Privacy Policy
Last updated: July 14, 2026
VYTAL Application (iOS, Android, and Web)
This Policy describes how we process your personal data when you use the VYTAL application. Please read it together with our Terms of Use and the Account Deletion page.
1. Who is the data controller
The VYTAL application is operated by VYTAL MED HEALTH & WELLNESS CORP, a company incorporated under the laws of the State of Florida, USA (EIN 42-2398438), with its registered office at 8012 NW 68th St, Miami, FL 33166, USA ("VYTAL", "we", "us").
Privacy contact: privacidade@vytal-med.com
2. Scope and applicable law
VYTAL operates in several markets. Depending on your location, the processing of your data is governed, among others, by the General Data Protection Regulation (GDPR) in the European Economic Area, by the General Data Protection Law (LGPD, Law No. 13,709/2018) in Brazil, and by the applicable privacy legislation in the other territories where the app is made available.
The health data we process are special categories of data / sensitive personal data and benefit from enhanced protection. We process them only with your explicit consent or on another legal basis provided for by law.
3. VYTAL is not a healthcare provider
VYTAL is a technology and wellness platform. VYTAL does not provide medical services, does not issue diagnoses, and does not prescribe medication. Consultations, clinical assessments, and prescriptions are carried out by independent physicians, licensed in the applicable jurisdiction, and by the telemedicine and pharmacy partners who handle that component under their own responsibility and privacy policies. The clinical records generated in those consultations belong to those professionals and are subject to the legal obligations of confidentiality and retention applicable to them.
4. What data we collect
Account data: name, e-mail, phone number, language, password (encrypted).
Profile and goals: age/age range, weight, height, body measurements, indicated health conditions, program goals.
Program health data: medication injection logs (dates, doses, injection site), titration and tapering protocol, reported effects.
Progress: weight and measurement history, progress and meal photos that you choose to upload.
Conversations with the AI agents: messages you exchange with the app's AI assistants (see section 6).
Questionnaire (quiz): eligibility answers and contact details submitted.
Payment data: subscription status and identifiers. Card details are processed directly by the payment processors; VYTAL does not store the full card number.
Referral program: referrals sent and received and their status.
Technical and usage data: device type, operating system, app identifiers, usage logs, diagnostic/error data.
5. What we use the data for and on what basis
Providing and managing the service (account, program, tracking, reminders) — performance of the contract.
Processing health data (medication logs, progress, coaching) — your explicit consent.
Processing payments and subscriptions — performance of the contract and legal obligation.
Marketing communications — only with your consent, which you can withdraw at any time.
Security, fraud prevention, and service improvement — legitimate interest, in a proportionate manner.
Compliance with legal and regulatory obligations.
VYTAL does not use your health data for employment decisions, insurance eligibility determinations, or unauthorized social sharing.
6. Artificial Intelligence in the application
The app includes AI assistants (for example, the coaching agent and, on paid plans, nutrition, training, habits, progress, and mental wellness assistants). These assistants are powered by third-party AI models (Anthropic). To generate responses, the messages and the necessary context are processed by that provider under contractual data protection safeguards.
The AI assistants provide educational and wellness support and do not replace professional medical, nutritional, or psychological advice. The mental wellness assistant is not a psychotherapy service; in situations of risk it points to support resources and refers you to human professionals. In an emergency, contact your local emergency services.
7. Who we share data with
We share data, to the extent necessary, with processors that process data on our behalf:
Supabase — database hosting and app infrastructure.
Anthropic — AI processing for the app's assistants.
Stripe / Iugu — payment processing and subscription management.
PostHog — product usage analytics.
Sentry — error monitoring and diagnostics.
Telemedicine and pharmacy partners — clinical and delivery component; we receive the order status to display it in the app.
We do not sell your personal data. We may disclose data when required by law or to protect the rights, security, and integrity of the service.
8. International transfers
Data may be processed outside your country, including in the USA and other jurisdictions where our processors operate. When we transfer data outside the EEA or Brazil, we do so with appropriate safeguards (for example, standard contractual clauses). The database hosting location may vary depending on the market.
9. How long we retain data
We retain data only for as long as necessary for the purposes described and while your account is active. After account deletion, we delete or anonymize your data, except for data that the law requires us to retain or that is necessary for reasons of security, fraud prevention, billing, or regulatory compliance. Because this is a regulated health sector, certain records may be subject to mandatory retention periods; the clinical records from consultations are retained by the physicians/partners in accordance with applicable law. See details on the Account Deletion page.
10. Your rights
Subject to applicable law, you have the right to:
Access your data and obtain a copy (portability);
Rectify incorrect or outdated data;
Request the deletion of your data;
Object to or request the restriction of certain processing;
Withdraw consent at any time, without affecting the lawfulness of prior processing;
Lodge a complaint with the competent supervisory authority.
To exercise these rights, contact privacidade@vytal-med.com. You can also export or delete your data directly in the app. Supervisory authorities: CNPD (Portugal), ANPD (Brazil), or the authority in your country of residence.
11. Account deletion
You can delete your account and associated data from the app settings or through the Account Deletion page, where we explain what is deleted, what may need to be retained, and the applicable timeframe.
12. Security
We apply appropriate technical and organizational measures, including encryption in transit and at rest, role-based access controls, and audit logs. No system is entirely infallible, but we work to protect your data on an ongoing basis.
13. Minors
The app is intended exclusively for individuals aged 18 and over. We do not intentionally collect data from minors. If we become aware that we have collected data from a minor, we will delete it.
14. Cookies and similar technologies
On the website and in web components, cookies and similar technologies may be used for functionality, analytics, and marketing, according to your preferences.
15. Changes to this Policy
We may update this Policy. We will publish the updated version on this page and, where required, notify you. The date at the top indicates the last update.
16. Contact
VYTAL MED HEALTH & WELLNESS CORP · 8012 NW 68th St, Miami, FL 33166, USA
Privacy: privacidade@vytal-med.com · Support: suporte@vytal-med.com