Skip to main content

Chatbot Integration in VitaliT Mobile App

Application Details​

  • Application Name: VitaliT
  • Feature: AI-Powered In-App Chat
  • Technology Used: Self-hosted AnythingLLM[https://github.com/Mintplex-Labs/anything-llm] Framework
  • Purpose: To deliver a private, secure, and intelligent chat experience that supports user health, wellness, and fitness queries within the app environment.

1. Introduction​

The VitaliT mobile app features a robust AI-powered chatbot designed to enhance user experience by offering intelligent guidance on:

  • Workout routines
  • Wellness tips
  • Diet suggestions
  • App navigation

Unlike commercial services, this chatbot is not powered by any third-party API or cloud-based platform. Instead, it is powered by AnythingLLM, a self-hosted, open-source LLM orchestration framework. This ensures complete control, data privacy, and full compliance with Apple’s privacy guidelines.

2. Technology Stack – What is AnythingLLM?​

AnythingLLM, developed by Mintplex Labs, is a fully open-source orchestration tool that enables seamless integration of large language models in secure environments.

Key Capabilities:​

  • Local and secure self-hosting
  • Independence from commercial APIs (unless configured)
  • Modular architecture with document indexing and prompt control
  • Role-based access and audit-logging features

VitaliT Implementation:​

  • Fully self-hosted in a private, secured server
  • No public cloud or third-party API involvement
  • All chatbot logic runs on-premises, enhancing data control and privacy

3. Hosting and Infrastructure Details​

To ensure airtight security and user data protection, AnythingLLM is:

  • Hosted on-premises behind an enterprise-grade firewall
  • Connected to the app through a secured API gateway
  • Deployed using Docker containers for isolation and scalability

Access Controls:​

  • Only authorized internal services can access chatbot endpoints
  • No public or third-party access is allowed
  • Admin tools are protected by multi-factor authentication and IP filtering

4. Security Measures & Data Privacy Compliance​

End-to-End Security:​

  • All traffic uses HTTPS/TLS encryption
  • APIs are secured using authentication tokens and rate-limiting

Data Handling & Storage:​

  • No persistent storage of chat data unless explicitly required
  • Session data is volatile and stored in memory only
  • No PII is processed unless user voluntarily shares it (e.g., "My age is 28")

AI Content Moderation:​

  • Context-aware prompt engineering
  • Safe, compliant responses enforced through:
    • Prompt filtering
    • Response sanitization
    • Context-bound roles
    • Intent detection

5. Why Self-Hosted Instead of Third-Party?​

Apple prioritizes user safety and transparency. Here’s how VitaliT aligns with these values:

AreaOur Approach
Data PrivacyNo user data leaves our private infrastructure
Cloud IndependenceNo OpenAI or third-party API usage
User ConsentNo data collected unless submitted by the user
App Store ComplianceBuilt to meet Apple Guidelines 5.1, 5.2, and 1.2

6. User Experience Flow​

sequenceDiagram
    participant User
    participant App
    participant AnythingLLM Backend

    User->>App: Opens Chatbot Interface
    App->>AnythingLLM Backend: Sends Secure Message (HTTPS)
    AnythingLLM Backend->>AnythingLLM Backend: Processes Request (Locally)
    AnythingLLM Backend->>App: Sends Response
    App->>User: Displays AI-Powered Reply

At no point is any communication routed through third-party or public systems.

7. Summary: Security & Compliance Matrix​

CriteriaStatus
No Third-Party Cloud or API Usage✅
User Data Safety✅
Secure, Encrypted Transmission (HTTPS)✅
PII Protection and Privacy Compliance✅
Open Source, Transparent Codebase✅
No Persistent Storage of Chat Data✅
Internal Admin Access Control✅

9. Conclusion​

The chatbot integration in the VitaliT mobile app has been engineered with a clear emphasis on user privacy, data control, and platform compliance.

By leveraging a self-hosted AnythingLLM framework, we guarantee:

  • 100% privacy of user conversations
  • Zero reliance on third-party APIs
  • Strong alignment with Apple App Store Guidelines

This implementation supports our vision of delivering a trusted, intelligent, and secure user support system, reinforcing our commitment to health-tech excellence and user well-being.