Cookie and Tracking Policy

Effective Date: [EFFECTIVE_DATE]

Last Updated: [LAST_UPDATED]

[ENTITY_NAME], LLC ("Vital IQ," "we," "us," or "our")

Introduction

This Cookie and Tracking Policy explains how [ENTITY_NAME], LLC uses cookies, analytics tools, and similar tracking technologies in connection with the Vital IQ mobile application and website (collectively, the "Service"). It also describes your choices regarding these technologies.

This policy should be read together with our Privacy Policy.

1. What Are Cookies and Tracking Technologies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function, improve efficiency, and provide information to site operators.

Tracking technologies is a broader term that includes cookies as well as software development kits (SDKs), pixels, device identifiers, and analytics tools that collect information about how you interact with a service.

2. How Vital IQ Uses Tracking Technologies

Vital IQ is primarily a mobile application. Our use of cookies and tracking technologies is limited and does not include advertising or behavioral targeting.

2.1 Mobile Application

The Vital IQ mobile app uses the following tracking technologies:

Firebase Analytics (Google Analytics 4)

Type: Analytics SDK embedded in the app
Purpose: Understanding how users interact with features, measuring feature adoption, identifying technical issues, and improving the Service
Data collected: Feature usage events (anonymized), session duration, app version, device type, operating system version
Retention: Event-level data retained per Google Analytics' standard retention schedule; aggregated analytics retained in our systems per our Privacy Policy
Your control: You may opt out of analytics collection in the app (Settings > Privacy)

Firebase Crashlytics

Type: Crash reporting SDK
Purpose: Identifying and diagnosing app crashes and errors to improve stability
Data collected: Crash logs, stack traces, device state at time of crash, app version, operating system
Health data: Crashlytics does not collect or transmit your health data, biomarker results, journal entries, or any health-related content
Your control: Crashlytics is essential for maintaining app stability and cannot be individually disabled, but no health data is included in crash reports

Firebase Cloud Messaging (FCM)

Type: Push notification SDK
Purpose: Delivering push notifications you have opted into (report completion, medication reminders, daily briefings, subscription alerts)
Data collected: Device push notification token (a random identifier, not linked to your health data)
Your control: You may disable push notifications in your device settings or within the app (Settings > Notifications)

Firebase Remote Config

Type: Configuration SDK
Purpose: Managing feature flags and app configuration without requiring app updates
Data collected: No personally identifiable information; configuration requests include an anonymous installation identifier
Your control: This is essential for app operation and cannot be individually disabled

2.2 Website

Our website (used for the public status page and legal document hosting) uses minimal tracking:

Essential Cookies

Purpose: Basic website functionality, including page rendering and navigation
Duration: Session-based (deleted when you close your browser)
Required: Yes — these are necessary for the website to function

Firebase Hosting

Purpose: Serving website content
Data collected: Standard server logs (IP address, browser type, pages requested, access timestamps)
Retention: Server logs retained per Google Cloud's standard retention schedule
Your control: Server logs are a standard part of web hosting infrastructure

2.3 What We Do NOT Use

Vital IQ does not use:

Advertising cookies or trackers — We do not serve ads or use ad networks
Third-party behavioral tracking — We do not allow third parties to track your behavior across the web using our Service
Cross-site tracking — We do not track your activity on other websites or apps
Social media tracking pixels — We do not embed Facebook, Twitter, LinkedIn, or other social media trackers
Retargeting or remarketing — We do not use retargeting cookies to show you ads elsewhere on the internet
Data broker integrations — We do not share tracking data with data brokers
Fingerprinting — We do not use browser or device fingerprinting techniques to identify you

3. Your Choices

3.1 In-App Controls

You can manage tracking preferences within the Vital IQ app:

Analytics: Settings > Privacy > Analytics (opt out of Firebase Analytics data collection)
Push notifications: Settings > Notifications (control which notifications you receive)
Location: Your device's location settings control whether the app can access your location for the health resource finder

3.2 Device-Level Controls

Your mobile device provides controls over tracking:

iOS: Settings > Privacy & Security > Tracking (control app tracking permission); Settings > Privacy & Security > Analytics & Improvements (control analytics sharing)
Android: Settings > Privacy > Ads (control advertising ID); Settings > Privacy > Usage & Diagnostics (control diagnostic data sharing)

3.3 Browser Controls (Website)

If you access our website:

Most browsers allow you to refuse or delete cookies through browser settings
You may set your browser to notify you when a cookie is being set
Disabling cookies may affect website functionality

3.4 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) browser signals. If your browser sends a GPC signal, we treat it as a request to opt out of any sale or sharing of personal information (though we do not engage in selling or sharing as defined by CCPA/CPRA).

3.5 Do Not Track

We also honor "Do Not Track" (DNT) browser signals. When we detect a DNT signal, we limit data collection to what is essential for the Service to function.

Firebase Analytics (Google Analytics 4): Analytics data is processed by Google under our data processing terms. Google's use of analytics data is governed by the Google Cloud Data Processing Terms. We have configured Firebase Analytics with the following privacy-protective settings:

IP anonymization enabled
Data sharing with Google disabled (we do not contribute data to Google's advertising products)
Data retention set to the minimum period necessary

Firebase Crashlytics: Crash data is processed by Google under the same data processing terms. Crash reports contain technical diagnostic data only — no health data is included.

We do not share analytics or tracking data with any other third party.

5. Children

Consistent with our Privacy Policy, Vital IQ is not directed to individuals under 18. We do not knowingly use cookies or tracking technologies to collect information from children under 18.

6. Changes to This Policy

We may update this Cookie and Tracking Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you through the Service. We encourage you to review this policy periodically.

7. Contact Us

If you have questions about our use of cookies and tracking technologies, please contact us:

[ENTITY_NAME], LLC
Attn: Privacy Officer
[ADDRESS_LINE_1]
[CITY], Florida [ZIP]

Email: [PRIVACY_EMAIL]

This Cookie and Tracking Policy is part of Vital IQ's legal documentation, which also includes our Privacy Policy, Consumer Health Data Privacy Policy, Terms of Service, Medical Disclaimer, and HIPAA Notice of Privacy Practices.