CoreVital Wellness Circle · App Privacy

Your reflections are personal. Your choices stay yours.

Effective date: August 25, 2026

This notice supplements the CoreVital Nutraceuticals LLC general privacy policy and explains the data practices specific to the CoreVital Wellness Circle iPhone and Android apps and the related browser-based Wellness Circle service.

Information you provide

Private access

The app’s complete on-device experience does not ask for an email address, password, or account. A universal Wellness Circle link opens that local experience. Separately, an eligible member may deliberately open a time-limited private CoreVital access link created through the related browser service. That link contains an opaque session token that allows the app to retrieve the member’s existing server-backed history without exposing the token in the app interface.

Wellness reflections

If you choose to record a check-in, the app stores the day and your 1–10 reflections for Movement, Diet, Stress, Sleep, Spirituality, and Showing Up. It also stores your preferred focus, the number of days you practiced an assignment, the coaching focus and assignment generated for the check-in, correction version information, and timestamps. In the default on-device mode, this information stays in the app’s private storage and is not transmitted to CoreVital. In optional private-access mode, the same information is sent to CoreVital over HTTPS so the app can maintain your existing server-backed history.

Program and coaching status

Optional private-access mode may use a Wellness Circle member identifier, program track, coaching cycle, entitlement window, and coaching-email preference to show the correct server-backed experience and avoid overlapping delivery tracks. These fields are not required for the default on-device experience.

On-device information

Local check-ins are stored in the app’s private container. Android backup is disabled. If you open a private-access link, the app encrypts its session token with the iPhone Keychain or Android Keystore so you do not need a password each time. Signing out removes that token from the device. A user-initiated JSON export is shared only through the destination you choose.

Version 1 does not request HealthKit or Health Connect access and does not collect location, contacts, photos, microphone recordings, camera images, advertising identifiers, analytics events, crash reports, or cross-app tracking data.

How we use the information

• Save on-device check-ins, show trends, and select a practical coaching focus.
• When you open a private-access link, provide secure member-specific access and synchronize existing progress.
• In private-access mode, apply purchase or invitation eligibility and the correct coaching-cycle window.
• Send access links and coaching messages you separately consented to receive through the related browser service.
• Protect the service, prevent duplicate delivery, troubleshoot errors, and comply with law.

MD Triple S scores are subjective wellness reflections. CoreVital does not use them to diagnose disease, provide individualized treatment, or prove that a supplement caused a change.

Service providers

The default on-device app path does not disclose check-ins to CoreVital or its providers. If you use optional private access or the related browser service, we disclose only the information reasonably needed to providers that help us operate that service. These currently include hosting and database infrastructure, Resend for private-link email delivery, Klaviyo for consented coaching communications and routing, and Shopify for purchase-eligibility verification. These providers process information under their own security and contractual obligations and may process it in the United States or other locations where they operate.

Retention and your controls

On-device check-ins remain until you reset them in the app or remove the app and its private data. A server-backed Wellness Circle participant record and check-ins remain available until you delete them or CoreVital no longer needs them for the purposes described here. Private access sessions expire and may be replaced by newer sessions.

How to delete Wellness Circle data

In the Wellness Circle app, open Settings, choose Reset check-ins on this phone, and confirm Reset. In the default on-device mode, this permanently removes all check-ins stored by the app on that device. In private-access mode, the same confirmed action also deletes the Wellness Circle participant record, measurements, and access sessions stored by CoreVital, then signs the device out.

If you cannot use the in-app control, email support@corevitalnutra.com with “Wellness Circle Deletion Request” in the subject line. Tell us that the request concerns Wellness Circle and provide enough information for us to locate and verify the applicable private-access record. Do not email wellness scores or other sensitive details.

• Export: Create a user-initiated JSON copy of your progress.
• Reset on-device progress: Permanently remove check-ins stored by the app on the current device.
• Stop coaching emails: In private-access mode, stop current and future Wellness Circle coaching emails while keeping private progress available.
• Sign out: Remove private access from the current device without deleting server data.
• Delete server-backed progress: In private-access mode, permanently delete the Wellness Circle participant record, measurements, and access sessions from inside the app.

Deleting Wellness Circle data does not delete transaction records that CoreVital or Shopify must retain for accounting, fraud prevention, returns, or legal compliance. It also does not override a separate marketing preference or deletion request outside the Wellness Circle; contact us for a broader privacy request.

Security

We use app-private local storage, HTTPS in transit, encrypted or hashed identifiers where appropriate, access controls, time-limited private sessions, and device-protected iPhone Keychain or Android Keystore storage. No security system is perfect, but we design the Wellness Circle to collect only what is needed for the experience you choose.

Children

The Wellness Circle is not directed to children under 18. Do not submit a child’s wellness information through the app.

Changes to this notice

We may update this notice when the app, providers, or legal requirements change. We will post the revised effective date here and provide additional notice when required.

Contact CoreVital

For access, deletion, privacy, or support questions, email support@corevitalnutra.com with “Wellness Circle Privacy Request” in the subject line, or visit corevitalnutra.com/contact.