Privacy Policy

Your health data privacy is our top priority

Last updated: September 11, 2025

Overview

At vytalLink, we believe your health data belongs to you. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and services.

Key principle: Your health data stays on your device. We create a local MCP (Model Context Protocol) server that allows AI tools to query your data directly from your device, ensuring maximum privacy and control.

Information We Collect

Health Data

  • Device Storage: All health data (steps, heart rate, sleep, workouts) is stored locally on your device
  • Temporary Access: We only access your health data when you make a specific request through an AI assistant
  • No Storage: We do not store your health data on our servers
  • No Personal Data: vytalLink does not collect personally identifiable data (name, email, etc.).

Authentication Data

  • Local MCP server connection codes for AI integration
  • Session tokens for device-to-AI communication (stored temporarily)
  • App usage analytics (anonymized)

Technical Data

  • Device type and operating system version
  • App version and crash reports
  • Network connectivity information

How We Use Your Information

  • Local MCP Server: Create a secure local server that AI tools can query for your health data
  • AI Integration: Enable secure communication between your device and AI assistants
  • Data Control: Give you complete control over what data is shared and when
  • Service Improvement: Analyze usage patterns to improve app functionality
  • Support: Provide customer support and troubleshoot issues

Data Sharing and Third Parties

AI Services

When you connect AI tools to vytalLink, they query your health data directly from the local MCP server running on your device. No data is transmitted to vytalLink servers - all communication is between your device and the AI service you choose.

Third-Party Services

  • Analytics: Anonymized usage data may be shared with analytics services
  • Crash Reporting: Technical crash data to improve app stability
  • No Health Data: We never share your health data with third parties for marketing or commercial purposes
  • Firebase Analytics and Crashlytics: We use Firebase Analytics and Crashlytics to obtain anonymous usage metrics and crash reports. These services may process data globally, but never include personally identifiable information or health data.

Security Measures

  • Local Processing: All health data processing happens on your device
  • No Cloud Storage: Health data never leaves your device or gets stored on our servers
  • Secure MCP Protocol: Industry-standard MCP (Model Context Protocol) for AI communication
  • Device-level Security: Relies on your device's built-in security (iOS/Android)
  • Encrypted Connections: All AI communications are encrypted in transit
  • No Persistent Sessions: Connection data is cleared after each session

Your Rights and Control

  • Data Access: View all data stored by the app
  • Data Deletion: Delete your account and all associated data
  • Selective Sharing: Choose exactly what health data to share
  • Revoke Access: Disconnect AI services at any time
  • Export Data: Download your data in a portable format
  • Total Deletion: Since vytalLink does not store data on its own servers, simply uninstalling the app removes all information.

Data Retention

  • Health Data: Never stored on our servers
  • Session Data: Cleared immediately after AI requests
  • Authentication Tokens: Expired and deleted after 24 hours
  • Analytics Data: Anonymized data retained for 12 months

Children's Privacy

vytalLink is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

International Users

vytalLink is designed to comply with international privacy laws including GDPR, CCPA, and HIPAA principles. Users in the European Union have additional rights under GDPR.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us: