Privacy Policy
Effective 1 October 2026. Vidita is a day planner that keeps what it knows about you on your own devices. This policy says what Vidita does with your information, feature by feature: what stays on your iPhone, what leaves it, where it goes, and how to remove it.
The short version
- Vidita works without an account. Everything you plan, and everything Vidita notices about your day, is kept on your iPhone.
- If you sign in with Apple, your backup is end-to-end encrypted on your iPhone before it leaves. Vidita's server can't read it.
- Vidita's server can read something only when you turn it on: Help Improve Vidita, People, or Ask Assist. Each is off until you choose it, and each says what it sends.
- Vidita never sells your information, shows ads, or tracks you across other apps or websites.
- Vidita never shares Health data with anyone, and never writes to Health.
What stays on your iPhone
Your plans, routines, to-dos, places, tool logs (workouts, climbing, reading), friends you add, what Assist has learned, and what Vidita notices about your day are stored in Vidita's own storage on your iPhone. iOS includes it in your iPhone's own backups, as it does for other apps.
To fill in your day, Vidita uses these, only with your permission, which you can change at any time in iOS Settings:
- Location. With While Using or Always, Vidita notices when you arrive at and leave places (Always lets it notice while it's closed), so Plan can show what happened and ask about new places. Where you've been is kept on your iPhone.
- Motion. Vidita reads whether you're walking or still, to notice when you're up in the morning.
- Health. Vidita reads your sleep from Health, only to know when you woke up, and keeps that wake time on your iPhone. It doesn't read anything else from Health and doesn't save anything to Health. Wake times are never part of Help Improve Vidita, People, or Ask Assist.
- Notifications. For Assist's questions, your own alerts, and invites from friends.
- Contacts. Vidita doesn't ask for access to your contacts. When you add a friend, iOS's contact picker hands Vidita only the person you pick: their name, and their phone numbers so the same person isn't added twice. That stays on your devices.
Some iOS features Vidita uses talk to Apple under Apple's privacy policy: searching Maps for a place (the text you type), and, if you share your neighborhood or city with friends, finding which neighborhood and city you're in (from your location). Vidita sends Apple nothing else.
Sign in with Apple (optional)
Signing in turns on backup and sync, and lets you use People and Ask Assist. Vidita asks Apple for your name only, to fill in your name on your iPhone; it doesn't ask for your email address. Vidita's server keeps:
- an account, identified by the identifier Apple gives Vidita for your Apple ID;
- a token from Apple, kept only so Vidita can disconnect your Apple ID when you delete your account;
- a fingerprint (a hash) of each device's sign-in session, not the session itself, until you sign out on that device or it goes 90 days unused.
Backup and sync: end-to-end encrypted
While you're signed in, Vidita encrypts each record on your iPhone with AES-256-GCM before sending it. The key is kept in your iCloud Keychain, which brings it to your other devices; Vidita's server never has it. The server keeps the encrypted records, each under an identifier made from your key that says nothing about the record, and the order and time changes arrived in. What kind of record each one is, and everything in it, is inside the encryption: the server can't read it.
Signing out stops backup and sync and ends that device's session on the server, and keeps everything on your iPhone. A session unused for 90 days ends by itself. Delete My Data (Settings) clears your data but your friends on this iPhone and, while you're signed in, from your backup and your other devices.
Help Improve Vidita (optional, off unless you turn it on)
While you're signed in and have it on, Vidita sends its server a readable copy of a small, fixed part of your data, to understand how well Vidita notices your day and to improve it: what kind of thing each plan or routine is, when things were planned and when they happened, how Vidita noticed them, how long stays and journeys took, your day's wake and sleep settings, and your settings' switches. It includes climbing grades and reading page numbers from tool logs.
It never includes titles, notes, names, anything you typed, places' names, addresses or coordinates, workout exercises, book titles, friends, or anything from Health, including wake times. The copy is refreshed at most once a day and replaces the last one. Turning Help Improve Vidita off, on any of your devices, deletes the copy from the server; deleting your account does too.
People (optional)
Friends you add stay on your devices (and in your encrypted backup) until you link one with an invite link. An invite link is a one-time link you send yourself, for example in Messages; anyone who opens it in Vidita while signed in becomes that friend. Once friends are linked, Vidita's server keeps:
- your name as Settings has it (what friends see you as);
- who you're linked with, and for each friend how much of your day they may see: the exact place, the neighborhood, the city, or nothing;
- what you share, only as much as your most trusted friend may see: what you're doing if something is under way (its title), the name of the saved place you're at and since when, your neighborhood and city; your routines' names and how many times a week you did them, the last eight weeks (only if a friend may see at least your neighborhood); and which evenings in the next two weeks your plan leaves free (only the days);
- invites to meet you send or receive: their title, icon, time and answer, until a day after that time;
- your devices' notification addresses and time zone, so invites reach you; only while a friend is linked.
The server gives each friend only what you let that friend see. Free evenings are only matched: a friend sees an evening only when it's free for both of you. Removing a friend unlinks you on both sides. Opening someone's invite link shows who it's from and asks what they'll see before anything is linked. When no friend may see anything, or you sign out, what you shared is deleted from the server.
Ask Assist (optional, off unless you turn it on)
Assist's questions and answers work on your iPhone. If you turn on Ask Assist, you can also type a question. Vidita then sends your question, the conversation so far, and a summary of your plan (your routines' names and when they happen, and the next week's plans and to-dos with their times) to Vidita's server, which passes it to Anthropic's Claude API to write the answer. The summary never includes notes, places' addresses or coordinates, your People list or friends' names (a plan with a friend says "a friend"), or anything from Health. Vidita's server doesn't keep any of it. Anthropic processes it under its API terms, which don't let it train models on this data; see anthropic.com/legal.
What Vidita's server keeps, and for how long
- Encrypted backup: until you delete it (Delete My Data, Replace Cloud Copy) or delete your account.
- Help Improve Vidita's copy: until you turn it off or delete your account.
- People: a link with a friend until either of you removes the other; what you share until no friend may see anything (checked hourly) or you sign out; your name until you delete your account; a device's notification address until you sign out on it or no friend is linked. Invite links last 30 days or until used; invites to meet, until a day after their time.
- The server keeps a nightly copy of its database for each day of the week, to recover from a failure; each is overwritten a week later. So something deleted from the server is gone from these copies within 7 days.
- The server doesn't log what you send it. Its host may briefly log connections (IP addresses) for security.
Deleting your account
Settings › Delete Account deletes your account and everything the server has for it: your encrypted backup, Help Improve Vidita's copy, your links with friends, your name, what you shared, your invites and your devices' notification addresses. Then Vidita asks Apple to disconnect your Apple ID from Vidita (retrying until Apple confirms). What's on your iPhone stays there until you delete it with Delete My Data or by deleting Vidita.
Your choices
You can export everything Vidita has on your iPhone (Settings › Export My Data), change or withdraw each permission in iOS Settings, turn Help Improve Vidita, People sharing and Ask Assist on or off, and delete your data or your account at any time, from the app. For anything else, including a question about this policy or a request about your data, write to support@vidita.app.
Children
Vidita isn't directed to children under 13 and doesn't knowingly collect information from them.
Changes
If this policy changes, the new version is posted here with a new effective date, and anything that changes what leaves your iPhone is said in the app first.