Privacy Policy

• Your account: name, email address and a hashed password. If you sign in with Google or Apple, we receive your name, email address and profile picture from them, and keep the encrypted sign-in tokens that link the account.
• Your profile: sex, age, height, weight, activity level, goal and target pace, used to estimate your daily targets and, from your age, the maximum heart rate your zones are measured against.
• Your log: the foods, meals, water, weight, body measurements and blood test results you record; the workouts you finish, with their exercises, sets, weights, times, records, notes and, if a watch recorded it, the heart rate and energy; your daily steps if you turn step counting on; your morning check-ins: how you felt and what you tagged, such as stress, illness or your period; your own foods, saved meals, recipes and routines; and which foods and exercises you use most, so Recent, Frequent and remembered portions work.
• Cycle awareness: if your profile is set to female and you turn this on in Settings, the days of your periods that you mark on the Body page or by tagging your period in your morning check-in. They are never read from Apple Health or Health Connect, and are used only to explain changes in your weight, recovery and appetite. Turning it on asks for your explicit consent, and turning it off deletes them. They are never sent to the AI features or a connected assistant, never drawn on a share image and never counted in our usage figures.
• Shared routines: a routine you share as a link is copied (name, exercises, sets, rests and notes) and kept for 7 days so anyone with the link can open it. A routine code carries the copy inside the code itself; we don't store it.
• AI answers you ask for: an explanation of a day, a recap of your history or a workout summary is saved to your account so it isn't generated again each time. Share images (your day, a workout, a week, your recovery) are drawn from your data when you ask and sent to your device; we don't keep them.
• Bedroom sensor: if you connect a SwitchBot sensor under Devices & connections, our server asks SwitchBot's cloud every 10 minutes for your bedroom's temperature, humidity and, from a sensor that measures it, CO₂, using the token and secret you give it, which we store encrypted. The readings are shown with your nights. You can share them with someone who sleeps in the same room by giving them a one-time code; each of you then sees the other's name, either of you can end it, and the readings already shared stay with each person's nights. Disconnecting deletes the token; the readings stay until you delete your account.
• Sign-in sessions: for each device you're signed in on, its browser type and IP address, used to keep you signed in and to spot misuse, plus the hour you last used the app. For a paired watch, its name, model, app version and when it was last used.
• Your settings: units, theme, language, time zone, water and step goals, meal sections and notification choices.

To calculate your targets, show your day and history, explain them when you ask, and keep your log in sync across your devices. Your data is never used for advertising, never shared with other users except the bedroom readings you choose to share, and never sold. There is no public profile and no social feed.

Your body details, goal, food log and training count as health data, and so do the heart rate and energy a watch records, your steps, and the sleep, heart rate and workouts read from Apple Health or Health Connect. We use them only with your explicit consent, which you give when you set up your account; it also covers what the AI features send when you use them. You can withdraw it at any time by deleting your account, which deletes the data. The days of your periods, if your profile is set to female, are kept only with a consent of their own, which you give by turning on cycle awareness in Settings and withdraw by turning it off, which deletes them.

The person who runs Vytal can see, for each account, the name, email address, when it was last used and how much it is used (counts of entries, workouts and AI requests), to run and support the service. They never see your log, your readings or your tokens that way.

Under the GDPR we keep your account and log to provide the app you signed up for (Article 6(1)(b)); we process your health data, and count visits where we ask first, with your consent (Articles 9(2)(a) and 6(1)(a)); and we keep request logs, run the bot check, limit requests, make backups and look at usage in our legitimate interest in keeping the service secure and working (Article 6(1)(f)).

Vytal is not for children under 13. If you're under 16, or under the age at which you can consent to data processing where you live, you need a parent's or guardian's permission.

Vytal uses AI only when you ask it to. Requests go through OpenRouter to models from Google and OpenAI, with data collection for their own purposes refused; we never use your data to train models, and we store no photo, prompt or reply. We keep only which feature was used, when, and what it cost. Each feature sends only what it needs:

• Scanning a nutrition label, a meal or a lab report: the photo, with your camera's metadata (including where it was taken) removed on your device first. A lab report's results are only read for you to check; nothing is saved until you do. A scanned meal's nutrition comes from Vytal's own food database; only a food it doesn't have is estimated by the AI and marked as an estimate. Visitors can scan a meal on the public nutrition page without an account; that photo is handled the same way.
• Explain what happened (a day over target): that day's entries with their amounts and meal names, and the day's totals and targets.
• Write a recap (Progress): the range's daily nutrition totals and targets, the foods you logged most, water and weight if logged, your goal and pace, training summaries with exercise and imported-activity names, steps, sleep with bedtimes, resting heart rate, HRV, breathing rate, skin temperature, blood oxygen and VO2 max summaries, your morning check-ins (how you felt and the tags, except period), and the previous recap. Workout notes and individual heart-rate samples are not sent.
• Summarize this workout: its sets with weights, reps and RPE, your note on it, the sets from the last time you did each exercise and, if you wore a watch, its heart rate: each set's peak and recovery, the session's average and highest, the energy and the minutes in each zone.

Connecting an assistant: you can give an AI assistant such as Claude a private address that lets it read your account: training, records and routines, workout heart rate and energy, steps, sleep and sleep stages, resting heart rate, HRV, breathing rate, skin temperature, blood oxygen, VO2 max, your bedroom readings if you have a sensor, your morning check-ins, weigh-ins and measurements with the maintenance calories worked out from them, blood test results, targets, goal and meals. Nothing leaves until you create that address and paste it into the assistant; what it reads then goes to whoever runs the assistant, under their privacy policy. It can only read, never change or delete, and you can turn it off under Devices & connections.

Your name, email address, age, sex and height are never sent to any AI feature.

• Storage and backups: your data is in Vytal's own database on a server we rent from a hosting company, backed up continuously to Cloudflare's R2 storage, encrypted at rest, where backups are kept for 30 days. Copies made on the server before each update are kept for up to 30 days too.
• Delivering the site: connections pass through Cloudflare, which protects and delivers it and tells us which country a visitor is in, so we know whether to ask about cookies. Our server keeps standard request logs with IP addresses for security and troubleshooting.
• Bot check: Cloudflare Turnstile checks in your browser that you're a person when you create an account, ask for a password reset or a new verification link, write to us, or scan a meal on the public nutrition page. It runs nowhere else.
• Analytics: Google Analytics counts visits to the public site: which pages are opened, roughly from where, on what kind of device, how fast they loaded, and which buttons were used. In the EEA and the UK it runs only if you allow it; elsewhere until you turn it off in the cookie policy. The app itself sends it nothing, and nothing that identifies your account is sent.
• Email: verification links, sign-in codes and password or email-change emails are sent through Resend (which delivers through Amazon SES), as are messages you send us through the contact form or Help: your name, email address and message go to our inbox so we can reply, and aren't stored in the app. We send no marketing email.
• Error reports: when something breaks, a report goes to Sentry (EU servers) so we can fix it: the error, where in our code it happened, the page's address without anything after a “?”, your browser or phone model and the last few steps before it. Your name, email address, IP address and anything you've logged are stripped before a report leaves your device or our server. Reports are kept for 30 days.
• Outside the EU: Google, Amazon, OpenRouter and its model providers, Cloudflare and, if you connect a bedroom sensor, SwitchBot may process data in the United States and elsewhere. Where the GDPR applies, those transfers rest on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

The Vytal apps for iPhone, Android, Apple Watch and Wear OS use the same account and keep part of it on the device so they work offline:

• On your phone: an offline copy of your log and training, and changes made offline until they're sent, in the app's private storage, excluded from device backups. Your sign-in is kept in the phone's secure key storage. The camera is used only to scan a label, a meal or a lab report; physical activity only to count steps once you turn that on; Apple Health or Health Connect only for what is described below, once you connect them; Bluetooth only for a heart rate monitor you choose. Notifications are used for the rest timer and the running workout, for weekly and monthly review reminders and alerts when Apple Health or Health Connect stops syncing (both on unless you turn them off), for an optional 8 p.m. reminder on days without a food log, and to tell you a watch has paired; the phone schedules them itself. Home-screen widgets, if you add them, show a summary of your day, weight, training or recovery to anyone holding the phone.
• Pairing a watch: we keep, for each watch, its name, model, app version, a random installation ID and when it was last used, and a sign-in of its own stored only as a hash. Signing out on the watch ends it on our side too, as soon as the watch is online. A log of the changes each device sent to a workout is kept for 400 days, so devices that were offline can catch up.
• Heart rate and energy: while you record a workout on the watch (or wear a Bluetooth heart rate monitor), it keeps one heart rate reading every five seconds and the energy total, and sends them with the workout, where they're stored as part of it. During the workout it also sends its current reading every 15 seconds so your phone and the web can show it live; only the latest is kept, in memory, for about a minute. The phone and watch talk over the connection the phone keeps with its watch and each also talks to our server. Nothing is measured outside a workout you started, apart from your steps.
• Steps: if you turn on step counting, the phone reads your step count from the phone itself (Google's Recording API on Android, Motion & Fitness on iPhone) and the Wear OS watch counts them through Health Services. If you also connect Apple Health or Health Connect, the phone reads the steps other apps and watches saved there, so a walk counted twice is counted once. Each device sends a daily total and, from Android and Wear OS, the steps in each hour; never places or routes. The phone sends them while the app is closed too (Android every 15 minutes, iPhone when Apple Health reports new steps), using a separate key that can only upload steps, kept with an ID for that installation and revoked when you sign out. Steps from Apple Health or Health Connect are used only to show your steps in Vytal, never for advertising, and are not sold or shared. The distance beside them is estimated from your height. Turning step counting off under Preferences stops the sending; turning Apple Health or Health Connect off under Devices & connections stops the reading.
• Weight from a smart scale: once you connect Apple Health or Health Connect, the phone reads the weight, body fat and lean mass your scale's app saved there, the first reading of each day, while the app is open, and sends them to your account like a weigh-in you typed. A day you entered yourself is never overwritten, and an imported entry you delete stays deleted. These readings are used only to show your weight and body composition in Vytal, never for advertising, and are not sold or shared. You can take the access back under Devices & connections, in the Health app on iPhone or in Health Connect on Android.
• Sleep, heart rate and workouts from other devices: once you connect Apple Health or Health Connect, the phone also reads what a band, watch or other app saved there: each day's resting heart rate and HRV, your heart rate while you slept (sent as five-minute averages, never the single readings), how long you slept, when it began and ended, your time in each sleep stage, your breathing rate, skin temperature and blood oxygen that night, any VO2 max estimate, and the workouts it recorded (kind, start, end, distance, calories, heart rate during the workout and the app that recorded it; never a route or your heart rate outside a workout or a night). Workouts Vytal saved there itself are left out. They are read while the app is open and, for the last nights, about every quarter hour in the background, and sent to your account, where they appear on Train and Progress and the workouts join your training history. An imported workout you delete stays deleted. This data is used only to show your recovery and training in Vytal, never for advertising, and is not sold or shared. You can take the access back under Devices & connections, in the Health app or in Health Connect.
• Workouts and meals saved to Health: once connected, the phone also saves to Apple Health or Health Connect your finished workouts from the last two weeks (kind, start, end, calories and, for cardio, distance) and what you ate each day, one entry per meal with its calories and nutrients, so they count in other health apps. A change or deletion in Vytal is copied there. Once saved, it is kept under Apple's or Google's terms and other apps you allow can read it; turning the connection off stops anything more being saved.
• On your watch: the running workout, changes waiting to be sent, a heart rate recording until it has been sent, and the exercise guides you've opened. Its sign-in is encrypted with a key kept in the watch's secure hardware. None of it is included in device backups, and signing out removes your workout data from the watch.
• Permissions: the watch asks for heart rate and physical activity (on Apple Watch through Apple Health) to measure workouts, on Wear OS also to count steps, and for notifications to show the running workout; on Wear OS also for exact alarms, so a rest buzzes on time. You can decline any of them; the workout still works without what that permission provides. On iPhone, the heart rate recording of a workout in progress and the widget's summary are kept in the app's ordinary storage, which your iCloud or computer backup may include.

Vytal uses cookies only to keep you signed in, remember your language and your cookie choice, and count visits to the public site, which you can refuse. None follow you to other sites. Your browser also keeps a few things on this device, such as the offline copy of your log, which signing out removes. Every cookie and everything kept on the device is listed, with how long it stays, in the cookie policy.

Under Profile → Account & data you can download all of your data as JSON (including workouts' heart rate, steps, sleep and recovery, and bedroom readings), your food log as CSV, and permanently delete your account. Deletion removes your account and everything attached to it: profile, log, foods, recipes, workouts and their heart rate, steps, recovery and bedroom readings, the SwitchBot token, settings, saved AI answers, shared links, sign-in sessions, paired watches and the connector address. Backups can hold a copy for up to 30 days after that. Two things remain: a record that an AI feature was used, with no link to you, and any bedroom readings you had shared, which stay with the person you shared them with.

How long things stay: your data, until you delete it or your account; a sign-in session, 30 days after you last used it, and a watch's sign-in 90 days, each deleted once expired; a shared routine link, 7 days; an error report, 30 days; backups, 30 days; the server's request logs, two weeks.

You can also ask us to correct anything you can't change yourself, to restrict or object to part of the processing, or to tell you what we hold about you; write to us and we'll answer within a month. You can withdraw consent at any time: for analytics in the cookie policy, for the days of your periods by turning off cycle awareness, and for the rest of your health data by deleting your account. You can complain to a data protection authority, such as the one where you live. We don't sell personal information or share it for advertising, so there is nothing to opt out of.

If this policy changes, the date at the top changes with it. Questions go to .