This Privacy Policy describes how Dr. Paz Vital Flow (“Vital Flow,” “we,” “us”) collects, uses, and protects your information when you use our website, client portal, and mobile applications for iOS and Android (together, the “Services”).
1. Information we collect
- Account information — your name, email address, phone number, and profile details you choose to share (such as pronouns, city, goals, dietary notes, and emergency contact).
- Wellness information — daily journal check-ins (mood, energy, sleep, hydration, gratitude, intentions), ritual and breathwork activity, progress measurements recorded by your care team, photos you choose to share, and wellness reports (including epigenetic test reports) uploaded for your program.
- Profile photos — if you choose to add one, taken with your camera or chosen from your library.
- Photos you send in messages — if you attach a photo to a message, it is stored privately and is visible to you and to your care team. Attachments are kept in a private store and are never publicly accessible; links to them expire.
- Session transcripts — during a video session your practitioner may switch on a live transcript, which writes down what is said so it can be turned into your session recap. You are shown a notice on screen whenever it is running, and you are asked before it begins. No audio or video of a session is ever recorded or kept — speech is converted to text as the session goes and the sound itself is discarded immediately. The written transcript is stored privately with your program record.
- Payment records — records of program purchases and invoices. Card processing, when offered, is handled by payment providers; we do not store card numbers.
- Technical information — basic device and usage information needed to operate the Services securely (such as authentication tokens and timestamps).
2. How we use your information
- To provide your personalized wellness program — your plan, sessions, journal, results, and communication with your care team.
- To let Dr. Paz and your assigned guide review your progress and tailor your protocol.
- To send you service notifications you control (for example, when a new results chapter is released). Reminder notifications on the mobile app are scheduled locally on your device and can be turned off at any time.
- To prepare your session recap from the transcript and your practitioner's notes, so that what was discussed is kept in your record rather than lost when the session ends.
- To keep the Services secure, prevent abuse, and comply with legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Where your information lives
Your data is stored with Supabase, our secure cloud database and authentication provider, with encryption in transit and at rest and strict row-level access controls: you can only access your own records, and staff access is limited by role. Uploaded documents and photos are kept in private storage accessed through short-lived signed links. When AI features process your report to prepare it for your program, or convert session speech to text for your recap, the processing is performed by our service providers under contractual safeguards and is not used to train their models. Session audio sent for transcription is processed only for the moments it takes to write the words down and is never stored.
4. Who can see your information
- Your care team — Dr. Paz and the guide assigned to you see the information needed to run your program.
- Service providers — infrastructure vendors (such as our database, storage, and document-processing providers) that process data on our behalf under confidentiality obligations.
- Legal requirements — we may disclose information if required by law or to protect the safety and rights of our clients and practice.
5. Your rights
- Access & portability — you can download a complete copy of your data at any time from your Account page (“Download my data”).
- Correction — you can edit your profile details in the portal or app at any time.
- Deletion — you can request deletion of your account and data from your Account page or by email. We honor verified requests within 30 days, subject to records we must keep by law.
- Notifications — reminders and notifications can be disabled at any time in the app or your device settings.
6. Health information notice
Vital Flow is a wellness coaching practice. The Services are not intended to provide medical care, diagnosis, or treatment, and information handled through the Services is provided by you for wellness coaching purposes. Please share only what you are comfortable sharing, and consult your physician for medical concerns.
7. Children
The Services are intended for adults and are not directed to children under 16. We do not knowingly collect information from children.
8. Data retention
We keep your information for as long as your account is active. After account deletion, data is removed from active systems within 30 days, except for limited records we are required to retain (such as payment records) for legal and accounting purposes.
9. Security
We use industry-standard safeguards: encrypted connections (TLS), encrypted storage, role-based access controls, optional two-factor authentication on your account, and audited access to administrative functions. No system is perfectly secure; if a breach affecting your data occurs, we will notify you as required by applicable law.
10. Changes to this policy
We may update this policy as the Services evolve. Material changes will be announced in the portal and app, and the effective date above will be updated.
11. Contact us
Questions or requests about your privacy can be sent to privacy@drpazvitalflow.com, or by post to Dr. Paz Vital Flow, Naples, Florida, USA.