Vyta

Privacy Policy

Effective date: January 1, 2025  ·  Last updated: July 13, 2026

GDPR Compliant No Data Selling Encrypted at Rest

Vyta ("we", "our", "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Vyta mobile application and related services.

1. Information We Collect

1.1 Account & Identity

• Name, email address, and profile picture (via Apple Sign In or Google Sign In)
• Account credentials managed by Supabase Auth — we never store raw passwords

1.2 Health & Body Data

• Age, gender, height, weight, body fat percentage
• Fitness goals, fitness level, activity preferences, injuries
• Dietary preferences, food allergies, foods liked and disliked
• Workout history, nutrition logs, calorie and macro targets
• Body weight progress entries over time
• Workout and nutrition streaks

1.3 Apple HealthKit Data

If you grant permission, Vyta may read steps, workouts, sleep, heart rate, heart-rate variability, body weight, body-fat percentage, and active energy from Apple HealthKit. Vyta does not write data to HealthKit. The app uses this information to display your activity and personalize workout, recovery, nutrition, and AI coaching features. Relevant health summaries may be sent securely to Vyta's backend and AI provider when you request cloud-powered coaching. We do not use HealthKit data for advertising, marketing, or cross-app tracking.

1.4 Strava Data

If you choose to connect Strava, Vyta receives OAuth credentials and Strava account and activity information made available by the Strava API. This may include athlete details, activity name and type, date, distance, duration, elevation, heart-rate metrics, calories, and training-load information. Vyta uses this information to sync activity history and personalize workout, recovery, and AI coaching features. We do not use Strava data for advertising or cross-app tracking.

1.5 Usage Data

• AI chat messages and conversation history
• Feature usage counts (for enforcing plan limits)

2. How We Use Your Information

• To generate personalized workout and nutrition plans using AI
• To provide an AI coaching chat experience tailored to your profile
• To track and display your fitness progress over time
• To send push notifications about your workouts, meals, and streaks (only if you opt in)
• To enforce subscription plan limits and prevent abuse
• To improve and debug the Vyta service

We do not use your health data for advertising purposes.

3. Data Storage & Security

Your data is stored on Supabase infrastructure hosted on AWS. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). We use Row Level Security (RLS) policies to ensure each user can only access their own data.

Access to the production database is restricted to authorized personnel only, using role-based access controls and audit logging.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third party.

We share data only with the following service providers, under strict data processing agreements:

• Supabase — database, authentication, and storage infrastructure
• OpenAI — AI-powered plan generation and coaching (your messages are sent to OpenAI's API; see OpenAI's Privacy Policy)
• Apple / Google — authentication via Sign In with Apple / Google
• Strava — optional activity import after you explicitly connect your Strava account

5. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right to access — request a copy of all data we hold about you
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your account and all associated data at any time
• Right to portability — receive your data in a machine-readable format
• Right to restrict processing — limit how we use your data
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw Apple HealthKit permissions at any time via iOS Settings

To exercise any of these rights, contact us at zenaiagent@icloud.com. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 7 days (or immediately if you choose instant deletion). Anonymized, aggregate analytics data may be retained indefinitely.

7. Children's Privacy

Vyta is not directed to children under 13 (or under 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us immediately.

8. Push Notifications

Vyta schedules workout, meal, and AI insight reminders on your device only if you explicitly opt in. You can disable reminders in Vyta or revoke notification permission at any time in iOS Settings.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via in-app notification or email. Your continued use of Vyta after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

For privacy questions or requests, contact:

• Email: zenaiagent@icloud.com
• App: Profile → Contact Support