Privacy Policy
Effective date: August 19, 2026
Last updated: August 19, 2026
This Privacy Policy describes how Thea, doing business as Vectis (“Vectis,” “Thea,” “we,” “us,” or “our”), collects, uses, stores, protects, and discloses information when you use the Vectis mobile application, website, and related services (collectively, the “Services”).
Vectis is a consumer wellness and lifestyle platform designed to help users better understand and organize information they voluntarily provide about their health, fitness, nutrition, genetics, laboratory results, recovery, and lifestyle.
Vectis may use this information to generate personalized wellness, nutrition, grocery, fitness, recovery, scheduling, productivity, and over-the-counter supplement recommendations.
Vectis is not intended to diagnose, treat, cure, or prevent any disease or medical condition and is not intended to replace professional medical advice or function as a medical device.
1. Information We Collect
The information we collect depends on the features you choose to use.
1.1 Account Information
We may collect:
- •Name
- •Email address
- •Date of birth or age
- •Account credentials
- •Subscription information
- •User preferences
- •Profile information
- •Communications you send to us
1.2 Health and Fitness Information
If you choose to provide or connect this information, we may process:
- •Heart rate
- •Resting heart rate
- •Heart-rate variability
- •Sleep information
- •Activity information
- •Exercise information
- •Recovery information
- •Steps
- •Calories and energy expenditure
- •Weight
- •Height
- •Workout information
- •Other health or fitness information made available through services you connect to Vectis
1.3 Apple Health / HealthKit Information
If you choose to connect Apple Health/HealthKit, Vectis may access the specific health and fitness categories for which you authorize access.
Depending on the permissions you grant, this may include information relating to:
- •Activity
- •Exercise
- •Heart rate
- •Sleep
- •Weight
- •Body measurements
- •Nutrition
- •Other supported health and fitness information required for Vectis features
Vectis requests access only to information necessary for features you choose to use.
Apple controls HealthKit permissions at the operating-system level. You can manage those permissions through your device settings.
Apple requires HealthKit apps to clearly explain their use of health information and to protect that information.
1.4 WHOOP and Oura Information
If you connect a WHOOP, Oura, or another supported third-party service, Vectis may receive information that you authorize that service to provide.
Depending on the integration, this may include:
- •Sleep
- •Recovery
- •Heart rate
- •Heart-rate variability
- •Activity
- •Exercise
- •Strain or activity load
- •Readiness/recovery scores
- •Other wellness metrics
The specific information available to Vectis depends on the permissions and capabilities of the applicable third-party service.
1.5 Laboratory and Blood-Work Information
Vectis allows you to voluntarily upload, enter, or otherwise provide laboratory and blood-work information.
This may include:
- •Laboratory test names
- •Laboratory values
- •Reference ranges
- •Collection dates
- •Biomarker information
- •Other information contained in laboratory reports
Vectis does not independently verify the accuracy of laboratory information you provide.
1.6 Genetic Information
Vectis may allow you to voluntarily upload genetic reports or other genetic information.
Genetic information may include information concerning genetic variants, traits, predispositions, or other information contained in the genetic report you provide.
Genetic information is highly sensitive personal information.
Vectis does not require you to provide genetic information to use features that do not require it.
We do not sell your genetic information.
1.7 Nutrition and Dietary Information
Vectis may collect information you provide regarding:
- •Foods consumed
- •Dietary preferences
- •Dietary restrictions
- •Allergies
- •Eating patterns
- •Nutrition goals
- •Calories
- •Macronutrients
- •Food preferences
- •Grocery preferences
This information may be used to generate nutrition and grocery recommendations.
1.8 Supplement Information
Vectis may collect information concerning supplements you tell us that you use, consider using, or have previously used.
1.9 Calendar Information
If Vectis provides calendar-related functionality and you authorize calendar access, Vectis may process calendar information necessary to provide scheduling and productivity features.
Vectis may use authorized calendar information together with wellness and recovery information to suggest times that may be more suitable for demanding work, exercise, meetings, or other activities.
Vectis does not represent that such recommendations are medically optimal or guaranteed to improve performance.
1.10 Technical Information
We may collect technical information such as:
- •Device type
- •Operating system
- •App version
- •IP address
- •Crash reports
- •Diagnostics
- •Authentication information
- •Security information
- •Information necessary to operate and protect the Services
2. How We Use Your Information
We may use information to:
- •Provide Vectis functionality
- •Personalize your experience
- •Generate wellness insights
- •Analyze recovery and activity patterns
- •Generate nutrition recommendations
- •Generate grocery recommendations
- •Generate dietary suggestions
- •Generate over-the-counter supplement suggestions
- •Generate exercise and recovery suggestions
- •Generate lifestyle and productivity recommendations
- •Suggest times that may be more suitable for demanding work or activities based on your wellness patterns
- •Organize laboratory information
- •Display trends and summaries
- •Provide AI-powered features
- •Maintain and improve the Services
- •Protect the security of the Services
- •Prevent fraud and abuse
- •Provide customer support
- •Process subscriptions and payments
- •Comply with legal obligations
3. Personalized Recommendations
Vectis may combine information from multiple sources that you authorize, including:
Genetics + laboratory information + wearable information + HealthKit + nutrition + exercise + sleep + recovery + lifestyle information — to generate personalized wellness recommendations.
These recommendations are intended to provide informational and lifestyle guidance.
They are not intended to constitute:
- •A medical diagnosis
- •A medical treatment
- •A prescription
- •Medical decision-making
- •A determination that you have a disease
- •A determination that you require a particular treatment
- •A substitute for professional medical care
4. AI-Powered Features
Vectis may use artificial intelligence and machine-learning technologies to analyze information and generate recommendations.
AI-generated information can contain errors.
AI systems may produce recommendations that are incomplete, inaccurate, outdated, or inappropriate for a particular individual.
You should independently evaluate recommendations and seek professional advice when appropriate.
Vectis does not guarantee the accuracy of AI-generated recommendations.
5. HealthKit Privacy
Vectis uses HealthKit information solely to provide health, fitness, wellness, recovery, nutrition, and related functionality that directly benefits the user.
Vectis does not sell HealthKit information.
Vectis does not use HealthKit information for advertising or behavioral advertising.
Vectis does not use HealthKit information for unrelated data mining.
Vectis does not disclose HealthKit information to third parties except as permitted by Apple’s requirements, applicable law, and the user’s authorization.
Apple specifically restricts the use and disclosure of HealthKit information for advertising, marketing, data mining, and certain third-party disclosures.
6. Genetic Information
Because genetic information is particularly sensitive, Vectis applies additional safeguards to its handling.
We do not sell genetic information. We do not use genetic information for advertising. We do not provide genetic disease diagnoses.
If you upload a genetic report, you authorize Vectis to process the information contained in that report for the purposes described in this Privacy Policy and to provide the features you request.
7. How We Share Information
We may share information with service providers that help us operate Vectis, including providers for:
- •Cloud infrastructure
- •Data storage
- •Authentication
- •Security
- •AI processing
- •Customer support
- •Application infrastructure
- •Analytics
- •Crash reporting
- •Payment processing
- •Other services necessary to operate Vectis
We require applicable service providers to use information only as necessary to provide services to us and subject to appropriate contractual restrictions.
Consultations and experts: When you choose to book a consultation with an independent expert or specialist through Vectis, we share the information needed to prepare for and conduct that session with the expert you select. This may include a summary of your health, wellness, laboratory, wearable, and (where applicable) genetic data (your "brief"), along with your name and scheduling details. We share this information only at your direction when you book, and only with the specific expert you choose. Experts are independent third parties, not employees of Vectis; their use of your information is governed by their own privacy practices, and we encourage you to review them. HealthKit-derived data shared this way is disclosed solely with your authorization.
We may disclose information:
- •At your direction
- •With your consent
- •To comply with applicable law
- •To respond to lawful legal requests
- •To protect users, Vectis, or others
- •To detect or prevent fraud or abuse
- •In connection with a merger, acquisition, financing, reorganization, or sale of assets
We do not sell health information or genetic information.
8. AI Service Providers
If Vectis uses third-party AI providers, certain information may be transmitted to those providers for the purpose of generating Vectis features.
Vectis will configure and contract with such providers in a manner consistent with our privacy commitments and applicable law.
Vectis will not knowingly permit third-party AI providers to use your health or genetic information for unrelated advertising.
Vectis currently uses OpenAI as a third-party AI provider to process information for the purpose of generating the features described in this Privacy Policy. Information transmitted to the AI provider is used only to generate your requested Vectis features and is handled subject to that provider’s applicable data-processing terms.
9. Data Security
We use reasonable technical, administrative, and organizational safeguards designed to protect personal information.
Depending on the information and architecture, safeguards may include:
- •Encryption in transit
- •Encryption at rest
- •Access controls
- •Authentication controls
- •Logging and monitoring
- •Vendor security controls
- •Data minimization
- •Security testing
No electronic system can be guaranteed to be completely secure.
10. Data Retention
We retain information only for as long as reasonably necessary to:
- •Provide the Services
- •Maintain your account
- •Provide requested recommendations
- •Meet legal obligations
- •Resolve disputes
- •Enforce agreements
- •Prevent fraud
- •Protect security
- •Maintain legitimate business records
Retention periods may differ depending on the category of information.
11. Account and Data Deletion
You may request deletion of your Vectis account and applicable personal information.
Requests may be submitted through the account deletion functionality in Vectis or by contacting info@vectis-bio.com.
We will process deletion requests in accordance with applicable law.
Certain information may be retained where required by law or reasonably necessary for security, fraud prevention, legal claims, or other lawful purposes.
12. Revoking Permissions
You may revoke permissions for connected services through the applicable platform or device settings.
For Apple Health/HealthKit, permissions are managed through Apple’s privacy settings.
Removing permission may prevent Vectis from providing features that depend on that information.
13. Children’s Privacy
Vectis is intended for individuals 18 years of age or older.
We do not knowingly collect personal information from anyone under 18.
If you believe someone under 18 has provided information to Vectis, contact info@vectis-bio.com.
For more on how we handle health data specifically, see our:
Consumer Health Data Privacy Policy
14. HIPAA
Unless expressly stated otherwise in a separate written agreement, Vectis is not a healthcare provider, health plan, or healthcare clearinghouse and does not represent that it is a HIPAA-covered entity or business associate.
Users should not assume that information provided to Vectis receives the same protections as information maintained by a HIPAA-covered healthcare provider.
15. Health Breach Notification
Depending on Vectis’s actual functionality and data architecture, applicable federal or state privacy and health-data breach laws may apply.
Vectis will comply with applicable breach-notification requirements.
The FTC’s Health Breach Notification Rule can apply to certain health applications that maintain personal health records and draw information from multiple sources.
16. State Privacy Rights
Depending on your state of residence, you may have rights regarding your personal information, including rights to:
- •Access
- •Correct
- •Delete
- •Obtain a copy
- •Restrict certain processing
- •Opt out of certain processing
- •Appeal certain privacy decisions
Requests may be submitted to info@vectis-bio.com.
17. Third-Party Services
Vectis may integrate with third-party services including Apple Health, WHOOP, Oura, grocery services, payment services, AI providers, and other platforms.
Your use of those services may be governed by their own terms and privacy policies.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
Material changes may be communicated through the Services or other appropriate means.
The “Last Updated” date will identify the current version.
19. Contact
If you have questions about this Privacy Policy or our data practices, contact us:
Thea
3436 Goldfinch Dr, Naperville, IL 60564
www.vectis-bio.com