Privacy policy — VitalKeep

Legal

Your family’s data, treated with the respect it deserves.

1. Data controller

The controller of your personal data is:

• Ingeniatic Desarrollo, S.L. (hereinafter «Vitalkeep»).
• Tax ID: B-30861728
• Address: Parque Tecnológico de Fuente Álamo, Km 2,5, Edificio CEDIT, 30320 Fuente Álamo de Murcia, Spain.
• Data Protection Officer: privacidad@vitalkeep.com

2. What data we collect

Data collected through the website

• Browsing data (technical cookies, IP address, browser, language).
• Data you provide in forms: name, email, phone, shipping and billing details.

Data collected through the product and app

• Account and invited caregivers’ data (name, email, phone).
• Monitored user data: name, age, sex, health- and care-related data (routines, presence by room, fall events, SOS alerts, device battery).
• Hardware technical identifiers (serial numbers, MAC).

What we do NOT collect: images, video, audio, GPS location or outdoor geolocation. No SIM card, no cameras.

3. Why we process your data

• To deliver the monitoring service you’ve contracted and to send alerts to the designated caregivers.
• To manage your account, subscription, payments and billing.
• To assist you when you contact support.
• To improve the product based on aggregated and anonymised statistics.
• To fulfil our legal obligations (tax, accounting).
• To send you commercial communications about Vitalkeep, only with your explicit consent.

4. Legal basis

• Performance of contract: to deliver the service you’ve signed up for and answer your queries.
• Explicit consent: for processing health data and sending commercial communications. You can withdraw it at any time.
• Legal obligation: retention of tax and billing data.
• Legitimate interest: improving the product based on aggregated, anonymised data.

5. How long we keep your data

• Account and service data: while the subscription is active, and up to 12 months after cancellation.
• Health and monitoring data: 12 months (rolling window) unless the user requests early deletion.
• Tax and billing data: 6 years, as required by law.
• Marketing data: until you withdraw consent.

6. Recipients and international transfers

Your data is not shared with third parties, except for those strictly necessary to provide the service (hosting provider in Spain, payment gateway, push notification platform). All of them are bound by data processing agreements compliant with the GDPR.

We do not carry out international transfers outside the European Economic Area. All critical infrastructure is hosted on our own servers in Spain.

7. Your rights

As a data subject, you have the right to:

• Access: know what data we hold about you.
• Rectification: correct inaccurate data.
• Erasure («right to be forgotten»): delete your data when no longer needed.
• Object: object to certain processing.
• Restriction: restrict processing in certain cases.
• Portability: receive your data in a structured, commonly used format.
• Not be subject to automated decisions with significant legal effects.
• Withdraw consent at any time.

8. How to exercise your rights

Write to privacidad@vitalkeep.com stating your request and attaching a copy of a document proving your identity. We will reply within a maximum of one month.

If you feel we haven’t handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security

We apply appropriate technical and organisational measures to protect your data: encryption in transit (TLS) and at rest, access control, regular audits, backups and incident response plans. We will notify any relevant security breach to the AEPD and, if applicable, to those affected, within the timeframes required by law.

10. Changes to this policy

We may update this policy to reflect legal or service changes. We’ll notify you by email of any substantial change.

Last updated: April 2026.