Your health story should remain yours.

The short version: VitalYou is a wellness app for adults 18+. We use your information to run the app for you. We don't sell your data, we don't use advertising trackers, we don't add your name, email or phone number to what we send AI partners, and you can export or delete your data in the app at any time—right away, if you choose. If you live in Washington, Nevada or another state with a consumer health data law, also read our Consumer Health Data Privacy Policy.

1. Who we are

VitalYou is operated by RUBYNAV INC (“VitalYou”, “we”, “us”). For privacy questions or requests, email privacy@vitalyou.app.

2. Information you give us

Account. Your email address and mobile number (each bound to one VitalYou account), your password, the name you choose, and the devices you sign in on. At sign-up we ask for your date of birth to confirm you are 18 or older; the server keeps only the fact and time that you confirmed it. You can also save your birthday in your profile so your targets fit your age.

About you (optional). Your sex, height, weight, goals, activity level and city, and, if you choose, the food culture you grew up with (for example Nigerian or Mexican). That last answer can reveal your ethnic or cultural background; it is optional and used only to suggest foods you're likely to enjoy.

Family members. If you plan meals for others, you may add people you live with or cook for (such as a partner or children of any age) with a first name or label, age range and food needs. Add only what you need and have the right to share. Their details are used only to tailor your family plans and are deleted with your data.

Your wellness profile and logs. Goals, food tastes, cuisines and dietary preferences; meals you log (including food photos, barcodes and nutrition labels you scan); meal plans, grocery lists and recipes; weight, water and movement entries; medications and reminder schedules you add; mood and feeling check-ins; and health records you choose to upload.

AI Coach. The messages you send the Coach, its replies, and the things it remembers about you (see section 5).

Support. What you send us when you email for help. Please don't email medical records or passwords.

3. Verification codes

To protect your account we send 6-digit codes by email from noreply@vitalyou.app and, separately, by text message to your mobile number (a different code on each, and your number counts as verified only when you use the texted code) when you sign up, sign in on a new device, reset your password, or delete your account. We use your email and number for these codes, for account security and, if you turn them on, for notifications you choose.

4. Voice, camera, photos and health records

Voice. VitalYou uses the microphone only when you tap to talk to the Coach or start a call with it. When you tap the mic, your speech is transcribed on your iPhone by Apple speech recognition, or on Android by your phone’s speech recognition service (on the device where supported); VitalYou does not receive that audio, only the text you choose to send. Coach replies can be read aloud on your device. Live calls: when you start a call with the Coach, your voice is streamed while the call is open to xAI, which transcribes it and speaks the Coach’s replies; the audio is not stored by VitalYou, and a text transcript of the call is saved to the chat you started it from (you can delete it like any chat).

Camera and photos. VitalYou asks for camera or photo access only when you choose to snap or pick a photo. A food photo you submit is sent through our API to our AI provider for analysis, and you review the result before it is logged.

Health records. Records you upload are stored privately in your account, can be deleted at any time, and are not used for advertising.

Location. VitalYou asks for your location only when you tap Find places near me in Eat out. Your phone sends it to Apple Maps (iPhone) or Google Maps Places (Android) to find nearby restaurants; VitalYou’s servers do not receive or store your location.

5. AI Coach, memory and chat history

VitalYou asks for your permission in the app before any AI feature sends your content to an AI provider, and you can turn this off at any time (Menu → Settings → Your data → AI features). When you use the Coach, food-photo analysis or AI planning, the relevant content (for example your message or voice, recent conversation, relevant profile and log context, health records you ask about, or the photo or file you attach) is sent from our API to an AI provider to generate a response: OpenAI for Coach replies and the actions the Coach carries out for you, food-photo, nutrition-label and document reading, and meal plans and recipes; and xAI (Grok) for live voice calls with the Coach and as a backup when OpenAI is unavailable. We don't add your name, email address or phone number to these requests. Anything you put in a photo, document or call—such as a name printed on a lab report—is sent as-is, so you may want to cover details you don't want shared. Typed requests go through VitalYou's server. For a live call, VitalYou's server gives your phone a short-lived key and your phone then connects directly to xAI for the length of the call. We also use AI to estimate the nutrition of foods and drinks you type and to fill in nutrient details for your logs. Account-level choice: your AI choice is saved on your VitalYou account. With AI features on, your week's numbers (for example days logged, water, weight change and doses marked, never your name) are used to write your Sunday recap from the Coach. With them off, the recap and other reminders are written by VitalYou's own server and nothing is sent to an AI provider. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models; xAI processes API requests under its business terms.

Memory. The Coach remembers useful things you tell it—such as preferences and goals—so it can help you better over time. You can view and delete these memories in the app.

Chat history. Your conversations are saved to your account as separate chats so you can pick up where you left off on any device. You can rename, archive or delete any chat, or clear all your chat history, in the app at any time.

Actions. When you ask, the Coach can log meals, weight or water, plan meals and set reminders for you. These are saved to your account like any other entry, and you can edit or delete them.

The Coach provides general wellness guidance, not medical advice, and it can be wrong.

6. Apple Health, Health Connect and Bluetooth scales

VitalYou connects to Apple Health only after you turn it on and choose which data types to allow. You can connect a supported Bluetooth scale to record weight. You can change these permissions at any time in iPhone Settings. Data from Apple Health is used only to provide VitalYou features to you and is never used for advertising or sold.

Health Connect (Android). Connecting Health Connect is optional, and you choose which data types to allow. With your permission, VitalYou reads these types from Health Connect: steps, distance, floors climbed, exercise sessions, active calories burned, total calories burned, basal metabolic rate, weight, body fat, sleep sessions and sleep stages, heart rate, resting heart rate, heart rate variability, blood oxygen, breathing rate and VO₂ max, plus skin (wrist) temperature and mindfulness sessions on phones whose Health Connect supports them. VitalYou writes the weight, water and meal nutrition you log in VitalYou to Health Connect so your other health apps can see them; it does not read water intake. We use this data only to show your activity, sleep, heart and recovery readings on the Body today card and the Watch data screen; to calculate your Sleep, Readiness and Strain scores and the day’s wellness advice; to show your progress, weight trend and calorie budget; and, when you ask the Coach about your day, to give the Coach a short summary of today’s readings (see section 5). These readings and scores are for everyday wellness and training decisions, not medical diagnosis.

Across your devices. Your latest daily readings and scores from Apple Health or Health Connect (such as steps, active calories, workouts, weight, sleep, resting heart rate, heart rate variability and your Sleep, Readiness and Strain scores) are saved to your VitalYou account so they also appear on your other devices signed in to the same account—for example, Apple Watch data from your iPhone shows in VitalYou on your Android phone. Your app settings (such as appearance and layout) follow your account the same way.

You can grant or withdraw each permission at any time in Health Connect, and delete this data in Menu → Your data. Data from Health Connect is never sold, never used for advertising, and never used to train AI models. VitalYou’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

7. How we use information

We use information to create and secure your account, provide the features you use (logging, scanning, meal planning, reminders, tracking and the Coach), send codes and the notifications you choose, provide support, prevent fraud and abuse, keep the service working, and meet legal obligations. We do not sell your personal information, and we do not use it for third-party advertising.

8. Analytics

We measure how the app is used with our own first-party app events (for example, which screens are opened or whether a feature worked). We do not use advertising trackers or third-party ad SDKs, and we do not sell or share this data for advertising.

9. Notifications

If you allow notifications, reminders and updates are delivered through the Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android. Notifications that can appear on a lock screen don't include health details such as your weight or medication names unless you turn on named medication reminders. Product news & tips (marketing) is off until you turn it on. Every marketing email has an unsubscribe link that works in one click without signing in (and supports one-click unsubscribe in Gmail, Yahoo and other mail apps); account, security and billing emails are still sent after you unsubscribe. We send health-topic articles only for topics you choose to follow in the Inbox; we never target messages using conditions you track privately. Text messages are sent through Twilio and email through Resend. You can turn notifications off in the app or in your phone’s settings; account-security codes are still sent when needed.

10. Service providers

We use the following providers, each only for its role:

• Supabase — database, authentication and private file storage (EU/US cloud regions).
• Railway — hosts the VitalYou API that the app talks to.
• Vercel — hosts this website and the staff-only admin console (admin.vitalyou.app).
• OpenAI — AI Coach replies and actions, food-photo, nutrition-label and document reading, and AI meal plans and recipes.
• xAI — live voice calls with the Coach, and backup Coach replies.
• Resend — email, including verification codes from noreply@vitalyou.app.
• Twilio — text messages, including verification codes.
• Apple — App Store distribution, in-app purchases and subscriptions, push notifications, on-device speech recognition and Apple Health.
• Google — Google Play distribution, purchases and subscriptions on Android, Firebase Cloud Messaging push notifications, Google Maps Places for nearby restaurants, and Health Connect on Android.
• Health information sources: the Inbox shows public articles from MedlinePlus (U.S. National Library of Medicine), the CDC and the FDA; we only request the topics you follow and send no personal information.
• RevenueCat — manages VitalYou Premium subscriptions bought through the App Store and Google Play. It receives your purchase records and a VitalYou account identifier (not your name, email or card details) so your plan works on every device.

We list a new provider here before it receives any of your information. We may also disclose information if required by law, to protect the safety or security of people or the service, or as part of a corporate transaction with appropriate safeguards.

11. Where data is stored and how it is protected

Your data is stored with Supabase in EU/US cloud regions and is encrypted in transit and at rest. Access to the admin console is limited to authorized VitalYou staff with role-based access, a one-time code at every sign-in, and an audit log. Support staff can see only account and billing details, not your health information; only owners and administrators can open health data, and only as needed to operate the service or answer your request. If a security incident affects your information, we will notify you and the authorities as the law requires, including under the FTC Health Breach Notification Rule. No online system is risk-free, but we work to protect your information and limit who can reach it. Our providers may process information in countries other than your own, subject to appropriate safeguards.

12. Purchases

VitalYou Premium is sold and billed by Apple through the App Store on iPhone, and by Google through Google Play on Android. Apple or Google processes your payment; we receive your subscription status, not your card details. Subscription status is managed through RevenueCat (see Service providers).

13. Retention and deletion

We keep your information while your account is active and as needed to provide the service. Your most recent 1,500 food entries sync between your devices; older entries stay in your account (and in your export) so your history is never silently dropped. You can delete app data at any time in the app.

Deleting your account. Go to Menu → Your data and choose Delete now or Delete in 30 days; we confirm the request with a 6-digit code and sign you out on every device.

• Delete now: your account, health data, logs, chats, records and uploaded files are erased right away. This can't be undone.
• Delete in 30 days: your data stays untouched for 30 days so you can sign back in and restore it. After 30 days it is erased the same way.

What we keep after erasure. Only a minimal deletion record, with no health information: a keyed (one-way) hash of your email address and phone number, your VitalYou ID, when the account was created and deleted, and the reason you gave, if any. We keep it for one year to prevent fraud and abuse (for example repeated sign-ups to misuse codes), then delete it automatically. Purchase records held by Apple, Google and RevenueCat are kept by them under their own policies.

Deleting your account does not cancel a subscription—on iPhone cancel it in iPhone Settings → your name → Subscriptions; on Android cancel it in Google Play → Payments & subscriptions → Subscriptions. Step-by-step instructions are on our account deletion page.

14. Your choices and rights

You can export a copy of your data in the app, view and delete Coach memories, clear chat history, delete app data, delete your account, and decline or withdraw camera, photo, microphone, location, Apple Health, Health Connect and notification permissions. Depending on where you live, you may also have rights to access, correct, delete or port your information, or to object to or restrict certain processing. To make a request, email privacy@vitalyou.app from the address on your account. We may need to verify your identity first. You may also complain to your local data-protection authority. Residents of Washington, Nevada, Connecticut and other states with consumer health data laws have the additional rights described in our Consumer Health Data Privacy Policy.

15. This website

This website does not offer accounts or sign-in. The interactive preview uses sample data and keeps its state in your browser. The site is hosted on Vercel, which keeps standard server logs for security and operation. We don't use advertising trackers on this site.

16. Adults only

VitalYou is for people 18 and older. We do not knowingly create accounts for anyone under 18. If you believe a child has created an account, contact privacy@vitalyou.app and we will delete it.

17. Changes and contact

We may update this notice as the app or the law changes and will revise the effective date above. Where a change is material, we will tell you in the app or by email. Privacy questions and requests: privacy@vitalyou.app. App support: support@vitalyou.app or VitalYou Support. Everything else: hello@vitalyou.app. By post: RubyNav Inc, 15322 Marek Ln, Guy, TX 77444, USA.