Consumer Health Data Privacy Policy

Last updated: July 2026

This policy explains how Vaiya Labs handles the limited health-related information you can choose to give us. It supplements our main Privacy Policy. If anything here conflicts with the main policy for this specific data, this policy controls.

What consumer health data we collect

Only what you choose to enter so the app can personalize your routine and flag conflicts for you:

• Allergens and sensitivities you tell us to avoid (topical and food-derived).
• Medications you tell us you take, so we can flag interactions or sun-sensitivity.
• Any skin-reaction notes you log (how a product made your skin feel).

You are never required to provide any of this. If you don't, the app still works — you simply won't get the personalized allergen/medication safety checks.

How we use it

Solely to provide the features you asked for: building your routine, checking products against what you told us to avoid, and — only if you separately consent — giving Sophie (our AI assistant) the context to answer allergy-aware questions. We do not sell this data, and we do not use it for advertising, marketing, or any profiling unrelated to providing the service.

Your consent

Before we store any of this health data, we ask for your explicit, opt-in consent on a dedicated screen — separate from accepting our Terms. Sharing this data with our AI assistant is a second, separate opt-in that you can decline while still using everything else. We keep a record of your consent so we can honor it.

Who we share it with, and why

We share this data only with the vendors that operate the app on our behalf, under a Data Processing Agreement, and only to provide the features you asked for. Two of them can touch this specific health data:

• Supabase — our hosting/database provider, which stores your account data on our behalf.
• Anthropic (the Claude AI behind Sophie) — only if you opt in to AI sharing, and only the allergens/medications needed to answer your question. If you don't opt in, none of this is sent to the AI.

The complete, dated list of every vendor that processes your data — and what each handles — is maintained in one place: our Sub-processors register. We do not sell this data or share it for advertising.

How to withdraw and delete it

You can withdraw your consent at any time and delete this data from within the app: You → Withdraw health-data consent. That removes your stored allergens, medications, and skin-reaction notes and turns off the personalized safety checks, while leaving the rest of your account intact. Deleting your entire account (You → Delete my account) also removes it.

How long we keep it

We keep this data for as long as your account is active and your consent stands. When you withdraw consent or delete your account, we delete it. We retain the record that consent was given or withdrawn (not the health data itself) where we may need it to show we honored your choices.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of this data, and to withdraw consent. You can exercise the core of these yourself in the app (view/edit your profile; withdraw and delete). For any other request, contact us below and we will respond as required by applicable law. We do not sell your consumer health data, and we do not share it for cross-context behavioral advertising.

Contact

For questions or requests about your health data, contact: hello@vaiyalabs.com

Vaiya is a skincare education and routine tool, not a medical service, and this data is used only to personalize your experience. This policy may be updated from time to time; when the update materially changes how we handle this data, we will ask you to review your consent again.