Loading
Last updated: 23 August 2026
This policy explains what Vylo collects, why, who else sees it, and what you can do about it.
Vylo is run by Amgad Mohamed, an individual trading as Vylo, based in Dubai, United Arab Emirates. For anything in this policy, contact hello@vylo.health.
| Do you sell my data? | No. Never, to anyone. |
| Do you show me ads? | No. There is no advertising or tracking for advertising in Vylo. |
| Are my food photos kept? | No. They are analysed and discarded within the same request. They are never written to disk. |
| Do you know where I am? | No. Vylo does not collect location and contains no location software. |
| Can I get my data out? | Yes — Personal → Account → Download my data, at any time, free or paid. |
| Can I delete everything? | Yes — Personal → Account → Delete account. It is immediate and permanent. |
| Where is it stored? | Australia (Sydney), with crash and usage records in the United States. |
About you: first name, last name, email address, date of birth, and sex. Sex and date of birth are collected because the formula that estimates your energy needs requires them; date of birth also enforces our minimum age.
Your body and goals: height, current weight, target weight, activity level, whether you are losing, maintaining or gaining, your weekly pace, your macro split, and any nutrient targets or ceilings you set yourself.
What you log: every food and meal you record with its weight and portion, your daily archives, custom foods you create, meals you save, favourites, portions Vylo remembers for you, how often you log each food, your weight history, and your streak and achievement records.
Answers you give during setup: whether you have tracked before, what stopped you, what you find hard, and how you heard about Vylo. These are stored against your email address.
Anything you send us through Feedback, along with your email address so we can reply.
Crash reports. If Vylo crashes, a report is sent to Sentry so the fault can be fixed. It contains the technical stack trace, your device model, iOS version and app version. It is configured not to attach your identity: the user record and network headers are stripped before sending, and the trail of actions Sentry normally records is switched off.
Product events. A fixed list of fourteen named events — such as finishing setup, logging a weight, or a scan being logged — is sent to PostHog so we can see which parts of the app get used. No food names, no weights, no figures and no text you typed are ever included. Automatic tap-and-screen recording, session replay, and location lookup from your IP address are all switched off.
AI usage records. Each AI request records which kind it was, what it cost us, and when. No content is stored in these records — not the photo, not the result, not the text.
Written insights, briefly. There is one exception, and we would rather explain it than bury it. When Vylo writes you an insight, the text is kept on our server for up to 48 hours so that it can reach your phone. Without this, an insight generated while your connection dropped would be lost — and because each day's insights are limited, you would get nothing for the rest of that day. It is deleted automatically after 48 hours, it is only ever readable by you, and it contains the same short paragraph you see in the app. Your food names are not in it — they are removed before the insight is written.
Your IP address is not collected by Vylo, but our hosting provider records it in its server logs, as almost all internet services do.
Stated plainly, because these are the things people assume an app like this takes:
These three deserve their own section, because they are the most sensitive things Vylo touches.
When you scan a meal, the photo is sent to our server, which passes it to an AI provider that identifies the food and estimates portion sizes.
The photo is never stored. It is not written to disk, not uploaded to any file storage, and not retained after the request finishes. There is no photo storage in Vylo for it to go into. No person at Vylo can see your photos — there is no mechanism through which they could.
What *is* kept is the result, and only if you choose to log it — at which point it is a food entry like any other, not a photo record.
If you use the microphone to search for a food, iOS converts your speech to text using Apple's speech recognition. This may involve sending the audio to Apple's servers, which is how Apple's speech recognition works by default; it is handled by Apple under Apple's privacy policy, not by us. Vylo receives only the resulting text, and does not store the audio.
If you prefer not to use it, simply type instead. The microphone is only active while you hold or tap it and closes as soon as you start typing.
Apple Health is off unless you turn it on.
Vylo writes your weight and nutrition data into Apple Health. Turning it off stops further writing.
Vylo reads exactly one thing, and only when you ask it to: your latest weight, when you tap Import on the weight screen. It reads no other type of health data, it never reads anything in the background or when the app opens, and it never imports past readings. The figure appears on screen for you to check, and is only saved when you press Save yourself. If you never tap Import, Vylo reads nothing from Apple Health at all.
| What | Why |
|---|---|
| Name, email, sign-in details | To create and secure your account, and to contact you about it |
| Date of birth, sex, height, weight, activity | To calculate your calorie, macro and micronutrient targets |
| Food and weight history | This is the product — it is what the app exists to show you |
| Setup answers | To understand who Vylo is for and improve it |
| Support messages | To answer you |
| Crash reports and product events | To fix faults and see which features are used |
| AI usage records | To meter your allowance and control our costs |
We rely on the agreement between us (our Terms) to provide the service you asked for, and on our legitimate interest in keeping Vylo working and financially sustainable for crash reports, product events and usage metering.
For health-related data we rely on your explicit consent. Your weight, body measurements, date of birth, sex and food logs are treated as health data in many countries, which requires a stronger basis than the rest. You give that consent by entering the information, and Vylo cannot calculate targets without it. You can withdraw it at any time by deleting your account, which removes the data. Withdrawing does not undo processing that already happened.
Apple Health and the microphone are separately consent-based: both are off until you turn them on, and both can be turned off again in the app or in iOS Settings.
This is the complete list. There are no others.
| Who | What they receive | Why |
|---|---|---|
| Supabase | Everything in section 1 that is stored on our servers | Our database, sign-in and hosting |
| Google (Gemini) | Your food photo, any hint you type, your answers to its questions | Identifying food in photos, writing insights |
| OpenAI | The same, on smart scans only | The more detailed identification pass |
| Apple | Sign in with Apple identity, all payment handling, and speech audio if you use voice | Sign-in, subscriptions, voice search |
| Google (sign-in) | Your Google identity, if you sign in that way | Sign-in |
| Open Food Facts | A barcode you scan, and nothing else | Looking up packaged products |
| Sentry | Crash reports, without your identity | Fixing faults |
| PostHog | The fourteen named product events | Seeing which features are used |
The AI providers never receive your name, email, weight, targets or logging history. They receive the image and what you typed about it, nothing more. For written insights — your morning reflection and weekly report — your food names are removed before the request is sent; only totals and targets go.
Meal recommendations are not AI and send nothing anywhere. They are calculated on your phone from a fixed list.
We do not sell your data, we do not share it with advertisers, and we do not send marketing email. We may disclose data if the law requires it.
Your account, your logs and your backup are stored in Australia (Sydney). Our hosting provider's database is in the `ap-southeast-2` region. If you are outside Australia, your data is transferred there and processed there.
Crash reports and product events are processed in the United States, by Sentry and PostHog respectively.
AI processing happens on Google's and OpenAI's infrastructure, in the regions they operate.
If you are in the UK, the European Economic Area or another country with data transfer rules, your data is transferred outside it — principally to Australia, which is not covered by a UK or EU adequacy decision. Where that is the case we rely on Standard Contractual Clauses with our providers, the standard legal mechanism for such transfers, and on the security measures described in section 10. You can ask us for details of the safeguards that apply to you.
Do the AI providers train on your photos? No. Vylo uses the paid tiers of both providers. Google's Gemini API terms state that for paid services, Google "doesn't use your prompts... or responses to improve our products". OpenAI states that data sent to its API "is not used to train or improve OpenAI models" unless a customer opts in, which we have not.
Both retain data for a short period to detect abuse of their own services — OpenAI for 30 days, Google for an unspecified limited period — after which it is deleted. That is retention for abuse detection, not training.
For as long as your account exists, plus the time it takes to remove it.
Deleting your account immediately and permanently removes: your account itself, your profile and targets, your cloud backup, your usage records, your subscription and referral records, your setup answers, your support messages, and any food submissions still awaiting review. The data on your phone is wiped at the same time.
Two things do not disappear, and we would rather tell you now than have you discover it:
Most of these are buttons, not requests. You do not need our permission or our involvement.
Depending on where you live, you have some or all of the following. You do not have to say which one you are exercising, or explain why — just ask.
For anything the buttons cannot do, email hello@vylo.health. We will respond within 30 days, free of charge. We may ask you to confirm your identity first, so that nobody else can use these rights against your account.
If you think we have got something wrong, please tell us and we will try to put it right. You also have the right to complain to your national data protection authority — in the UK the Information Commissioner's Office, and in the EEA the authority for the country you live in.
Vylo is not for under-13s. The app refuses to continue if the date of birth you enter is below that age.
If you are between 13 and 18, please use Vylo with a parent or guardian involved. If you believe a child under 13 has an account, email hello@vylo.health and we will remove it.
Your data is protected by database access rules that prevent one account from reading another's, and by sign-in handled by our hosting provider rather than by us storing passwords ourselves. We never see or store your password.
It is encrypted in transit and at rest. Everything between your phone and our server travels over an encrypted connection, and the database and its backups are stored encrypted on disk.
It is not encrypted with a key unique to you, and we want to be straight about what that means. Vylo has to read your logs to do its job: work out your totals, run your targets and streaks, answer a search. A per-account key would make your data unreadable to us, and unreadable to Vylo as well. So deleting your account does not scramble your data, it removes it, which is the stronger of the two: the rows are deleted outright rather than left in place and made unopenable.
AI cost limits and rate limits are enforced on our server, where they cannot be tampered with from a phone.
No service can promise perfect security, and we do not. If a breach affects your data, we will tell you.
If we change this policy materially, we will tell you through an in-app notice or by email before it takes effect, and update the date at the top.
hello@vylo.health
Amgad Mohamed, trading as Vylo Dubai, United Arab Emirates