature needs.

ServiceWhat it receives, and why
Google FirebaseHosts your account, your data and your uploaded photographs. Effectively everything the app stores.
Google Gemini (AI)Receives the information needed to answer you: your recent health figures, meals, training, allergies and dietary restrictions, and any food photograph you scan. This is how the coach, food analysis and weekly report work.
Google PlayHandles purchases and subscriptions, and tells our server whether a subscription is active.
Google (speech, maps, translation)Voice input is transcribed by the platform's speech service. Coordinates are turned into place names. Text may be sent for translation.
OpenWeatherReceives your coordinates to return local weather and air quality.
USDA FoodData Central, Open Food Facts, TheMealDBReceive food names or barcodes you look up, to return nutrition information.
ExerciseDB (via RapidAPI)Receives exercise search terms, such as a muscle group.

Awaiting legal review

International transfers. Several of these providers process data outside the UK and EEA. The transfer mechanism relied on — adequacy decision, standard contractual clauses, or otherwise — needs to be confirmed and stated for each, which is a legal assessment.

Awaiting legal review

Whether the Gemini API is used on a paid tier must be confirmed before this policy is published. Google's terms for the free tier permit human review of submitted content; the paid tier does not. Since food photographs and health figures are submitted, this materially changes what this section has to say.

Our lawful basis

Awaiting legal review

This entire section requires legal advice and is deliberately unwritten. Health data is special category data under UK and EU GDPR (Article 9), which needs both a lawful basis under Article 6 and a separate condition under Article 9. Which apply here — and how consent is captured and evidenced — is a question for a qualified adviser, not a question about the code.

How long we keep it

DataKept for
Challenge verification photographs30 days after the challenge ends
Community recipe photographs that were not approved7 days
Notifications30 days
Free-trial anti-abuse signals180 days
Health, nutrition and training historyFor as long as your account exists — see the note below

Awaiting legal review

A retention period for health, nutrition and training history has not been set. The app currently keeps this for the life of the account, which is arguably the point of a fitness history — but a period still has to be decided and stated here.

Your rights

Under UK and EU data protection law you have rights over your data, including to get a copy of it, correct it, delete it, restrict how it is used, and object to it being used.

To exercise any of them, email privacy@solarvita.co.uk. To delete your account, see the account deletion page — it explains both how to do it in the app and how to ask us if you cannot sign in.

Awaiting legal review

Response times, identity-verification steps, and the right to complain to a supervisory authority (naming the ICO for UK users) need to be written and checked.

Health Connect

On Android, SolarVita reads health data from Health Connect only after you grant permission, and only the types listed: steps, heart rate, sleep, hydration, exercise, distance and calories. It also writes steps, hydration, exercise and calories back when you log them in the app.

You can withdraw these permissions at any time in Health Connect, which stops the app reading anything further. Health data read this way is used to show your progress, to calculate goals, and — where you use those features — to produce AI summaries.

Children

Awaiting legal review

A minimum age has not been decided, and the app does not currently enforce one at sign-up. This section must state the minimum age and match what the app enforces and what the Play listing says. Whether the service is 'directed to children' under COPPA, and what the ICO's Children's Code expects, are legal assessments.

This website

If you join the waitlist on this site, we store the email address you enter, the time you submitted it, which form you used, and your browser's user-agent string. It is used to email you when the app launches, and for nothing else.

To be removed from the waitlist, email privacy@solarvita.co.uk. This site sets no advertising or analytics cookies.