Your health story should remain yours.

Public preview boundary: The website demo uses fictional data. Do not place real medical documents, medication details, passwords, or confidential health information in the public demo or in support email.

1. Information you choose to provide

If you join early access, we collect your email address, optional country or region, selected area of interest, consent record, source and submission time. Account features may collect an email address, account identifier, taste and cuisine preferences, household and schedule preferences, chosen goals, ability information, user-selected health considerations, weight or activity entries, reminder choices, optional medication-module preferences, and consent records. We use these inputs to provide the feature you requested and to explain how they shape your personal path.

2. Website demo and device-local information

The public demo stores limited preview state in your browser. The mobile app may store preferences, reminder schedules, consent choices, and recent interactions on your device. Device-local information is not “collected” by VitalYou unless a feature transmits it to our service. Deleting the app or clearing browser data can remove device-local state; use the in-app account-deletion control to remove associated cloud data.

3. Camera, pictures, voice and documents

VitalYou asks for camera or photo access only after you choose a capture or upload action. VitalYou asks for microphone access only after you tap the Coach’s Talk control. The microphone is not used for background listening: recording ends when you tap Stop or after 60 seconds. With your separate AI permission, the temporary recording is sent through VitalYou’s authenticated service for transcription, then deleted from the app’s temporary storage after the transcription attempt. The resulting transcript is shown for review and editing before you choose whether to send it to the Coach. With the same permission, a food picture you select can be sent for analysis. Medical-document upload is not enabled in this release.

4. AI processing and your permission

Live GPT features require a signed-in account and your explicit permission before information is sent to OpenAI, a separate AI service provider. The permission screen identifies the information needed for the action: a Coach message and recent conversation with limited selected context; a temporary voice recording for transcription; or a compressed food photo with selected cuisine and general wellness-goal context. You can decline and keep using manual features, or withdraw permission later from Account. Voice transcription does not bypass the Coach’s safety screening: the editable text you choose to send follows the same bounded coaching route as typed text. VitalYou does not use private health, medication, voice, food-photo, or medical-document content for advertising or unrelated model training.

5. How information is used

We use waitlist information to send requested updates, invite eligible people to research or testing, understand broad launch interest, and respond to inquiries. We use account information to authenticate the user, rank familiar food, organize meal and movement plans, apply safety boundaries, schedule selected reminders, show progress, secure private records, prevent abuse, and provide support. VitalYou does not sell personal health information.

6. Service providers and disclosures

Current infrastructure may include Vercel for website and server delivery, Supabase for authentication and private application data, Resend for requested transactional email, Expo for mobile build and update operations, Apple for TestFlight and App Store distribution, and OpenAI only when a separately enabled live AI feature is used. Providers receive only information needed for their role and are expected to protect it under applicable agreements and law. We may also disclose information when required by law, to protect safety or security, or as part of a legally permitted corporate transaction with appropriate safeguards.

7. Health-data restrictions

Health, fitness, medication, camera, photo, voice, transcript, and Apple Health information will not be used for third-party advertising, marketing profiles, data brokerage, or unrelated use-based mining. VitalYou does not store personal health information in iCloud. Apple Health import appears only after the person explicitly connects it and approves specific data types.

8. Retention, security and location

We retain information only as long as reasonably needed for the stated purpose, account operation, security, dispute resolution, or legal obligations, then delete or de-identify it. VitalYou uses access controls, encrypted transport, private storage rules, and least-privilege service access, but no online system is risk-free. Providers may process information in countries other than your own, subject to applicable transfer safeguards.

9. Your choices and requests

You can decline camera, photo, microphone, health, AI-data-sharing, and notification permissions and continue using available manual features. You can turn automatic spoken replies and optional medication support off, change or cancel reminders, and unsubscribe from email. You can permanently delete your account and associated VitalYou cloud data inside Account → Delete account and data. You may also request access, correction, export, or other privacy assistance by contacting privacy@vitalyou.app from the address associated with your account. We may verify your identity before completing a request.

10. Children

The website waitlist and current mobile release are for adults. VitalYou does not knowingly open health accounts for children in this release. Future child and teen experiences require separate age assurance, parent or guardian authorization where applicable, pediatric and body-image safeguards, restricted analytics and advertising, regional legal review, and appropriate support before release.

11. Changes and contact

We may update this notice as features or legal requirements change and will revise the effective date. Material changes will receive additional notice where required. Questions or privacy requests may be sent to privacy@vitalyou.app. App assistance is available at VitalYou Support. VitalYou is operated by RUBYNAV INC.