Consumer Health Data Privacy Policy
Last updated: October 9, 2026. Effective date: October 9, 2026.
This policy is for people in Washington, Nevada and Connecticut. It explains the "consumer health data" that the VTaper Max app handles, as those states' laws define it, and how you can use your rights. Our Privacy Policy covers everything else.
VTaper Max is run by its operator in Ontario, Canada ("VTaper Max", "we", "us"). Contact: privacy@vtapermax.app.
The health data we collect and why
1. Your scan photos
Two upper-body photos, front and side. The app pixelates your face on your phone before they're uploaded.
Why and how we use them: to measure your upper body (for example shoulder width, waist width and posture angles) for your scan. They're analyzed in memory on Cloudflare's network and deleted as soon as the scan finishes, usually within seconds. Our scan service is designed not to store or log them, no one at VTaper Max looks at them, and we don't use them to train AI.
2. Details sent with a scan
Your height and, if you've set them in the app, your goal, body type, training experience and training days.
Why and how we use them: your height turns the measurements into real-world sizes, and the other details help tailor your result and coaching note. They're handled like the photos: used in memory for that scan, then deleted.
3. Measurements and scores from your scan
Body measurements and ratios worked out from your photos (such as shoulder, waist and neck widths and posture angles), your V-Taper Score, zone scores and taper ratio, and a short coaching note.
Why and how we use them: to show you your scan result and build your plan. Our server works them out, sends them back to your phone and keeps no copy. To write your coaching note, an AI text model receives only your scores, ratios and goal, not your photos. Your results are then stored on your phone only.
4. App usage events
Records of what you do in the app, such as completing a scan, a routine or a weekly check-in. These could show that you use a fitness app. They're linked to a random ID created by the app, not to your name or email. They're designed not to include photos, body measurements, scores, height, weight or age.
Why and how we use them: to understand how the app is used, find problems and improve it. They're stored by Cloudflare, which deletes them automatically after three months.
5. Health information that stays on your phone
Your age, weight and other quiz answers, tape measurements, the outcome of the app's safety questions and any pain you report during a routine, plus your photos and scan history. The app keeps these on your phone to run your plan. They aren't sent to us, and we can't see them. Because we don't have a copy, we can't restore them if they're lost; keeping your phone secure and backed up is up to you.
Where it comes from
- From you: the photos you take and the details you enter in the app.
- From your phone: the usage events the app records as you use it.
- Worked out by our scan service: the measurements and scores calculated from your photos.
Who we share it with
We don't sell consumer health data, and we don't share it with third parties. We have no affiliates.
We use one service provider (a "processor") for the health data above. It processes the data only on our instructions and only to provide our service:
- Cloudflare, Inc. (United States) runs our scan service and the AI text model, and stores the usage events. Contact: cloudflare.com/privacypolicy.
Apple (payments) and RevenueCat, Inc. (subscription management) receive information about your purchase. We don't send them any of the health data listed above.
No third party collects consumer health data about you over time, or across other websites or apps, through VTaper Max.
How we protect it
Scan photos and details travel over an encrypted connection (HTTPS) and are processed in memory. We use reasonable safeguards for the health data we handle, but no method of sending data over the internet or storing it electronically is 100% secure, so we can't guarantee absolute security. You're responsible for the security of your phone, your backups and anything you export or share from the app.
Your consent
Scanning is optional. Before your first scan, the app tells you what happens to your photos, and a scan starts only when you tap "Scan my frame". If you choose "Skip for now", the app builds your plan from your quiz answers alone. You can withdraw your consent at any time by not scanning, and by deleting your data as described below. We won't collect, use or share consumer health data for any purpose not described here without asking you first.
Your rights
Depending on where you live, you have the right to:
- Confirm and access: know whether we collect, share or sell your consumer health data, see it, and get a list of every third party and affiliate we've shared it with or sold it to, with their contact details. (We haven't shared it with or sold it to any.)
- Delete: have your consumer health data deleted, including by our processor.
- Withdraw consent and ask us to stop collecting, sharing or selling it.
- In Connecticut, also correct it, get a copy you can take elsewhere, and opt out of targeted advertising, sale and profiling. We don't do any of those three.
- Appeal if we turn down your request.
We'll never treat you differently, charge you more or offer you less because you used these rights.
How to use your rights
In the app
- Delete: Profile → Privacy and data → Delete all my data. This wipes your photos, scans and answers from your phone and gives the app a new random ID.
- Get a copy: Profile → Privacy and data → Export my data.
- Delete server records: Profile → Privacy and data → Request deletion of server records. This emails us your app ID so we can find and delete the records linked to it.
By email
Email privacy@vtapermax.app and tell us what you'd like and which state you live in. It's free, up to twice a year. We'll reply within 45 days. If we need more time, we'll tell you within those 45 days, and we can take up to 45 more.
We have no accounts, so we don't know who you are. We'll ask only for what we need to handle your request. Your photos, measurements and scores aren't on our servers, so there's nothing there to delete. Usage events are tied to a random ID, not to you, and Cloudflare deletes them automatically after three months. Include your app ID (Profile → Privacy and data) so we can find the records linked to it. After "Delete all my data", your phone gets a new ID, so send your request first.
Appeals
If we turn down your request, email privacy@vtapermax.app with "Appeal" in the subject line. We'll tell you in writing what we decided, and why, within 45 days. If we still say no, you can complain to your Attorney General:
- Washington: atg.wa.gov/file-complaint
- Nevada: ag.nv.gov
- Connecticut: portal.ct.gov/ag
Changes to this policy
If we change this policy, we'll update this page and the date at the top. If a change is significant, we'll also tell you in the app before it takes effect. If a change means collecting, using or sharing your health data in a new way, we'll ask for your consent first.
Contact
VTaper Max, Ontario, Canada.
Privacy and health data requests: privacy@vtapermax.app
Everything else: support@vtapermax.app