Privacy Policy — Vytal AI
Last updated: May 28, 2026
Publisher: Vytal AI
Contact: support@gmail.com
Website: https://vytalai.app
1. Data Collected
- Account: email address, user ID (Apple login, Google login, or Magic Link).
- Profile: gender, date of birth, height, weight, goals, and onboarding answers.
- Wellness Data: information related to your scans and metrics (energy, recovery, etc.).
- Subscription: purchase status via Apple (we do not store your card number).
- Technical: device type, error logs for stability.
- Facial photographs: selfies you submit for scan analysis (voluntary).**
2. Use
Personalize the app, provide features, manage subscriptions, provide customer support, and improve the service.
3. Legal Basis (GDPR)
Performance of a contract, consent (sensitive data/well-being), legitimate interest (security, improvement).
4. Subcontractors
- Supabase (database hosting and authentication)
- Apple/Google (login)
- RevenueCat (subscription management)
- Website Host (GoDaddy)
- OpenAI (facial photo analysis — data processed only to generate scan results)
OpenAI and our other processors are bound by data processing agreements and, where applicable, standard contractual clauses for transfers outside the EU.
5. Data Retention
As long as the account is active, then deleted within 30 days of a deletion request.
6. Your Rights
Access, rectification, erasure, objection, data portability: support@vytalai.app
7. Account Deletion
From the app (Settings) or by email to support@vytalai.app
8. Transfers Outside the EU
Data may be processed outside the EU with appropriate safeguards (standard contractual clauses).
9. Minors
The app is not intended for users under the age of 18.
10. Changes
We may update this policy; the date at the top of the page will be changed.
11. Health Disclaimer
Vytal AI is not a substitute for professional medical advice.
Face Data Information
At Vytal AI, we take the privacy and security of your personal information seriously.
What photos do we collect?
Vytal AI only collects facial photos that you voluntarily submit for analysis.
Why do we use these photos?
Your photos are used to:
Are my photos shared?
Your photos may be processed by OpenAI in order to generate analysis results.
We do not sell your photos or personal information to third parties.
Where are my photos stored?
Photos and analysis data are securely stored in our infrastructure powered by Supabase.
How long are photos kept?
Photos are retained until you delete your account.
Can I delete my data?
Yes.
You may delete your account at any time from within the application.
Deleting your account removes your associated data and facial photos from our systems.
Facial Recognition
Vytal AI does not use facial recognition for identity verification purposes.
The application does not attempt to identify who you are.
Photos are analyzed only to generate personalized results and insights.
Facial photographs voluntarily submitted by users may be processed to generate personalized analysis results. Facial photographs may be processed by OpenAI for analysis purposes and stored securely in Supabase to provide scan history and progress tracking. Facial data is retained until the user deletes their account. Facial data is not sold to third parties
We do not sell facial data or other personal information to third parties. Facial data is not used for identity verification, biometric identification, or facial recognition databases.
We retain your personal data, including facial data, for as long as your account is active. When you delete your account, associated data is deleted or anonymized within a reasonable period.
Contact
For privacy questions: