🔐 PRIVACY POLICY

VitaAvanza

Last updated: [20/01/2026]

1. Introduction

VitaAvanza (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner.

This Privacy Policy explains:

  • what data we collect,
  • why we collect it,
  • how it is used,
  • how long it is retained,
  • and the rights you have under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

VitaAvanza is designed as a consent-first life-navigation platform. No personal data is processed without a clear purpose and user control.

2. Data Controller

The data controller is:

VitaAvanza

Contact email: hello@vitaavanza.com

(Company legal details may be added here when finalized.)

3. Personal Data We Collect

We only collect data that is necessary to provide the service.

Depending on how you use VitaAvanza, we may collect:

3.1 Account & Identity Data

  • Name
  • Email address
  • Authentication identifiers (e.g. login tokens)

3.2 User-Provided Information

  • Documents you upload
  • Information you voluntarily provide during use (e.g. descriptions of situations, goals, or problems)
  • Self-reported status or confirmations

3.3 System-Generated Data

  • Derived signals generated from your interactions (e.g. completion of steps, document status)
  • Development Value Index (DVI) scores and history
  • Confidence indicators related to data completeness and recency

3.4 Technical & Usage Data

  • Log data (e.g. access times, error logs)
  • Device and browser information (used for security and performance only)

4. What We Do Not Collect

To be explicit, VitaAvanza does not:

  • act as a bank or financial institution
  • collect credit scores by default
  • make medical diagnoses
  • make automated legal or financial decisions
  • share your data with third parties without your consent

5. Purpose of Processing

We process personal data for the following purposes:

  • to provide and operate the VitaAvanza platform
  • to generate guidance, next actions, and plans requested by the user
  • to compute and display the Development Value Index (DVI)
  • to ensure system security and integrity
  • to comply with legal obligations
  • to improve the quality and reliability of the service

Each processing activity is linked to a specific and explicit purpose.

6. Legal Basis for Processing (GDPR)

Under GDPR, we rely on the following legal bases:

  • Consent (Art. 6(1)(a)) — where you explicitly agree to specific processing
  • Contractual necessity (Art. 6(1)(b)) — to provide the service you request
  • Legal obligation (Art. 6(1)(c)) — where required by law
  • Legitimate interest (Art. 6(1)(f)) — for security, fraud prevention, and service reliability (balanced against your rights)

You may withdraw consent at any time.

7. Consent Management

VitaAvanza uses a granular consent model:

  • No data is shared by default
  • Consent can be granted, limited, or revoked
  • Revocation does not affect lawfulness of prior processing

You can manage consent directly within the platform.

8. Data Sharing

We do not sell personal data.

Data may be shared only:

  • with your explicit consent
  • with service providers acting under strict data-processing agreements
  • when legally required by authorities

Institutions accessing aggregated or mediated information do so only within the scope of explicit consent.

9. Automated Processing & Profiling

VitaAvanza uses automated systems to:

  • generate structured guidance
  • compute DVI indicators

These processes:

  • are explainable
  • do not produce legal or similarly significant effects on their own
  • always allow human interpretation and contestability

10. Data Retention

We retain personal data only as long as necessary for the stated purposes.

You may:

  • delete your account
  • request data export
  • request erasure (subject to legal obligations)

11. Your Rights (GDPR)

You have the right to:

  • access your data
  • rectify inaccurate data
  • request erasure
  • restrict processing
  • data portability
  • object to processing
  • lodge a complaint with a supervisory authority

Requests can be sent to: hello@vitaavanza.com

12. Security Measures

We apply appropriate technical and organizational measures to protect data, including:

  • access controls
  • encryption where appropriate
  • audit logging
  • regular security reviews

No system is risk-free, but security is treated as a core design principle.

13. International Transfers

If data is transferred outside the EU, appropriate safeguards are applied in accordance with GDPR.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes.

Users will be notified of material changes.

15. Contact

For any privacy-related questions: hello@vitaavanza.com