Privacy
How we treat your data
Last updated July 20, 2026
In one paragraph
Alternavit is built around a simple principle: you tell us about your wellness concerns; we give you personalised, educational supplement guidance. We never sell your data, and we keep only what we need to make the product work. This page explains exactly what that means, in plain English.
Who we are
Alternavit is operated from the European Union. References to “we,” “us,” or “Alternavit” mean the company that runs alternavit.com. For any privacy question, write to privacy@alternavit.com.
What we collect
- Account data: your name, email address, and hashed password.
- Wellness assessment data: the answers you give in our questionnaires — age range, gender, lifestyle, sleep, stress, concerns and their severity. This is “special category data” under GDPR Article 9 and we process it only with your explicit consent.
- Tracker logs: the supplements you mark as taken on which days.
- Preferences: reminder settings, time zone, language.
- Technical data: a session token in your browser, a small first-touch “acquisition source” record (which website referred you, any UTM parameters in the URL you used to arrive) so we can understand which channels reach people best, and minimal server logs for security and debugging.
Why we collect it (legal basis)
- Performance of a contract — to give you the service you signed up for (Art. 6(1)(b) GDPR).
- Explicit consent for processing your wellness assessment data (Art. 9(2)(a) GDPR). You give this consent at signup and can withdraw it at any time.
- Legitimate interest for security, fraud prevention, and product improvement (Art. 6(1)(f) GDPR).
Who can see your data
Only you, and the small number of people who operate Alternavit. We use a handful of carefully-chosen sub-processors:
- MongoDB Atlas — database hosting (EU region where available).
- Anthropic (Claude) — AI-generated personalised explanations. Your data is sent transiently to generate the explanation and is not used to train their models.
- Resend — transactional email delivery for reminders and digests (only if you opt in).
How long we keep it
- Account data: as long as you have an account. Deleting your account wipes it within 24 hours.
- Wellness data and tracker logs: same as your account — gone the moment you delete.
- Server logs: rotated after 30 days.
Your rights
Under GDPR you have the right to:
- Access — download a copy of everything we hold about you, from Settings → Data & account → Download my data.
- Rectify — update inaccurate data; most of it is editable inside the app.
- Erase (“right to be forgotten”) — delete your account and all related data from the same Settings page.
- Restrict or object to certain processing.
- Portability — the “Download my data” export is in machine-readable JSON.
- Lodge a complaint with your national data-protection authority. A list is available at edpb.europa.eu.
Cookies and similar storage
We use a single strictly-necessary item in
localStorage to keep you signed in. Anything beyond that — analytics, marketing — is off by default and only enabled if you opt in via the cookie banner. You can change your mind by clearing your browser storage or contacting us.A note on medical advice
Alternavit gives educational information about natural supplements. It is not a medical device, does not diagnose or treat conditions, and is not a substitute for the advice of a qualified healthcare professional. Please always consult one before starting a new supplement, especially if you take medication, are pregnant or nursing, or have a chronic condition.
Changes
If we ever change this policy materially, we'll notify you by email. Small clarifications will simply be reflected by an updated “last updated” date above.