Last updated: 26 April 2026 · Applies to Vytal Menopause app and vytalmenopause.com
Summary: Vytal Menopause collects the personal and health information you provide to personalise your experience. We do not sell your data to third parties. Your health data is stored securely and used only to provide and improve the service. You have the right to access, correct, or delete your data at any time.
1. Who we are
Vytal Menopause is operated by Grant Kendrick, trading as Vytal Menopause ("we", "us", "our"). Our contact email is contact@myvytals.co.uk.
We are the data controller for personal data collected through the Vytal Menopause app and website (vytalmenopause.com). This policy explains how we handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
We collect the following categories of personal data:
Account information:
- Your first name
- Email address
- Password (stored in encrypted form — we never see your password)
Health and lifestyle information you provide:
- Menopause stage (perimenopause, menopause, post-menopause, surgical menopause)
- HRT status
- Symptoms you are experiencing
- Dietary preferences and food intolerances
- Other medical conditions you choose to share
- Vitamin and supplement information
- Lifestyle information (activity level, stress, sleep)
- Age range
Usage data:
- Food log entries and meal descriptions
- Water intake logs
- Messages sent to Vytal (the AI coaching feature)
- Recipes viewed and saved
- App usage patterns
Payment information:
- Subscription status and plan
- Payment is processed by Stripe — we do not store your card details
Technical data:
- IP address
- Device type and browser
- App version
3. How we use your data
We use your data for the following purposes:
- To provide the service — your health profile and food logs are used to personalise AI responses, recipes, and guidance
- To process payments — managing your subscription via Stripe
- To improve the service — understanding how the app is used to make it better
- To communicate with you — responding to support requests and sending important service updates
- To ensure safety — monitoring for abuse or misuse of the platform
We do not use your data for advertising. We do not sell your data to third parties. We do not share your health data with any third party without your explicit consent.
4. Legal basis for processing
Under UK GDPR, we process your data on the following legal bases:
- Contract — processing necessary to provide the service you have subscribed to
- Legitimate interests — improving and securing the service
- Consent — for health data (special category data), which you provide explicitly when creating your profile. You can withdraw this consent at any time by deleting your account.
Health information (including menopause stage, symptoms, and medical conditions) is classified as special category data under UK GDPR. We process this data only because you have explicitly provided it to receive personalised health guidance.
5. How we store and protect your data
Your data is stored securely using Supabase, a cloud database provider with enterprise-grade security. All data is encrypted in transit (TLS) and at rest. Access to your data is restricted to authorised personnel only.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. However, no system is completely secure and we cannot guarantee absolute security.
Your data is stored on servers within the European Economic Area (EEA).
6. How long we keep your data
- Account data — kept for as long as your account is active
- Food logs — kept for a rolling 7-day period within the app, with summary data retained for up to 12 months
- Health profile — kept for as long as your account is active
- Payment records — kept for 7 years as required by UK law
- When you delete your account, all personal data is permanently deleted within 30 days
7. Third parties we work with
We share data with the following trusted third parties, only to the extent necessary to provide the service:
- Anthropic — AI responses are generated using Anthropic's Claude API. Messages you send to Vytal are processed by Anthropic. Anthropic's privacy policy applies to this processing.
- Supabase — secure database storage for your account and health data
- Stripe — payment processing. Stripe's privacy policy applies to payment data.
- Render — hosting provider for the app and website
- Spoonacular — recipe data. Only dietary preferences (not health data) are shared to generate recipe suggestions.
We do not share your health information with any of these providers beyond what is necessary to operate the service.
8. Your rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — correct inaccurate data (most data can be edited directly in the app)
- Right to erasure — delete your account and all associated data at any time via the app (Profile → Delete my account)
- Right to data portability — request your data in a portable format
- Right to restrict processing — request that we limit how we use your data
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent for health data processing at any time by deleting your account
To exercise any of these rights, contact us at contact@myvytals.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
9. Cookies
The Vytal Menopause website (vytalmenopause.com) uses minimal cookies:
- Essential cookies — required for the website to function
- Analytics cookies — anonymous usage statistics to understand how the website is used
The app itself stores data locally on your device (authentication tokens and cached data) to provide a smooth experience. This is not advertising tracking.
10. Children's privacy
Vytal Menopause is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact@myvytals.co.uk.
11. Changes to this policy
We may update this privacy policy from time to time. We will notify you of significant changes by email or via a notice in the app. The date at the top of this page shows when it was last updated.
12. Contact us
If you have any questions about this privacy policy or how we handle your data, please contact us:
- Email: contact@myvytals.co.uk
- Website: vytalmenopause.com