Privacy Policy
Effective date: 22 July 2026 · Operated by VYTL Technologies
Contents
1. Who we are
VYTL ("VYTL," "we," "us," or "our") is a fitness platform operated by VYTL Technologies, based in Abu Dhabi, United Arab Emirates. This Privacy Policy explains what information we collect through the VYTL mobile application and website (vytl.ae) (together, the "Service"), how we use it, and the choices you have.
By creating an account or using the Service, you agree to the collection and use of information as described in this policy.
2. Information we collect
| Category | Examples |
|---|---|
| Account information | Name, email address, phone number, date of birth, password (stored hashed, never in plain text) |
| Profile information | Fitness goals, experience level, body stats you choose to provide, profile photo |
| Fitness & activity data | Workouts you log, sets, reps, weights, personal records, sport type, session duration |
| Health & biometric data | Heart rate, heart rate variability (HRV), sleep data, recovery scores, resting heart rate, calories burned — see Section 3 |
| Payment information | Subscription status and transaction history. Card details are processed directly by our payment processor, Tap Payments — VYTL does not receive or store full card numbers. |
| Location data | Approximate or precise location, only when you use studio/facility discovery features, and only with your permission |
| Usage & device data | App interactions, crash logs, device type, operating system version, IP address |
| Communications | Messages you send to our AI coach, support requests |
3. Health, fitness & wearable data
VYTL integrates with third-party wearable and health platforms to power recovery tracking and personalized coaching. If you choose to connect a wearable device, we receive data from that provider as described below.
| Provider | Data received | How it's used |
|---|---|---|
| WHOOP | Recovery score, sleep stages and duration, heart rate variability, resting heart rate, strain | Displayed in your recovery dashboard; used to personalize AI coaching recommendations |
| Garmin | Activity summaries, heart rate, sleep, steps | Same as above |
| Apple HealthKit (where applicable) | Workout sessions, heart rate during active sessions | Powers live features such as Battle Mode; processed on-device where possible |
Connecting a wearable is always optional and initiated by you through an explicit authorization flow (OAuth) with the provider. You can disconnect any wearable at any time from Settings within the app, which revokes VYTL's access to new data from that provider going forward.
4. How we use your information
- Provide core features: workout logging, recovery scoring, XP and streak tracking, leaderboards, and battles
- Power the AI coach: your workout history, recovery data, and messages are sent to our AI provider (Anthropic) to generate personalized coaching responses — see Section 5
- Generate AI nutrition plans based on your stated goals and macro targets
- Process payments and manage your subscription
- Enable studio and class booking, including sharing your booking details with the relevant partner facility
- Send service-related communications (booking confirmations, streak reminders) and, with your consent, marketing communications
- Maintain the security and integrity of the Service, including detecting fraudulent activity (for example, implausible workout or battle data)
- Comply with legal obligations
5. Who we share data with
We do not sell your personal data. We share data only with the following categories of recipients, each under contractual obligations to protect it:
- Service providers — Supabase (database and infrastructure hosting), Anthropic (AI coach and nutrition plan generation), Tap Payments (payment processing)
- Wearable providers — WHOOP and Garmin, solely to establish the connection you initiate; we do not send your VYTL data back to these providers
- Partner studios and facilities — limited booking details (your name and booking time) when you book a class through VYTL
- Legal and safety — where required by law, or to protect the rights, property, or safety of VYTL, our users, or the public
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection under this policy or a comparable one
6. Data retention
We retain your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain certain records for legal, tax, or fraud-prevention purposes.
7. Your rights & choices
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for optional processing, such as marketing communications or a specific wearable connection, at any time
You can exercise most of these rights directly within the app under Settings → Account. For anything else, contact us using the details in Section 12. These rights are provided consistent with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where applicable to you, other regional privacy laws.
8. Security
We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted storage of sensitive fields, row-level access controls on our database, and hashed password storage. No system is completely secure, and we encourage you to use a strong, unique password for your VYTL account.
9. International data transfers
Some of our service providers (including Anthropic and Supabase's underlying infrastructure) may process data outside the UAE. Where this occurs, we rely on contractual safeguards with those providers to ensure your data continues to receive an appropriate level of protection.
10. Children's privacy
VYTL is not directed at, and is not intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Effective date" at the top of this page reflects the most recent revision.
12. Contact us
Questions about this Privacy Policy or your data can be sent to:
VYTL Technologies
Abu Dhabi, United Arab Emirates
Email: privacy@vytl.ae