Privacy Policy
Version of October 11, 2026
BYMAV LTDA (“BYMAV”, “we”) runs VITA, a study app for medical students, and the website estudevita.com.br. This policy explains what personal data we process, why, who we share it with, and how you exercise your rights. It applies to everyone, in every country, and follows the strictest of the laws that apply: LGPD (Brazil), GDPR (European Union), UK GDPR (United Kingdom) and CCPA/CPRA (California, USA).
In short
- We do not sell your data or share it for advertising. The app and the website have no ads and no third-party trackers.
- Vita, who talks with you by text, voice and WhatsApp, is an artificial intelligence system. It is not a person or a health professional.
- You can ask for a copy of your data and delete your account at any time.
- VITA is for people aged 16 or over.
1. Who is responsible and the data protection officer
Controller: BYMAV LTDA, Brazilian company registry (CNPJ) 65.003.381/0001-08.
Address: being registered.
Data protection officer (LGPD art. 41): name being registered. Contact: privacy@estudevita.com.br.
Representative in the European Union and the United Kingdom (GDPR and UK GDPR, art. 27): being registered. Until then, use the same e-mail as the officer.
Who sells the subscription: the purchase is made in the App Store, with Apple; see the Terms of Use.
2. Data we process
| Category | What it includes | Where it comes from |
|---|---|---|
| Account and sign-in | Name, e-mail, phone number (if you sign in or link WhatsApp), profile photo, account identifier, how you sign in (Apple, Google, e-mail or phone), language. | You, Apple and Google |
| Academic profile | University, term, subjects, goals, institutions of interest, study preferences. | You and the integrations you connect |
| Study content | PDFs, images, notes, flashcards, Anki decks you import, links (including YouTube videos), answers to questions and mock exams, review history and performance. | You |
| Recorded lectures | Audio you record or upload, the transcript, who speaks in each part, and the analysis of the content. | You |
| Conversations with Vita | Text messages, attachments, the transcript of voice conversations and WhatsApp conversations, if you link them. We do not record the audio of a live voice conversation; we keep the text. In the earlier test versions of the app (TestFlight, sent up to October 2, 2026), the message, the attachments and the reply of each text conversation in the app are also copied to the support desk (Chatwoot; section 4). | You |
| Camera and photos | Photos of notes that you choose to turn into study material. The hand gestures of hands-free mode are recognized on the device and never leave it. | You |
| Subscription | Plan, subscription status and dates. Payment and card details stay with Apple; we do not receive them. | Apple and Qonversion |
| Technical data | IP address, device model, app and system version, notification token, error and performance logs and, in sessions where an error occurs (and in some others), a screen recording for diagnostics (Sentry Session Replay) in which all text and all images are hidden. | Your device |
| Support | Messages you send us and the history of the conversation. In the support desk (Chatwoot), the contact card that every account gets when it is created: name, e-mail, the Google profile photo (when there is one) and the phone number (if you sign in by phone or link WhatsApp). | You |
We do not ask for health data. Do not upload patient data, whether identifiable or reversibly anonymized. If you enter health data on your own, we process it on the basis of your consent (LGPD art. 11, I; GDPR art. 9(2)(a)) and you can delete it.
3. Why we use it and the legal basis
| Purpose | LGPD | GDPR / UK GDPR |
|---|---|---|
| Create the account, provide the study features and sync across devices | Performance of a contract (art. 7, V) | Contract (art. 6(1)(b)) |
| AI features (conversation, voice, summaries, material generation) | Consent (art. 7, I), given before first use in the versions that record the acceptance on the account (section 4) | Consent (art. 6(1)(a)) |
| Integrations (Canvas, Google, WhatsApp) and notifications | Consent (art. 7, I) | Consent (art. 6(1)(a)) |
| Billing and subscription management | Contract and legal obligation (art. 7, V and II) | Contract and legal obligation (art. 6(1)(b), (c)) |
| Security, fraud and abuse prevention, troubleshooting | Legitimate interest (art. 7, IX) | Legitimate interest (art. 6(1)(f)) |
| Answer support and rights requests | Contract and legal obligation (art. 7, V and II) | Contract and legal obligation |
| Keep a contact card for each account in the support desk and, in the earlier test versions, follow the app conversations with Vita (support and troubleshooting) | Legitimate interest (art. 7, IX) | Legitimate interest (art. 6(1)(f)) |
| Defending legal claims and exercising rights | Art. 7, VI | Legitimate interest (art. 6(1)(f)) |
When the basis is consent, you can withdraw it at any time, at no cost, by turning the feature off, disconnecting the integration or deleting the account. Withdrawal does not affect what was done before it. When the basis is legitimate interest, you can object (section 9); the legitimate-interest assessment is available on request. We do not make decisions with legal effects based solely on automated processing.
4. Artificial intelligence
Vita is an AI, not a person. It can make mistakes and does not replace teachers, preceptors or health professionals. The content is educational: it is not a diagnosis, a prescription or medical advice, and Vita is not an emergency service.
Which models we use
- Text conversation with Vita, in the app and on WhatsApp: the open Qwen model, on BYMAV’s own servers. The text goes through our AI gateway, which is also ours. If those servers are unavailable or the model fails, the gateway may answer with Gemini, from Google (paid API), and the text of the conversation is then sent to Google. Outside that fallback, the text is not sent to third parties.
- Live voice with Vita: Gemini models from Google, accessed through Google’s paid API. The audio and the replies go from our voice server (LiveKit) straight to Google, without passing through the gateway. To answer, Vita also uses VITA’s tools with your sign-in (materials, notes, flashcards), and the result of those tools goes on to Google within the conversation.
- Reading replies aloud (“Listen”): the text of the reply is sent to Google (Gemini voice model) through our gateway.
- Transcription, identifying who speaks, lecture analysis, summaries and material generation: open models (Whisper and Qwen) on BYMAV’s own servers, with nothing sent to third parties.
- The terms of Google’s paid API do not allow the content to be used to train Google’s models. We do not use the content of your conversations to train models, ours or anyone else’s.
Notice and acceptance
In the app versions that show the AI notice, acceptance is asked for before first use and is recorded on your account; without it, the server does not unlock the chat, voice or WhatsApp. Those versions talk straight to BYMAV’s AI gateway: they do not copy the conversation to the support desk; quality traces are described below.
The earlier test versions (TestFlight, sent up to October 2, 2026) still use the previous chat service, which does not check the acceptance for the text chat. In them, WhatsApp works only with the acceptance recorded on the account, and live voice does not work: it relied on OpenAI, which the gateway has refused since October 9, 2026.
What is kept
We keep the text of your conversations so you can reread them. The gateway’s technical log keeps only usage data (model, duration, cost), without the text or images.
AI quality traces are kept in LiteLLM Lens on BYMAV infrastructure. For text chat, they may contain the message, reply and tool results linked to the account and conversation, as well as model, duration, tokens and errors. Access is restricted to service operations.
The Lens trace store is configured for 30-day retention. Deleting an account does not currently automatically delete those Lens traces; requests for earlier deletion use the contact in section 9. We do not use this data to train models.
On October 22, 2026, AI quality operations moved from Langfuse to LiteLLM Lens. Administrative migration exports have restricted access and are not used to serve new conversations.
Copy in the support desk (Chatwoot)
In the earlier test versions of the app (TestFlight, sent up to October 2, 2026), which still use the previous chat service, each text conversation with Vita is copied to Chatwoot, BYMAV’s support desk, on BYMAV’s own server: your message, the attachments (such as images you send) and Vita’s reply, linked to your contact card (name, e-mail, phone number and photo). The copy has existed since September 19, 2026 and lets BYMAV staff follow the conversations, give support and investigate problems. The attachments are stored in Cloudflare R2, in the North America East region (sections 6 and 7). The copy has no automatic expiry: it stays until the account is deleted, which erases it, or until we delete it on request. The later versions of the app do not make this copy.
What has already happened with other providers
In the interest of transparency, this is what the gateway’s technical logs (kept for 30 days, without the text of conversations) show since September 30, 2026:
- OpenAI (USA), September 30 to October 3, 2026: earlier versions of the app sent the text of conversations with two Vita personas to the gpt-4o-mini model, and tests by our team used OpenAI text, audio and real-time voice models. OpenAI states that it does not use API data to train models and keeps logs for up to 30 days. In our logs, the last call carrying content to OpenAI was on October 3, 2026, and the gateway has refused requests carrying content to it since October 9, 2026.
- Google (Gemini), October 4 to 9, 2026: through the gateway, Google received tests by our team, live voice (which at the time went through the gateway) and the text conversation in the app and on WhatsApp, which moved to Qwen on October 9, 2026.
These logs do not separate what was a test by our team from what was use by people. If you used VITA in those periods and want to know more, or to ask for your data to be deleted, write to privacy@estudevita.com.br.
If you are in crisis
Get human help now. Brazil: CVV 188 (24 h, free) and SAMU 192. United States: 988 (Suicide & Crisis Lifeline) and 911. United Kingdom and Ireland: Samaritans 116 123. European Union: 112. In any other country, call the local emergency number.
5. Integrations you connect
- Canvas (university portal): you give the address of your Canvas and a personal access token that you generate yourself. We store the token encrypted, only to read your subjects, assessments and materials and, if you ask, to submit an assignment. We do not ask for or store your portal password. You revoke the token in Canvas itself and disconnect in the app.
- Google Calendar and Google Drive (optional): we store the authorization you give Google. From Calendar, only events related to your subjects enter the VITA agenda. We revoke the authorization at Google when you disconnect or delete the account. VITA’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- WhatsApp: by linking your number, you talk with Vita on WhatsApp and receive sign-in codes. Messages go through the WhatsApp network (Meta) and our servers, and our support desk (Chatwoot) keeps a mirror of the conversation and your contact, with no automatic expiry (section 8).
6. Who we share it with
We do not sell data. We share it only with the providers below, for the purposes indicated, and with authorities when the law requires.
| Provider | Role | Data | Location |
|---|---|---|---|
| Supabase (AWS cloud) | Database, authentication, storage and server functions | All account and content data | Brazil (São Paulo) |
| Cloudflare | Delivery and protection of the website and our domains, receiving e-mail sent to our addresses, and file storage (R2), including the support desk attachments | IP, files you upload, e-mails you write to us and the images you attach to the app chat in the earlier test versions (copy in Chatwoot) | USA (R2 in North America East) and global network |
| Hostinger | Hosting of our own servers (AI gateway, website and supporting services) | Content in transit through our servers | Brazil |
| Sign in with Google, Calendar and Drive (if connected), Gemini models for live voice, for reading replies aloud and, as a fallback, for the text conversation when Qwen fails or BYMAV’s servers are unavailable | Identity, events, audio and replies of live voice, text read aloud, text of the conversation when the fallback kicks in | USA and other countries where Google operates | |
| OpenAI (use ended; last call carrying content on October 3, 2026) | Text, audio and real-time voice models, used only in the period described in section 4 | Text of conversations and tests, in that period | USA |
| Apple | App Store, purchases and subscriptions, Sign in with Apple, push notifications, on-device speech recognition | Account identifier, push token, purchase data | USA and global |
| Qonversion | Subscription management and access entitlements | Account identifier and subscription data | Company in the USA; data in London, UK |
| Resend | Transactional e-mail (sign-in link, subscription notices) | E-mail address and message content | USA |
| Meta (WhatsApp) | Messages and codes through WhatsApp, if you link your number | Phone number and messages | USA and Ireland |
| Run by BYMAV | Chatwoot (support desk: contact card, WhatsApp mirror and, in the earlier test versions, the copy of the app conversations with Vita, section 4), LiteLLM Lens (AI quality), Sentry (errors and screen recording), Whisper and Qwen models (including the text conversation), document conversion and the LiveKit voice server | As needed for the role, with nothing sent to third parties (live voice and the chat fallback go on to Google, as in section 4, and the support desk attachments are stored in Cloudflare R2, above) | BYMAV servers; physical location: pending registration |
7. International transfers
BYMAV is in Brazil. Part of the providers above are in the United States. Those transfers rely, depending on the provider, on the EU-US Data Privacy Framework (and its UK extension), on standard contractual clauses and on data processing agreements that are part of the providers’ terms of service (LGPD art. 33; ANPD Resolution 19/2024; GDPR arts. 44 to 46; UK GDPR). The text conversation with Vita and the transcription of lectures are processed on BYMAV servers; what goes abroad is live voice, text read aloud, the attachments of the app chat copied to the support desk (stored in Cloudflare R2, in the United States) and, only when Qwen fails or BYMAV’s servers are unavailable, the text conversation (Google), plus the data of the providers in section 6. You can ask about the safeguards at privacy@estudevita.com.br.
8. How long we keep it
| Data | Period |
|---|---|
| Account, profile and study content | While the account exists, or until you delete the item |
| Conversations with Vita | Until you delete them or delete the account |
| Files and audio you upload | Until you delete them or delete the account |
| AI gateway technical logs (no conversation text) | 30 days |
| AI quality traces (LiteLLM Lens; may contain conversation text, section 4) | Configured 30-day Lens retention. Account deletion does not automatically delete these traces; earlier deletion requests use the contact in section 9. |
| Support desk (Chatwoot): contact card, WhatsApp mirror and, in the earlier test versions, the copy of the app conversations with Vita (message, attachments and reply; section 4) | No automatic expiry. The copy of the app conversations goes with the account deletion (we erase the messages and the attachments). From the card, the deletion strips the name, e-mail and phone number and leaves an anonymous card, “Conta excluída” (“Account deleted”); the profile photo that may be on the card and the WhatsApp mirror go on request |
| App errors, performance and diagnostic screen recordings | Up to 90 days |
| Security and access logs | Up to 6 months |
| Subscription data and tax records | As long as the law requires (in Brazil, 5 years) |
| Support messages | As long as needed to help you and to defend rights |
| Backups | Rolling; they expire within 30 days |
When you delete the account, we delete the database, the files and the data held by the services that receive it (AI gateway, quality traces linked to the account, the copy of the app conversations in the support desk and the subscription service), except what the law requires us to keep. We delete the traces that are not linked to the account (section 4), the profile photo on the contact card and the WhatsApp mirror in the support desk (section 5) on request. See Delete account.
9. Your rights
Confirmation and access
Know whether we process your data and receive a copy.
Correction
Correct incomplete, inaccurate or outdated data.
Deletion
Ask for deletion, blocking or anonymization of unnecessary data or data processed on consent.
Portability
Receive your data in a structured, commonly used format and take it to another service.
Information on sharing
Know who we share your data with, as in section 6.
Withdraw consent
Withdraw consent whenever you want, at no cost.
Objection and restriction
Object to processing based on legitimate interest and ask to restrict processing.
Review of automated decisions
Ask for human review if a decision is based solely on automated processing.
How to exercise them: write to privacy@estudevita.com.br from the account e-mail, or use the app’s Settings to export your data and delete the account. We reply within 15 days. In a complex case we may extend by another 15 days, telling you. We may ask you to confirm your identity; we do not charge for handling requests.
Complaints: you can complain to a data protection authority. In Brazil, the ANPD. In the European Union, the authority of your country (list at the EDPB). In the United Kingdom, the ICO.
10. California (CCPA/CPRA) and Do Not Track
In the past 12 months we collected, in the categories of California law: identifiers; customer records (name, e-mail); commercial information (plan); internet activity (use of the app); audio and images you upload; education information (university, subjects); inferences about study performance; and, as sensitive information, credentials for integrations (the Canvas token and the Google authorization, which we use only to provide the service you asked for).
Sources and purposes are those in sections 2 and 3. We disclose data only to the providers in section 6, for business purposes. We do not sell or share personal information for cross-context behavioral advertising, and we have no knowledge of processing data of children under 16. You have the right to know, access, correct and delete, and you are not discriminated against for exercising them. An authorized agent may ask on your behalf at privacy@estudevita.com.br; we reply within 45 days.
Do Not Track: the app and the website do not track you across third-party sites or services and show no ads, so there is no tracking to turn off. We treat people who send the signal the same way. The website uses no cookies. The app keeps your preferences and cached data on the device.
11. Security
- Encrypted connections (TLS) and encrypted storage at our infrastructure providers.
- Per-account isolation: each person reaches only their own data (row-level access policies in the database).
- Integration tokens are encrypted; no portal password is asked for or stored.
- Gateway technical log without conversation text, and access limited to the staff who need it (the text kept in LiteLLM Lens and in Chatwoot is described in section 4).
If there is an incident that may cause relevant risk or harm, we will tell you and the competent authority within the legal deadlines (ANPD: 3 business days; GDPR: 72 hours).
12. Minimum age
VITA is for people aged 16 or over. We do not knowingly collect data from minors and the service is not directed to children (COPPA, LGPD art. 14, GDPR art. 8). If we learn that an account belongs to someone under 16, we will close it and delete the data. For people aged 16 or 17, VITA does not show advertising and does not profile them.
13. Changes to this policy
When we change this policy in a relevant way, we will tell you in the app or by e-mail before the change takes effect. The version date is at the top and earlier versions can be requested by e-mail.
14. Contact
Privacy and personal data: privacy@estudevita.com.br
Support: contact@estudevita.com.br
Copyright: copyright page