Privacy Policy

Daily Vitality is owned and operated by PointForm, Inc., an Ontario corporation located at 412 Laird Road, Unit 101, Guelph, ON, N1G 3X7, Canada. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit Daily Vitality (the "Site").

Although Daily Vitality serves a primarily U.S. audience, our operating company is based in Canada. We are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable to our U.S. visitors, U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA") and the Children's Online Privacy Protection Act (COPPA).

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Site.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and in accordance with applicable privacy legislation.

A note on health information: Daily Vitality is a general wellness publisher. We do not knowingly collect medical records or health information for treatment purposes, and we are not a "covered entity" under the U.S. Health Insurance Portability and Accountability Act (HIPAA). Please do not send us sensitive health information about yourself through the Site.

---

Information Collected Automatically

When you visit Daily Vitality, certain information is collected automatically through your browser and our server infrastructure. This includes:

• IP address (used for approximate geographic location and security purposes)
• Browser type and version (e.g., Chrome, Safari, Firefox)
• Operating system and device information (e.g., desktop, mobile, tablet)
• Pages visited, time spent on pages, and navigation paths
• Referral source (how you arrived at the Site, such as a search engine, social media link, or direct visit)
• Date and time of your visit

This information is collected through server logs, cookies, and similar tracking technologies, as described further below.

Analytics Data

We use web analytics services, including Google Analytics, to understand how visitors interact with our content. Analytics data is collected in aggregate and anonymized where possible. This helps us understand which topics are most useful to our readers and how we can improve the Site. Google Analytics may set its own cookies on your device — see the "Cookies and Tracking Technologies" section for details.

Account Information

When you create an account on Daily Vitality, we collect the following information through our authentication provider, Clerk:

• Email address — provided via Google OAuth or direct signup
• Display name — from your Google profile or entered manually
• Profile image — from your Google profile (if using Google OAuth)
• Username — auto-generated from your email address

Your account also stores the following preferences and activity data:

• Email preferences — whether you have opted in to marketing emails, weekly digest, and account notifications
• Profile visibility — your choice of public or private profile
• Saved articles — articles you have bookmarked for later reading
• Saved products — products you have saved from our comparison guides
• Last active timestamp — updated when you visit the Site while signed in

You are not required to create an account to browse the Site. Account creation is only needed to save articles, save products, and manage email preferences.

Contact Forms and Inquiries

If you reach out to us through a contact form or email, we collect the information you provide, such as your name, email address, and message content.

Affiliate Link Interactions

Daily Vitality includes affiliate links within our product reviews and recommendations. When you click an affiliate link, we may record that the click occurred (e.g., which link, on which page, and at what time). Once you leave the Site via an affiliate link, the destination merchant or affiliate network may collect additional information under their own privacy policies. See "Affiliate Links and Product Recommendations" below for more detail.

---

We use the information we collect for the following purposes:

• Content improvement: Understanding which topics, reviews, and guides are most valuable to our readers so we can prioritize and improve our editorial content.
• Traffic analysis: Monitoring overall Site performance, identifying technical issues, and understanding traffic patterns.
• Personalization: Limited to general regional relevance, such as identifying that a visitor is in a particular U.S. state or region based on IP address (e.g., highlighting products available in your area). We do not build individual profiles or use personal information for automated decision-making that produces legal or similarly significant effects.
• Communication: If you have opted in to our newsletter, sending you periodic updates, new content alerts, or relevant wellness resources. We comply with the U.S. CAN-SPAM Act and applicable anti-spam laws, and will only send marketing or promotional emails where we have obtained the consent required by law. You may unsubscribe at any time by clicking the "unsubscribe" link included in every email or by contacting us directly.
• Affiliate reporting: Tracking click activity on affiliate links in aggregate to understand which product recommendations are most useful to readers and to fulfill our reporting obligations to affiliate partners.
• Security and fraud prevention: Protecting the Site against malicious activity, spam, and unauthorized access.

We collect only the personal information that is reasonably necessary to fulfill the purposes identified in this Privacy Policy. We do not collect information that is unrelated to the operation and improvement of the Site. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

---

What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to site operators.

Cookies We Use

Daily Vitality uses the following types of cookies:

• Essential cookies: These are necessary for the Site to function properly, such as remembering your cookie consent preferences.
• Analytics cookies: Set by Google Analytics and similar services, these cookies help us understand how visitors use the Site. They collect information such as the number of visitors, the pages they visit, and the sources of traffic. This data is aggregated and anonymized where possible.
• Affiliate tracking cookies: When you click an affiliate link, the affiliate network or merchant may set a cookie on your device to attribute your visit or purchase. These cookies are governed by the respective third party's privacy and cookie policies.
• Preference cookies: These may remember choices you make (such as dismissing a notification) to provide a more tailored experience.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually or in bulk
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies when you close the browser

Please note that blocking or deleting certain cookies may affect your experience on the Site. For more information on managing cookies, visit aboutcookies.org or your browser's help documentation.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

Where required by applicable law, we obtain your consent before placing non-essential cookies (such as analytics or affiliate tracking cookies) on your device. You may manage your cookie preferences through our consent banner or your browser settings. Some web browsers offer a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal; where required by law, we honor recognized opt-out preference signals.

---

We work with a limited number of third-party service providers to operate and improve the Site. These include:

Each third-party service operates under its own privacy policy. We encourage you to review the privacy policies of any third-party services you interact with through the Site. We do not control and are not responsible for the privacy practices of these third parties.

---

Daily Vitality publishes product reviews, comparisons, and recommendations as part of our editorial content. Many of these include affiliate links, meaning we may earn a commission if you click through and make a purchase from a merchant.

Important points about affiliate links:

• Clicking an affiliate link takes you to a third-party website (e.g., Amazon.com, a retailer's website). Once you leave Daily Vitality, that merchant's privacy policy and terms of service apply.
• The affiliate network or merchant may set cookies on your device to track referrals and attribute purchases.
• We do not receive personally identifiable information about your purchases from affiliate partners. We receive only aggregated or anonymized reports (e.g., number of clicks, conversion rates, commission earned).
• Our editorial recommendations are independent. Affiliate relationships do not influence our product assessments or ratings, and we disclose them in accordance with FTC guidelines (16 CFR Part 255).

---

We do not sell, rent, or trade your personal information.

We may share information in the following limited circumstances:

• Anonymized and aggregate data: We may share non-identifying, aggregate statistics about Site usage with partners, advertisers, or publicly (e.g., "60% of our readers are interested in nutrition content"). This data cannot be used to identify any individual.
• Service providers: We share information with trusted third-party service providers who assist us in operating the Site (analytics, email, hosting), but only to the extent necessary for them to provide their services. These providers are contractually obligated to protect your information.
• Legal requirements: We may disclose personal information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, personal information may be transferred as part of that transaction. We would notify you of any such change via a prominent notice on the Site.

---

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy:

• Account data (display name, username, email preferences, profile settings): Retained for as long as your account is active, plus 30 days after deletion to allow for recovery. After deletion, all account data is permanently removed.
• Saved articles and products: Retained for as long as your account is active. Deleted when your account is deleted.
• Authentication data: Session tokens and authentication state are managed by Clerk and are subject to Clerk's retention policies (typically 30 days for inactive sessions).
• Analytics data: Retained in aggregated form. Google Analytics data retention is configured in accordance with our analytics settings, typically 14 months, after which it is automatically deleted.
• Newsletter subscriptions: Your email address is retained for as long as you remain subscribed. You may unsubscribe at any time, after which your information will be removed from our mailing list within a reasonable timeframe.
• Contact form submissions: Retained for as long as necessary to respond to your inquiry and for reasonable record-keeping purposes, typically no longer than 24 months.
• Server logs: Retained for security and diagnostic purposes for a limited period, typically no longer than 12 months.
• Cookie consent preferences: Stored in a first-party cookie on your device for up to 12 months. You can clear this at any time through your browser settings or the CookieYes consent widget.
• Inactive accounts: If your account has been inactive for 24 months, we may send you a notification. If your account remains inactive for 30 months, it may be automatically deleted along with all associated data.

When personal information is no longer needed, it is securely deleted or anonymized.

---

Depending on where you live, you may have certain rights regarding your personal information. We honor the following rights for all users regardless of location, subject to verification of your identity and applicable legal limits:

• Right of access / to know: You may request access to the personal information we hold about you, including the categories of information we collect and the purposes for which it is used.
• Right of correction: If your personal information is inaccurate or incomplete, you may request that we correct it.
• Right to deletion (erasure): You may request that we delete your personal information, including your account and all associated data (saved articles, saved products, preferences). Upon verification of your identity, we will delete your data within the timeframe required by applicable law.
• Right to data portability (export): You may request a copy of your personal information in a portable, machine-readable format (JSON). This includes your account profile, preferences, saved articles, and saved products.
• Right to withdraw consent / opt out: You may withdraw your consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions — for example, by unsubscribing from our newsletter.
• Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

For California Residents (CCPA/CPRA)

If you are a California resident, you have the rights described above, including the right to know what personal information we collect, use, and disclose; the right to delete personal information; the right to correct inaccurate information; and the right to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising. You may exercise your rights by contacting us using the details in the "Contact Us" section below, and you may designate an authorized agent to submit requests on your behalf. We will not discriminate against you for exercising your California privacy rights.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We may need to verify your identity before processing your request.

---

Daily Vitality is not directed at children under the age of 13, and in keeping with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. Given the nature of our health and wellness content, the Site is intended for adults. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take appropriate action.

---

Daily Vitality is operated by a Canadian company and serves a primarily U.S. audience. Depending on the service provider, your information may be processed or stored on servers located in Canada, the United States, or other jurisdictions.

Where personal information is transferred across borders, we take reasonable steps to ensure that your information receives a level of protection consistent with applicable privacy standards. This includes using service providers that adhere to recognized privacy frameworks and maintaining contractual safeguards where appropriate.

Please be aware that data stored or processed in other jurisdictions may be subject to the laws of those jurisdictions, including lawful access by courts, law enforcement, and national security authorities.

---

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration, or destruction. These measures include:

• Use of encryption (HTTPS/TLS) for all data transmitted between your browser and the Site
• Restricted access to personal information on a need-to-know basis
• Regular review of our data collection, storage, and processing practices
• Use of reputable, security-conscious third-party service providers

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining safeguards appropriate to the sensitivity of the information.

---

In the event of a breach of security safeguards involving personal information that poses a real risk of significant harm, we will notify affected individuals and report the breach to the appropriate regulatory authorities, as required by applicable privacy legislation.

---

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, the updated policy will be posted on this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy. For material changes, we will make reasonable efforts to provide prominent notice on the Site.

---

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

PointForm, Inc.
412 Laird Road, Unit 101
Guelph, ON N1G 3X7
Canada

Email: admin@pointform.com

PointForm, Inc. has designated a Privacy Officer responsible for compliance with applicable privacy legislation. Privacy-related inquiries and rights requests should be directed to the email address above.