Privacy Policy

1. Information we collect

We may collect the information you provide directly, including your name, email address, account details, health profile, symptoms, conditions, interventions, goals, measured-function results, lab uploads, generated outputs, product interactions, support messages, research preferences, and any other data you submit through Mito Map.

1a. Android MVP and linked website features

The initial Android release supports accounts, Today, Map, Plan, and journal entries for check-ins, symptoms, crashes, and plan responses. Native lab/file/camera import, report sharing, Flic, voice capture, and wearable connections are deferred. Existing information saved through the website may still be returned in your account's map, history, or plan. Opening a website link from the app uses the website's data flows.

1b. Network, location, and website analytics

Our server receives your network IP address when you connect. At login, including Android login, the backend can use ipapi.co to infer location from that IP address for location and weather context. It can save account-associated location history and use a saved website location or coordinates instead. Weather and geocoding requests can use Open-Meteo and US National Weather Service services. This server processing can occur without an Android location-permission prompt; absence of that permission does not mean no location information is processed.

The website, including pages opened from app links, loads Google Analytics and Umami analytics and records website interactions and session/request information. These linked-site analytics are distinct from a native advertising or analytics SDK.

2. Broad permission to store, review, and use data

By using Mito Map, you authorize us to store your submitted health data and account data, allow authorized Mito Map personnel and contractors to review it, and use it to operate the service, support you, answer questions, troubleshoot problems, improve scoring, improve reports, improve models, build product features, evaluate performance, and help identify ways Mito Map may be useful to you or other users.

3. Default research, validation, publication, and commercial-development permission

Research and external-sharing permission is on by default when you create a Mito Map account. Unless you turn that permission off in Profile Settings or a separate written agreement restricts particular data, you authorize us to use individual user data, including identifiable health information and PHI where applicable, for research, validation, publication, scientific analysis, product development, model development, commercial development, partnerships, licensing, diligence, collaborations, and related work that we believe may help specific users, improve Mito Map, advance mitochondrial or chronic-illness research, or support the company.

4. Identifiable sharing

While research and external-sharing permission is on, you authorize us to share identifiable information externally when we believe the sharing may help you, support research or validation, support publication or commercial development, support partnerships, obtain expert review, coordinate services, or otherwise advance Mito Map's work. External recipients may include service providers, contractors, researchers, clinicians, advisors, collaborators, partners, vendors, prospective partners, buyers, licensees, or other third parties. We may also use de-identified, aggregated, or transformed data for any of these purposes.

5. Turning research and external-sharing permission off

You can turn research and external-sharing permission off in Profile Settings. Turning it off does not remove your account access or current product features, but it tells Mito Map not to use or externally share your identifiable information for the research, validation, publication, commercial-development, partnership, licensing, diligence, and collaboration purposes described above after the opt-out is saved, except where another permission, legal basis, or written agreement applies.

6. Limits and safeguards

We will use reasonable access controls and security safeguards, and we will not intentionally use or share data in ways prohibited by applicable law or by a written agreement that specifically restricts a particular clinical, research, or partner data set. If a separate signed authorization, research consent, business associate agreement, data use agreement, or other written agreement applies to specific data, that agreement may add limits or requirements for that data.

6a. Service processing and recipients

To provide account, health-information, modeled-output, and support features, submitted information can be processed by our hosted server and database and by configured service providers. These include Google Gemini and OpenAI for AI processing, Resend for email delivery, and Backblaze B2 for configured object-storage workflows. Data sent depends on the feature and information involved; this does not mean every entry is sent to every provider. ipapi.co, weather/geocoding services, Google Analytics, and Umami support the network/location and website functions described above.

Service processing needed for requested functionality is distinct from optional research and external-sharing purposes. Turning research sharing off does not turn off every service provider involved in operating your account. A policy description does not replace any separate authorization, study consent, or ethics approval that may be required.

7. Data retention

We may keep your data for as long as we believe it is useful for operating, improving, protecting, researching, commercializing, validating, or supporting the service, unless a different retention period is required by law or a separate written agreement.

7a. Deletion and retained-copy limits

You can request account deletion through Profile Settings. The deletion guide explains the one-month cancellation period and the removal process for account-associated active data. Indefinite account retention does not cancel a valid deletion request. Copies held in backups, infrastructure logs, delivered email, or provider systems may require separate deletion or expiry processes and may be subject to applicable legal or security retention requirements. We do not promise that all retained copies disappear immediately when the active account is removed. Contact support@precisionmito.com for help with a deletion request or retained-copy questions.

8. Policy updates

We may revise this Privacy Policy from time to time. If you continue using Mito Map after updates are posted, that continued use means you accept the revised policy.

9. Contact

Mito Map is operated by AI AGENT VAULT INC., doing business as Precision Mito. For privacy questions or account-deletion help, email support@precisionmito.com. See account and data deletion instructions for the request process, cancellation period, and retained-copy limitations.