Privacy Policy

1. Information We Collect

Everything under "Optional" is collected only if you enter it. The app is usable without any of it.

Voice input is turned into text by your device’s speech recognition (Apple on iOS; on Android and the web, the service your device or browser provides). The audio is never sent to or stored by us — we receive only the resulting text. Research searches go straight from your device to the U.S. National Library of Medicine (NCBI) search service, without your account information.

We also run a separate meal-analysis mini app inside the Toss app, available only in Korea. It is not linked to accounts in this app, and what it collects is described in section 13 of the Korean privacy policy.

2. Health Data

The records listed above describe your health and habits. We treat them as sensitive and handle them under the following rules.

• We use them only to display your records, calculate your health score, and generate personalized insights inside the app
• We do not use them for advertising or marketing, and we do not combine them with advertising identifiers
• We do not sell or rent them to anyone (see Section 8)
• Access is restricted by Row Level Security so that only your account can read your records — except for what you deliberately attach to a community post, which members of that group can see (Section 13). Nothing is shared automatically
• You can delete any record in the app at any time (assistant diary notes cannot yet be deleted in the app — contact us), and delete everything by deleting your account

Menstrual cycle tracking has been removed

The menstrual cycle feature was removed from the app on August 2, 2026 and is no longer offered anywhere. No cycle data is collected, transmitted, or stored on our servers. Records created before that date remain encrypted at rest and are deleted when you delete your account; you can also ask us to delete them at any time.

To be precise about what that encryption does and does not do: it is not end-to-end encryption. The key is held per account in our database, so someone with full database access could in principle combine them. It protects against storage-level exposure, not against us.

Apple Health (HealthKit) and Health Connect

Only if you turn on health integration yourself, we read the following activity data from Apple Health (iOS) or Health Connect (Android) on a read-only basis: step count, workouts, active energy, heart rate during workouts, and workout distance. On iOS, if you grant them, we also read sleep stages, cardio fitness (VO2 max) and resting heart rate.

• This data is used only to display your exercise records and calculate your health score
• We never use health app data for advertising or marketing, never sell or share it, and never combine it with advertising identifiers
• The integration is optional and you can revoke permission at any time (iOS: Settings → Privacy & Security → Health / Android: Health Connect app)
• The app never writes any data back to HealthKit or Health Connect

3. Google Account Data (Google Sign-In)

4. How We Use Your Information

• Identifying you and providing the service
• Providing personalized health analysis and insights
• Analyzing weight trends and managing your goals
• Synchronizing your data across your devices
• Managing paid subscriptions and credits
• Sending community phone notifications (comments on your posts, and posts or comments that mention you — only if you turn them on)
• Improving the shared food and nutrient information from products and ingredients you search for or scan (who submitted an entry is used only to count duplicates, and is removed when you delete your account)
• Improving the service and producing aggregate statistics

5. Data Storage and Security

• All data in transit is encrypted with TLS (HTTPS).
• Data is stored with Supabase and restricted by Row Level Security so that only your account can access your data. The one exception is what you deliberately attach to a community post, which becomes visible to members of that group (see section 13) — nothing is shared automatically.
• Authentication is by Google Sign-In, Sign in with Apple, or email sign-up. Social sign-in collects no password; email passwords are stored by our authentication provider (Supabase) as a one-way hash, so neither we nor the provider can read or recover the plain text. Authentication tokens and sessions are handled securely.

6. Data Retention

• Deleted immediately when you delete your account (except where law requires us to retain something, for the required period)
• Inactive accounts: deleted three years after you last used the app (opened it or synced a record); we email you 30 days before
• Deleted community posts: photos are deleted right away; the text, attached records, comments and notifications are kept for 30 days so reports can still be reviewed, then permanently deleted
• Food photos for meal logging: deleted automatically 90 days after you save them
• Insights newsletter email: kept until you unsubscribe (ask us and we delete it right away)
• Collaboration and sponsorship applications: deleted one year after they were submitted
• Community reports and how they were resolved (no issue, removed, or restricted): kept for one year after they are made, then deleted (if you delete your account, we remove you as the reporter right away)
• Group invite emails: deleted 90 days after they were entered, whether or not the invited person joined (immediately if an account created with that email is deleted)
• Community phone notifications: the device notification token is deleted when you turn notifications off, sign out or delete your account, and also when the notification service tells us it is no longer valid. The delivery result of each notification is deleted together with that notification
• Consent records: after you delete your account we keep only the consent type, date, policy version, country and a pseudonymized account identifier, to show that consent was given or withdrawn. No health data
• AI assistant conversations: kept for 90 days from when they are saved, then deleted automatically. You can delete them in the app at any time before that

7. We Do Not Sell Your Data

We do not sell your personal information or your health data, and we do not share it for cross-context behavioral advertising. We have never done so. If that ever changes, we will say so here before it takes effect and obtain any consent the law requires.

8. Sharing and Service Providers

We do not provide your data to third parties for their own purposes, except where required by law. We use the following service providers, who process data only on our behalf.

• Google LLC — sign-in authentication
• Plus Five Five, Inc. (Resend) — sign-up verification and password reset emails
• Apple — Sign in with Apple authentication (iOS app)
• Google LLC — website visit analytics / Google Analytics 4 (website only, not in the app)
• Microsoft Corporation — website usage analytics / Microsoft Clarity (website only, not in the app)
• Supabase Inc. — data storage and synchronization (servers in Seoul, South Korea)
• Vercel Inc. — website and API hosting, and cookie-free website visit statistics (API runs in Seoul, South Korea; delivered over a global edge network)
• Google Gemini — AI analysis of images (supplement labels, food, health check-up reports, body composition result sheets and workout screenshots) and of text you type in (quick logs of meals, sleep, exercise and more, and food searches; food photos, quick logs and food searches also carry any allergies you registered, and food searches your diet preferences too, so they can be flagged), replies from the AI assistant (which reads your conversation and the logs and health profile it needs to answer), and research summaries (not used to train Google’s models; Google keeps logs for a limited period only to detect abuse — and when the assistant looks up a restaurant on Google Maps, only the restaurant name and area are sent, and Google keeps them for 30 days)
• Apple and Google — payment processing for in-app purchases (App Store and Google Play)
• Apple Inc. — delivering community phone notifications to iOS devices / Apple Push Notification service (only if you turn them on). It receives the device notification token, the notification text (the sender’s display name and the kind of notification — never the post or comment text or the group name) and internal IDs pointing to what to open (random IDs of the notification, post, comment and group — no content or names); if the device is off, it waits for at most one hour and is then discarded; after delivery, Apple’s own policies apply
• Google LLC — delivering community phone notifications to Android devices / Firebase Cloud Messaging (only if you turn them on). It receives the same items as Apple above, with the same one-hour limit; after delivery, Google’s own policies apply

9. Where Your Data Is Stored

The records you sync — your account, health records, and photos — are stored on servers in Seoul, South Korea, operated on our behalf by Supabase Inc. Our API also runs in Seoul, hosted by Vercel Inc. (a U.S. company) and delivered over a global edge network, so your requests pass through the edge location nearest you. Sign-in is handled by Google LLC and Apple Inc., in-app payments by Apple and Google, sign-up emails by Resend (Plus Five Five, Inc.), website analytics by Google LLC, Microsoft Corporation and Vercel Inc., AI analysis by Google LLC, and community phone notifications by Apple Inc. (iOS) and Google LLC (Android) — all in the United States. Only the items a feature needs are sent to these providers, when you use that feature — for community phone notifications, each time a notification is sent. Phone notifications are optional: if you do not turn them on, or turn off Phone notifications in the community notifications, nothing is sent to Apple or Google for them, and the rest of the app, including the in-app notifications, keeps working. Wherever you use the app from, your information is transferred across these locations under appropriate safeguards.

10. Your Rights and Data Deletion

You can, at any time:

• Request access to the personal information we hold about you
• Request correction or deletion of that information
• Request that we stop processing it
• Delete your account and all associated data

How to delete: In the app, go to [Profile → Account & data → Delete account permanently] to immediately and permanently delete your account and your data, including information from your Google account. The limited records that Section 6 keeps for a set period are deleted when that period ends. You can also email contact@vivledia.com and we will process the request promptly.

11. Children's Privacy

This app is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us at the address below and we will delete it.

12. Usage and Diagnostic Data

We collect usage statistics and error diagnostics to improve the app and fix crashes.

• What we collect: which features and screens you used, app version, subscription tier, device and browser information (user agent), and error messages
• These records carry an account identifier, so they are pseudonymous, not anonymous
• Automatic error reports do not include your email address. Your email is attached only when you contact us through "Send feedback", so we can reply, together with any other contact details you add and your device information
• We do not use this data for advertising and do not share it with advertising networks

On our website (vivledia.com) — the marketing pages and the Insights blog — we use Google Analytics 4 to measure visits, Microsoft Clarity to understand how the site is used, and Vercel Web Analytics for cookie-free visit statistics.

• What Google Analytics collects: pages visited, time of visit, referring source, device and browser type, and approximate location (city level)
• What Microsoft Clarity collects: how the site is used — clicks, scrolls, and page movements, shown to us as aggregated heatmaps and session replays. Text you type into forms is masked by default and is not part of the recording
• What Vercel Web Analytics collects: time of visit, page address, referring source, approximate location (city level), and device and browser type. It uses no cookies; visitors are told apart only by a hash of the request, which is discarded after 24 hours. Because it sets no cookies, it runs regardless of the banner below
• Google Analytics and Microsoft Clarity use cookies, but neither loads until you choose "Accept" in the cookie banner — until you make a choice we treat it as a decline
• If you choose "Decline" we set no cookies at all. If you accepted earlier and then decline, we switch Google Analytics off, stop the Clarity recording, and delete the cookies already stored (_ga, _clck, _clsk)
• Your choice is saved in your browser, so it applies per browser and per device, and you can reopen it at any time with the "Cookie settings" link at the bottom of the vivledia.com marketing pages
• These website records are not joined with your app account
• Processors: Google LLC, Microsoft Corporation and Vercel Inc. (U.S. companies)

Newsletter and collaboration applications

• Insights newsletter: we store the email address you enter and the language and article you subscribed from. We use it only to tell you about new articles and keep it until you unsubscribe — email us (see Contact) and we delete it right away
• Collaboration and sponsorship applications: we store the name, email, field, social links, reach, team size and message you submit, plus our review notes. We use them only to review and reply to your application and to run the collaboration, and delete them one year after you apply

The Insights blog uses the same banner and carries over the choice you made on the marketing pages. Separately, you can also block cookies in your browser settings or install the Google Analytics Opt-out Add-on.

Neither Google Analytics nor Microsoft Clarity runs inside the app. They load only when you visit vivledia.com in a web browser, never within the iOS or Android app.

Because this data can reveal that you used a health feature, it is also disclosed in our Consumer Health Data Privacy Policy.

13. Community (Group Sharing)

The community is optional. If you do not use it, nothing in this section applies and none of your records are visible to anyone else.

Who can see what

• Groups can only be joined with an invite link or code, or through an email invite set up by the group organizer, and are not discoverable by search.
• Public channels: topic channels we run (for example, Diet) can be subscribed to and posted in without an invite. Posts and comments in a public channel are visible to anyone signed in to the app, and records and photos cannot be attached to them.
• Email invites: a group organizer (including a partner clinic) can set up an invite for someone who has not signed up yet, using their email address. We store that email address and the group it was entered for, and we do not send an invite email. If that person signs up with that email within 90 days and creates a community profile, they join the group automatically. The stored email is deleted 90 days after it was entered.
• Following: you can follow a member of a group you share, to be notified in the app’s notifications when they post. Only you and the person you follow can see that you follow them.
• Likes: a like you give a post is visible to anyone who can see that post.
• Posts, comments and attached photos in a group are visible only to members of that group. We do review reported posts, comments and their photos (see "Reporting, blocking and the rules" below).
• Other members see the handle, display name and avatar you chose. Your real name and email are never shown.
• Members of your groups can see your handle, display name and avatar. While you are subscribed to a public channel, or have a post in one that you have not deleted, anyone signed in to the app can see them too. To stop this, unsubscribe from every public channel and delete your posts in public channels.
• If you upload a profile photo, it is stored so that anyone who has its direct link can view it, including people outside the community. Remove the photo in your profile settings to stop sharing it.

Attaching your records to a post

• You choose, for each post, whether to attach a record such as your score, sleep, exercise or a meal. Nothing is shared automatically.
• An attached record is frozen into the post as it was at that moment. Editing or deleting the original record later does not change what the post shows — to stop sharing it, delete the post.
• Attached photos are kept in private storage that only group members can read (we view reported photos when reviewing a report), and are served through temporary links that expire.

Phone notifications

• We send phone notifications only if you turn them on. We ask once on this device, after your first post or comment, and you can turn them on or off at any time with Phone notifications in the community notifications.
• We only notify you about comments on your posts and posts or comments that mention you. Announcements and new posts from people you follow appear only in the app’s notifications. Likes do not send notifications.
• A notification shows only the sender’s display name. It never includes the post or comment text or the group name, so none of that appears on your lock screen. When the sender runs the group (for example, a clinic’s account in a clinic group), the notification leaves out the name too and only says something like "New comment on your post".
• When you turn notifications on, we store a device notification token, the device type and the notification language, and deliver notifications through Apple’s service on iOS and Google’s on Android (section 8). The token is deleted when you turn notifications off, sign out, or delete your account.

Deleting and leaving

• Deleting a post removes it from the group, along with the photos attached to it. Its photos are deleted right away; we keep the deleted post’s text and attached records, and its comments and notifications, for 30 days so that reports can still be reviewed, then delete them permanently from our servers.
• Leaving a group does not remove posts you already made. The same goes for unsubscribing from a public channel. Leaving stops future sharing; to remove past posts, delete them first.
• Deleting your account removes your community profile together with the posts and comments you wrote.

Reporting, blocking and the rules

• You must agree to the community rules before creating a community profile. Harassment, hate, sexual content and impersonation are prohibited without exception.
• You can report any post or comment, and block anyone you do not want to hear from. A blocked member's posts and comments stop being visible to you.
• A post reported by three different members (1% of members, in groups with more than 300 members) is hidden automatically, ahead of manual review. A post in a public channel is collapsed once ten members report it. If we review a post and find no problem, it is hidden again only when that many members report it anew.
• We review reported posts, comments and attached photos within 24 hours. We remove posts and comments that break these rules and, where necessary, restrict the author’s community access. A restriction deletes that member’s community profile along with their posts, comments and photos, and they cannot create a community profile again.
• We keep reports and how they were resolved (no issue, removed, or restricted) for one year after they are made, then delete them. A community restriction stops the member from creating a new profile; the record of that restriction is deleted when the restricted member deletes their account.

14. Contact

For any privacy question or request, contact us at contact@vivledia.com.

15. Changes to This Policy

If we change this policy we will give notice in the app or by email before the change takes effect.