Privacy Policy

1. Who this policy covers

This policy applies to two groups of people:

•Account holders — the businesses and individuals who create a Vitalz account to build surveys and read reports.

•Respondents — the people who answer a survey shared by an account holder. Respondents answer anonymously by default and are not asked to create an account.

2. What we collect

From account holders: your email address (used for magic-link sign-in), and any business details, survey content and settings you choose to enter. We also record basic usage and billing information needed to run your account.

From respondents: the answers submitted to a survey, and limited technical data (such as an approximate device type and a one-time token that prevents duplicate submissions). Respondents are not asked to identify themselves unless the account holder adds a question that requests it.

We do not intentionally collect special categories of sensitive data, and we ask that account holders do not design surveys that solicit it unless they have a lawful basis and the respondent's clear consent.

3. How we use data

We use personal data to: provide and operate Vitalz; authenticate sign-in; generate questionnaires and reports; process credits and payments; provide support; keep the service secure; and comply with legal obligations.

Survey responses belong to the account holder who collected them. We process those responses on the account holder's behalf to produce their report. We do not sell respondent data, and we do not use one customer's responses to benchmark, profile or advertise to another.

4. AI processing

Vitalz uses automated and AI-assisted processing for two tasks: drafting or polishing survey questions, and clustering open-ended comments into themes. Numerical results (such as scores and key-driver analysis) are calculated directly from the data. We do not use your survey content to train third-party foundation models.

5. Disclosure to third parties

We share personal data only with service providers who help us run Vitalz — for example, hosting and database infrastructure, email delivery for magic links, and payment processing when card checkout is enabled. These providers act on our instructions under appropriate confidentiality and data-protection terms.

We may disclose data if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or reorganisation, in which case we will take reasonable steps to ensure this policy continues to apply.

6. International transfer & storage

Your data is stored in a managed, access-controlled database. Where data is processed outside Singapore, we take reasonable steps to ensure a comparable standard of protection consistent with the PDPA.

7. Retention

We keep personal data for as long as your account is active or as needed to provide the service, and thereafter only as required for legitimate business or legal purposes. Account holders can delete surveys and responses from their account; deleted data is removed from active systems within a reasonable period.

8. Security

We use technical and organisational measures — including encryption in transit, access controls and row-level data isolation — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

9. Your rights

Subject to the PDPA, you may request access to, or correction of, personal data we hold about you, and you may withdraw consent to certain processing. To make a request, email us at the address below. We may need to verify your identity before acting on a request.

Respondents who wish to access or withdraw a specific response should contact the business that ran the survey, as that business controls those responses; we will assist that business where we can.

10. Cookies

Vitalz uses only the cookies and similar technologies needed to sign you in and keep your session secure. We do not use third-party advertising cookies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify account holders.

12. Contact

For any privacy question or request, or to reach our data-protection contact, email support@zomodus.com or write to Zomodus Pte Ltd at the address below.