Consumer Health Data Privacy Policy
Vimly. Last updated November 9, 2026.
Health information (consumer health data)
Calories, meals, weight, body measurements, workouts and activity can count as “consumer health data” under laws such as Washington's My Health My Data Act, Nevada's consumer health data law and similar state laws. This section is Vimly's Consumer Health Data Privacy Policy under those laws.
- What we collect: only if you sign in to turn on the optional backup, the backup of your log described in “Account and optional backup” (your body details, birth date and sex, meals and nutrition, weigh-ins, workouts and lifts, activities you log by hand, and the goals and targets worked out from them). If you allow meal estimates, the meal you send passes through our estimation service for that one request and is not kept. If you email us about your health or your log, we receive what you write. We do not receive, store or share Apple Health data: it is read on your phone only.
- Sources: you, and what Vimly works out on your phone from what you enter.
- Why: to back up and restore your log, to run the features you ask for (such as meal estimates), and to answer your emails. Never for advertising.
- Who it is shared with: our processor Supabase, Inc. (stores the backup and runs our services, https://supabase.com), only to provide the service; and, with your consent in the app, OpenRouter, Inc. (routes a meal you send for an estimate, https://openrouter.ai) and Anthropic, PBC (makes the AI model, https://www.anthropic.com), or a cloud company that runs Anthropic's models for OpenRouter, only to return the estimate. We have no affiliates, we never sell consumer health data, and we do not use geofences around health care locations.
- Consent: we collect consumer health data only with your consent: agreeing to the backup in the app before you first sign in, after it tells you what the backup holds, and allowing meal estimates. You can withdraw it at any time by deleting your account (Settings > Account > Delete account) or by turning meal estimates off in Settings. Signing out stops any further collection.
- Your rights: you can ask us to confirm whether we collect, share or sell your consumer health data, to see it, to get the list of everyone we shared it with (named above) and how to contact them, to delete it, and to withdraw consent, and you can appeal our answer, as described in the next section. When you ask us to delete, we delete your data and your account straight away and tell our processors to delete it too; copies in their backups are deleted within six months. If we deny your appeal, you can complain to your state attorney general: in Washington, https://www.atg.wa.gov/file-complaint; in Connecticut, https://portal.ct.gov/ag; in Nevada, https://ag.nv.gov. You will not be treated differently for using these rights.
Requests and appeals
To make a request about your consumer health data, email support@getvimly.com. We may ask a question to confirm it is you. We answer within 45 days (or tell you if we need up to 45 more). If we decline, you can appeal by replying with “Appeal” in the subject. If you are unhappy with the result of the appeal, you can complain to your state attorney general: in Washington, https://www.atg.wa.gov/file-complaint; in Connecticut, https://portal.ct.gov/ag; in Nevada, https://ag.nv.gov. The full Privacy Policy is at https://getvimly.com/privacy.html.