Information We Collect
We collect the following categories of information when you use VIIVAA:
1.1 Information You Provide Directly
- Account information: name, email address, password, and profile photo
- Personal health data: age, sex, height, weight, body measurements, and health goals
- Nutrition and food logs: meals, recipes, caloric intake, and macro data
- Symptom and medication tracking data, including GLP-1 related entries
- Habit and activity logs
- Kitchen and meal planning data including saved recipes and grocery lists
- Communications you send to our support team
1.2 Information Collected Automatically
- Device information: device type, operating system, and app version
- Usage data: features accessed, session duration, and interaction patterns
- IP address and approximate location based on IP
- Crash reports and performance diagnostics
1.3 Payment Information
Payment transactions are processed by Stripe. VIIVAA does not collect or store your full credit card number, CVV, or banking details. Stripe provides us with limited transaction metadata including plan type, billing date, and payment status. For details on how Stripe handles your payment data, visit stripe.com/privacy.
How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your VIIVAA account
- To provide, personalize, and continuously improve the VIIVAA platform and its features
- To generate AI-powered health reports, insights, and recommendations based on your inputs
- To process subscription payments and send billing confirmations
- To send you service-related communications including account notifications and policy updates
- To respond to your support requests and inquiries
- To monitor platform performance, detect errors, and prevent fraud or abuse
- To compile anonymized, aggregated datasets for health research purposes as described in Section 4
- To comply with our legal obligations in applicable jurisdictions
We do not use your personal health data for advertising targeting purposes, and we do not sell your personally identifiable information to third parties under any circumstances.
Community Features, Challenges & Competitions
3.1 What Community Features Include
VIIVAA offers optional community and social features including but not limited to:
- Public or group health challenges and fitness competitions
- Leaderboards displaying participant progress and rankings
- Community feeds where users can share progress posts, milestone achievements, and motivational content
- Social sharing tools that allow users to export branded VIIVAA progress graphics to external social media platforms
3.2 Information Shared During Community Participation
When you choose to participate in challenges, competitions, or community features, the following information may be visible to other VIIVAA users or, in the case of social sharing, to the general public:
- Your display name or username
- Your profile photo, if you have uploaded one
- Your progress metrics as they relate to the specific challenge or competition (for example: steps completed, weight lost, habits maintained, streak count)
- Your ranking or position on leaderboards
- Any content you choose to post or share within community feeds
Sensitive health data such as your exact weight, medical history, GLP-1 medication details, and symptom logs are never shared publicly or with other users without your explicit additional consent. Only the progress metrics directly relevant to a given challenge are displayed.
3.3 Your Consent to Community Participation
Participation in all community features, challenges, and competitions within VIIVAA is entirely optional and requires your explicit consent. Before joining any challenge or competition for the first time, and before activating any community visibility feature, you will be presented with a clear in-app consent prompt that includes:
- A description of what information will be shared and with whom
- The duration of the challenge or visibility period
- A confirmation checkbox that you must actively tick to proceed
You will not be automatically enrolled in any community feature. Your consent is required each time you join a new challenge or competition that involves profile visibility.
By ticking the consent checkbox inside the VIIVAA app, you acknowledge that your display name, profile photo, and relevant progress metrics will be visible to other participants and, where applicable, to the general public. You may withdraw from a challenge at any time, after which your information will no longer appear on active leaderboards or feeds within 48 hours.
3.4 Social Sharing
VIIVAA provides tools that allow you to generate and share branded progress graphics on external social media platforms such as Instagram, Facebook, TikTok, and others. When you use these tools:
- You are sharing content directly to your personal social media profile
- VIIVAA is not responsible for the privacy settings, terms, or data practices of third-party social media platforms
- Information shared externally is governed by the privacy policies of those platforms
- You may choose what information appears in your shareable graphic before posting
3.5 Withdrawing from Community Features
You may withdraw from any challenge, competition, or community feature at any time through your in-app settings. Upon withdrawal:
- Your progress data will be removed from active leaderboards and community feeds within 48 hours
- Historical data from completed challenges may be retained in anonymized, aggregated form for platform performance analysis
- Withdrawal from community features does not affect your main VIIVAA subscription or personal tracking data
Anonymized Data & Health Research
To support the advancement of global health research and improve outcomes for people worldwide, VIIVAA may compile and share anonymized, aggregated data with research institutions, healthcare organizations, and health industry partners.
VIIVAA does not sell your personal information. Any data shared for research purposes is fully anonymized — meaning all identifying information including your name, email, device ID, and account details are permanently removed before any data is shared. The resulting dataset cannot reasonably be used to identify you as an individual.
4.1 What Anonymized Data May Include
Anonymized research datasets compiled by VIIVAA may include aggregated, de-identified information such as:
- General health and weight trend patterns across user populations
- Nutrition, macro, and caloric intake patterns
- Anonymized symptom and side effect frequency data
- Habit formation and retention patterns
- Aggregated GLP-1 medication journey data including anonymized symptom timelines and weight progression
- App engagement and feature usage patterns
4.2 Who May Receive Anonymized Data
Anonymized, aggregated datasets may be shared with or licensed to:
- Academic and independent research institutions studying nutrition, obesity, metabolic health, and related fields
- Healthcare organizations and hospital systems conducting population health research
- Pharmaceutical and biotechnology companies conducting real-world health outcome studies
- Government and public health agencies analyzing population wellness trends
- Health technology and nutrition companies conducting market and behavioral research
All recipients of anonymized data are contractually prohibited from attempting to re-identify any individual from the dataset.
4.3 Your Opt-Out Right
Contribution to anonymized health research datasets is enabled by default as disclosed at the time of account creation. You may opt out of this at any time through your account settings:
- Open VIIVAA and go to Settings
- Tap Privacy & Data
- Toggle off Contribute to Anonymized Health Research
Once you opt out, your data will no longer be included in any future anonymized datasets compiled after the date of your opt-out. Please note that anonymized data already included in previously compiled and distributed research datasets cannot be retroactively removed, as it exists only in aggregated, de-identified form with no link back to your account.
Opting out of anonymized research data contribution has no effect on your VIIVAA subscription, features, or any other aspect of your account.
4.4 Onboarding Disclosure
During your initial VIIVAA onboarding, you will be clearly informed that anonymized data contribution is enabled by default and that you may opt out at any time in Settings. This disclosure is presented as a standalone screen before you complete account setup.
Data Sharing & Third Parties
VIIVAA does not sell, rent, or trade your personal data. We share information only in the following limited circumstances:
5.1 Service Providers
We work with trusted third-party service providers who assist us in operating the VIIVAA platform. These providers are contractually required to protect your data and may only use it for the specific purpose for which it was shared:
- Stripe — payment processing
- Cloud infrastructure providers — secure data storage and hosting
- Analytics providers — anonymized platform performance data only
- Email delivery services — for transactional and service communications
5.2 Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of VIIVAA, our users, or the public.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of VIIVAA's assets, your data may be transferred to the acquiring entity. You will be notified via email and through a prominent notice on our platform prior to any such transfer, and you will have the option to delete your account before the transfer occurs.
Data Security
VIIVAA takes the security of your personal data seriously. We implement industry-standard security measures including:
- Encryption of data in transit using TLS (Transport Layer Security)
- Encryption of sensitive data at rest
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security assessments and monitoring
While we take every reasonable precaution to protect your data, no method of transmission or storage over the internet is 100% secure. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable legal requirements.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:
- Active account data is retained throughout your subscription period
- Upon cancellation or expiration of your subscription, your data is retained for 90 days to allow for reactivation
- After the 90-day retention window, your personal data will be permanently deleted from our active systems
- Anonymized and aggregated data derived from your usage may be retained indefinitely for platform improvement and research purposes
- Data required for legal or financial compliance may be retained for longer periods as required by law
You may request the deletion of your account and personal data at any time by contacting support@viivaa.app. We will process deletion requests within 30 days.
Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
8.1 All Users
- Access: request a copy of the personal data we hold about you
- Correction: request that we correct inaccurate or incomplete data
- Deletion: request that we delete your personal data, subject to legal retention requirements
- Portability: request your data in a portable, machine-readable format
- Opt-out: withdraw consent for anonymized research data contribution, community features, or marketing communications at any time through Settings → Privacy & Data
8.2 European Union Users (GDPR)
If you are located in the European Union, you have additional rights under the GDPR including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your health data is your explicit consent, which you may withdraw at any time.
8.3 Brazilian Users (LGPD)
If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD) including the right to confirmation of processing, access, correction, anonymization, portability, deletion, and information about third-party sharing. You may exercise these rights by contacting support@viivaa.app.
8.4 California Users (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. VIIVAA does not sell personal information. To exercise your rights, contact support@viivaa.app.
To exercise any of your rights, please contact us at support@viivaa.app. We will respond to all requests within 30 days.
Children's Privacy
VIIVAA is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a user under 18 has created an account, we will promptly delete their account and all associated data. If you believe a child has provided us with personal information, please contact us at support@viivaa.app.
Cookies & Tracking Technologies
VIIVAA's website at viivaa.app uses cookies and similar tracking technologies to:
- Maintain your session and login state
- Remember your preferences
- Analyze website traffic and user behavior in anonymized form
- Support the functionality of our checkout and billing processes
You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. Our mobile application does not use browser cookies but may use mobile device identifiers for similar purposes.
International Data Transfers
VIIVAA operates globally and your data may be stored and processed in countries other than your country of residence. We ensure that any international transfer of your personal data is conducted in compliance with applicable laws, including through the use of standard contractual clauses where required under GDPR.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you via email at least 14 days before the changes take effect and post the updated policy at viivaa.app/privacy-policy with a revised effective date.
Your continued use of VIIVAA after changes take effect constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
VIIVAA Privacy Team
- Email: support@viivaa.app
- Website: viivaa.app/privacy-policy
- Response time: Within 30 days for privacy requests, within 1 business day for general inquiries