Privacy Policy

1. Data controller

Controller: Globuy Limited LTD, Unit 3D North Point House, North Point Business Park, New Mallow Road Cork, Co. Cork, T23 AT2P, Ireland. Company registration number: 802624; commercial register: Ireland.

Contact: hello@vitariolife.com · Privacy: hello@vitariolife.com

2. Data we process

• Account data: email address, hashed password, sign-up date.
• Profile and health-related data: age, sex, height, weight, goal weight, goals, sleep and daily rhythm.
• Diet preferences: vegetarian/vegan/other diets, allergies, disliked foods.
• Training preferences: training type, weekly frequency, session length, available equipment.
• Usage data: generated daily plans, completed tasks, weekly check-ins, progress data.
• chat and support message content.
• Uploaded images (optional avatar/body photo) and the visualisations generated from them.
• Subscription data: plan, trial period, billing status (card data is handled solely by the payment provider).
• Technical data: IP address, device and browser information, log records.
• Device identifiers: an identifier derived from your device characteristics and, in the Android app, the Google Play install referrer. We use these to prevent free-trial abuse, to carry over an invite code and to manage subscriptions; they are shared with our payment provider and kept for the lifetime of your account.

3. Purposes and legal bases

• Providing the service, running your account, generating a personalised routine, diet and training plan — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Processing health-related data (weight, goals, complaints) — legal basis: your explicit consent (Art. 9(2)(a) GDPR), which you may withdraw at any time.
• Billing and statutory obligations — legal basis: legal obligation (Art. 6(1)(c)).
• Service improvement, debugging, abuse prevention — legal basis: legitimate interest (Art. 6(1)(f)).
• Newsletters and marketing — legal basis: consent (Art. 6(1)(a)).

4. Processors and recipients

We rely on trusted partners who process data only on our instructions and under contractual safeguards:

• Database and authentication provider: Supabase Inc.; headquarters: 970 Toa Payoh North, #07-04, Singapore 318992; EU data processing location: Frankfurt, Germany; website: https://supabase.com.
• Vitario provider: text you submit is processed to generate plans and chat replies. Vitario provider does not use your data for model training.
• Payment provider on the web (Stripe) for subscriptions and billing. Card details are handled only by them; we never store them.
• In the Android app purchases run through Google Play billing (Google Ireland Ltd.), and subscription state is managed with RevenueCat, Inc. We only receive the purchase identifier and subscription status, never payment details.
• Email provider for transactional messages.

5. International transfers

Data is primarily stored within the EU/EEA. Where a provider also operates in a third country, transfers rely on an EU adequacy decision or Standard Contractual Clauses (SCCs).

6. Retention

• Account and profile data: until account deletion, then up to 30 days in backups.
• Billing data: 8 years as required by accounting law.
• chat history: until account deletion or until you delete it.
• Uploaded images: until you delete them or your account ends.
• Log data: up to 12 months.

7. Security

We use encrypted connections (HTTPS), row-level access control and password hashing. Staff access is limited to what their role requires.

8. Automated processing and Vitario

Daily plans, diets and training plans are produced by an automated Vitario system based on the data you provide. This has no legal effect on you; you can override any suggestion and request human review via our contact email.

9. Children

The service is not available to persons under 16. If we learn that we hold data of a child under 16, we delete it without delay.

10. Your rights

You can exercise your GDPR rights at any time (see the GDPR page for details). You may lodge a complaint with the supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu.