Hey Vivy Privacy Policy

Effective date: March 7, 2026

Last updated: March 7, 2026

Hey Vivy ("Hey Vivy," "we," "our," or "us") is a health and longevity tracking application operated by Prateek Duggal (sole proprietor). This Privacy Policy explains what information we collect, how we use and protect it, and the choices available to you.

1. Information We Collect

Account Information

• Name and email address when you sign in with Google or Apple.

Health and Wellness Data You Provide

• Protocols, dosages, measurements, biomarkers, DEXA scan entries, blood work entries, check-ins, goals, and related notes.

Usage and Diagnostics Data

• App interaction events and feature usage analytics.
• Crash and performance diagnostics through Firebase Crashlytics.

AI Chat Data

• Conversation content you submit in AI chat features, processed via Google Vertex AI to provide responses.

2. How We Use Information

We use your data to:

• Provide and maintain your Hey Vivy account and core features.
• Store and display your health tracking history to you.
• Generate AI-assisted insights and chat responses.
• Improve reliability, safety, and product performance.
• Respond to support requests and account-related inquiries.

We do not sell your personal data. We do not share your data with advertisers, and we do not use your health data for marketing.

3. Storage, Security, and Infrastructure

Data is stored using Firebase and Firestore on Google Cloud. Information is encrypted in transit and at rest using industry-standard protections.

4. Third-Party Services We Use

• Firebase Authentication
• Firebase Firestore
• Firebase Cloud Functions
• Firebase Crashlytics
• Firebase Analytics
• Google Vertex AI
• Apple HealthKit (optional, read-only integration)

5. Apple HealthKit Data

If you choose to connect Apple HealthKit, integration is read-only and permission-based. HealthKit data remains on your device and/or in your private Firestore collection associated with your account. We do not share HealthKit data with third parties.

6. Data Retention

We retain account and health data until you delete your account. AI chat logs may be cached for up to 7 days for performance and reliability purposes, after which cached copies are deleted.

7. Your Rights and Controls

• Access: You may request a copy of your personal data.
• Export: You can use the "Download My Data" feature.
• Deletion: You can delete your account and associated data.
• Correction: You can update profile and tracking data in-app.

To exercise these rights, contact prateek@heyvivy.com.

8. GDPR (EEA/UK) Rights

If you are located in the European Economic Area or the UK, you may have rights to access, correct, erase, restrict, or object to certain processing of your data, and to request data portability. You may also lodge a complaint with your local supervisory authority.

9. CCPA/CPRA (California) Rights

California residents may have rights to know, access, delete, and correct personal information, and to limit certain uses of sensitive personal information as defined by law. Hey Vivy does not sell or share personal information for cross-context behavioral advertising.

10. Children’s Privacy

Hey Vivy is not intended for individuals under 18 years old, and we do not knowingly collect personal information from children under 18.

11. International Data Transfers

Depending on your location, your information may be processed in countries other than your own, including the United States, where data protection laws may differ.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, when appropriate, provide additional notice in the app or website.

13. Contact

Questions or requests about privacy can be sent to prateek@heyvivy.com.