Privacy Policy

Effective Date: July 27, 2026

Boxcue Technologies LLC (“Boxcue,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how Boxcue handles information when you visit our website, communicate with us, or use our products and services, including the Vital Arc mobile application.

Vital Arc is a privacy-focused application that helps users view and understand health and fitness information stored in Apple Health.

1. Scope of this Privacy Policy

This Privacy Policy applies to:

  • The Boxcue website at boxcue.com

  • Communications sent to Boxcue

  • Customer and support inquiries

  • Boxcue products and services

  • The Vital Arc mobile application

This policy does not govern Apple’s products, services, operating systems, App Store, Apple Health, or HealthKit. Apple handles information under its own privacy policies and terms.

2. Information handled through Vital Arc

Apple Health and HealthKit information

With your permission, Vital Arc may access selected health and fitness information stored in Apple Health through Apple’s HealthKit framework.

Depending on the information available in Apple Health and the features you use, this may include categories such as:

  • Activity and movement

  • Steps and distance

  • Workouts and exercise

  • Energy expenditure

  • Heart rate and cardiovascular measurements

  • Sleep

  • Body measurements

  • Mobility

  • Respiratory measurements

  • Nutrition

  • Other health and fitness metrics supported by Vital Arc

Vital Arc requests access only after you grant permission through Apple’s authorization controls. You may choose which HealthKit categories Vital Arc can access and may change or revoke those permissions through your Apple device settings.

Apple requires HealthKit apps to disclose how HealthKit information is used and restricts its use for advertising, marketing, and unrelated data-mining purposes. Apple Developer

3. How Vital Arc uses health information

Vital Arc uses the HealthKit information you authorize to:

  • Display health and fitness measurements

  • Generate charts and summaries

  • Organize information by day, week, month, year, and rolling 12-month period

  • Calculate averages, changes, comparisons, and trends

  • Help you identify patterns in your personal health information

  • Provide widgets and other app features you choose to use

Vital Arc uses health information solely to provide health, fitness, and personal-data visualization features to you.

Boxcue does not use HealthKit information for:

  • Advertising

  • Targeted marketing

  • Data brokerage

  • Credit decisions

  • Employment decisions

  • Insurance eligibility or pricing

  • Unrelated profiling

  • Selling products or services based on your health information

4. On-device processing and storage

Vital Arc is designed to process your HealthKit information locally on your Apple device.

Boxcue does not upload, receive, or store your HealthKit information on Boxcue-operated servers.

Vital Arc does not require you to create a Boxcue account or sign in.

Limited locally generated information, such as summaries needed to display Vital Arc widgets, may be stored in a private Apple App Group container on your device. This information remains within the app’s Apple-managed local storage environment and is used only to support Vital Arc functionality.

Vital Arc does not store personal health information in iCloud.

5. Sharing of health information

Boxcue does not:

  • Sell HealthKit information

  • Rent HealthKit information

  • Share HealthKit information with data brokers

  • Share HealthKit information with advertising platforms

  • Use HealthKit information to target advertisements

  • Combine HealthKit information with third-party advertising profiles

  • Disclose HealthKit information for unrelated commercial purposes

Apple prohibits developers from selling information obtained through HealthKit to advertising platforms, data brokers, or information resellers and limits third-party disclosure of HealthKit information. Apple Developer

Because Vital Arc processes HealthKit information locally, Boxcue generally does not possess that information and therefore cannot access, view, sell, or disclose it.

6. Information you provide directly to Boxcue

You may provide information to Boxcue when you:

  • Send us an email

  • Submit a website contact form

  • Request customer support

  • Report a problem

  • Provide feedback

  • Communicate with us for business or partnership purposes

This information may include:

  • Your name

  • Your email address

  • The content of your message

  • Screenshots or attachments you choose to provide

  • Technical details related to a support request

We use this information to:

  • Respond to your inquiry

  • Provide customer support

  • Investigate technical problems

  • Improve our products and services

  • Protect the security and integrity of our services

  • Maintain appropriate business records

  • Comply with legal obligations

Please do not include sensitive health information in email, support messages, or website forms.

Information submitted directly to Boxcue is handled separately from the Apple Health information processed locally by Vital Arc.

7. Website information

When you visit the Boxcue website, our website-hosting provider may automatically process limited technical information necessary to operate, secure, and maintain the website.

This may include:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Pages visited

  • Approximate visit time

  • Referring website

  • Security and error logs

The Boxcue website may use essential cookies or similar technologies required for functionality, security, fraud prevention, and performance.

Boxcue does not use website activity to access, identify, or infer your Apple Health information.

If Boxcue later introduces optional analytics, advertising technologies, or additional cookies, this Privacy Policy and any required consent controls will be updated accordingly.

8. App diagnostics

Apple may provide Boxcue with limited diagnostic and performance information, such as:

  • App version

  • Device model

  • Operating-system version

  • Crash reports

  • Performance information

  • Technical error information

The availability of this information may depend on your Apple privacy and analytics settings.

Diagnostic information is used to:

  • Identify crashes and technical problems

  • Maintain app reliability

  • Improve app performance

  • Protect app security

Boxcue does not use diagnostic information to create advertising profiles or identify the contents of your HealthKit records.

9. Purchases and subscriptions

Purchases or subscriptions for Vital Arc may be processed by Apple through the App Store.

Apple, rather than Boxcue, processes your payment details. Boxcue does not receive your complete payment-card number.

Apple may provide Boxcue with limited transaction information necessary to:

  • Confirm a purchase

  • Determine subscription status

  • Restore purchases

  • Provide customer support

  • Analyze aggregate sales and subscription activity

Apple’s collection and handling of payment and App Store information is governed by Apple’s own privacy policy and terms.

10. Service providers

Boxcue may use service providers for limited business functions such as:

  • Website hosting

  • Domain and email services

  • App distribution

  • Payment and subscription processing

  • Customer support

  • Technical infrastructure

  • Security and diagnostic services

These providers may process only the information reasonably necessary to perform their services.

Boxcue does not authorize service providers to use HealthKit information for advertising, data brokerage, or unrelated commercial purposes.

Because Vital Arc processes HealthKit information locally, Boxcue’s ordinary website, email, and business-service providers do not receive your HealthKit information from Vital Arc.

11. Data retention

HealthKit information accessed by Vital Arc remains subject to:

  • Your Apple Health settings

  • Your HealthKit permissions

  • Your device settings

  • Vital Arc’s local app storage

  • Apple’s applicable storage and security controls

Boxcue does not retain copies of your HealthKit information on its servers.

Information you submit directly to Boxcue may be retained for as long as reasonably necessary to:

  • Respond to your request

  • Provide support

  • Maintain business and security records

  • Resolve disputes

  • Enforce agreements

  • Comply with applicable law

When information is no longer reasonably required, Boxcue may delete, anonymize, or securely dispose of it.

12. Your choices and controls

HealthKit permissions

You may review, restrict, or revoke Vital Arc’s access to HealthKit information through the Health or privacy settings on your Apple device.

Revoking access may prevent some Vital Arc features from functioning.

Deleting Vital Arc

You may delete Vital Arc from your device at any time.

Deleting the app removes data stored by the app in accordance with Apple’s device-storage behavior. It does not necessarily delete information stored separately in Apple Health. You must manage Apple Health information through Apple’s Health app and device settings.

Communications

You may contact Boxcue to ask questions about information you submitted directly to us.

Because Boxcue does not receive or maintain your HealthKit information on its servers, Boxcue generally cannot access, retrieve, correct, or delete your underlying Apple Health records.

Subscriptions

You may manage or cancel App Store subscriptions through your Apple account settings.

13. Data security

Boxcue uses reasonable administrative, technical, and organizational safeguards designed to protect information under its control.

Vital Arc’s on-device design limits the transmission and centralized storage of sensitive health information. However, no device, website, email system, storage system, or electronic transmission method can be guaranteed to be completely secure.

You are responsible for protecting access to your:

  • Apple device

  • Device passcode

  • Apple Account

  • Email account

  • Backups and connected services

The FTC expects companies handling health-related information to honor their privacy representations and maintain security appropriate to the sensitivity of the data involved. Federal Trade Commission

14. Health-data breaches

Depending on the circumstances and applicable law, certain health applications may be subject to the Federal Trade Commission’s Health Breach Notification Rule.

That rule may require covered health-app businesses to notify affected individuals, the FTC, and, in some cases, the media following certain breaches of unsecured, identifiable health information. Federal Trade Commission

Although Vital Arc is designed so Boxcue does not receive or centrally store your HealthKit information, Boxcue will assess and respond to any security incident involving information under its control in accordance with applicable law.

15. Children’s privacy

Vital Arc and the Boxcue website are not directed to children under 13.

Boxcue does not knowingly collect personal information directly from children under 13. If we learn that a child under 13 has submitted personal information directly to Boxcue without appropriate authorization, we will take reasonable steps to delete it.

A parent or guardian who believes a child has provided information to Boxcue may contact us at info@boxcue.com.

16. Medical disclaimer

Vital Arc is intended for informational, organizational, and personal-wellness purposes only.

Vital Arc is not intended to:

  • Diagnose a disease or medical condition

  • Provide medical treatment

  • Replace a physician or other qualified healthcare professional

  • Provide emergency medical guidance

  • Guarantee the accuracy of data generated by Apple Health, connected devices, or third-party sources

Always seek the advice of a qualified healthcare professional regarding medical questions or concerns. Do not disregard professional medical advice or delay seeking care because of information displayed in Vital Arc.

In an emergency, contact emergency services immediately.

17. HIPAA

Boxcue is not a healthcare provider, health plan, or healthcare clearinghouse merely because Vital Arc allows individuals to view health and fitness information.

Vital Arc is a consumer-directed application. Information held by a consumer app that is neither a HIPAA-covered entity nor a business associate may fall outside HIPAA after the information is transmitted to the app at the individual’s direction. HHS.gov

Whether HIPAA applies depends on the specific relationship between an app developer and a healthcare provider, health plan, clearinghouse, or business associate. Boxcue does not currently operate Vital Arc on behalf of a healthcare provider or health plan.

Other privacy and consumer-protection laws may still apply even when HIPAA does not. HHS and the FTC specifically direct mobile-health developers to consider the FTC Act, the Health Breach Notification Rule, HIPAA, and other potentially applicable laws. HHS.gov

18. International users

Boxcue is based in the United States, and Vital Arc is initially intended for users in the United States.

If you access the Boxcue website or communicate with Boxcue from outside the United States, information you submit directly to us may be processed in the United States.

Vital Arc’s HealthKit processing remains primarily local to your Apple device as described in this policy.

19. Changes to this Privacy Policy

Boxcue may update this Privacy Policy to reflect:

  • Product changes

  • New features

  • Changes in our information practices

  • Changes in service providers

  • Legal or regulatory requirements

  • Security improvements

When we update the policy, we will revise the effective date at the top of the page.

When required, we may provide additional notice through the Boxcue website, Vital Arc, the App Store, or another appropriate communication channel.

20. Contact Boxcue

Questions, requests, or concerns regarding this Privacy Policy or Boxcue’s privacy practices may be directed to:

Boxcue Technologies LLC
Chicago, Illinois
Email: info@boxcue.com
Website: https://boxcue.com