Effective Date: August 1, 2026 Last Updated: August 1, 2026

1. Introduction

Youlytical (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the Youlytical Health and Fitness mobile application (the “App”) available on iOS and Android. This policy applies specifically to the App and is separate from the privacy policy governing the Youlytical website.

By creating an account or using the App, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the App.

Company Information Youlytical 7901 4TH Street N, Ste 300, ST. Petersburg, FL 33702 Contact Email: info@youlytical.com

2. Information We Collect

We collect information that you provide directly, information collected automatically from your device, and information read from your device’s health platform with your permission.

2.1 Account Information

When you create an account, we collect:

  • Email address — used for account registration, authentication, and account recovery.
  • Password — stored in hashed form on our servers. We never store or have access to your plaintext password.
  • Display name (optional) — if you choose to provide one.

The App also presents options to sign in with Apple or Google. If and when these sign-in methods become available, we will collect only the information those providers share as part of their standard authentication flow (typically an email address or unique identifier). We will update this policy accordingly.

2.2 Nutrition and Food Data

When you use the food-tracking features, we collect:

  • Food log entries — foods logged to meals (breakfast, lunch, dinner, snack), including food name, portion size, and nutritional values (calories, protein, carbohydrates, fat, and other nutrients).
  • Custom foods — foods you create manually, including their nutritional information.
  • Barcode scan results — when you scan a food product barcode, the barcode number is sent to our server and, when necessary, to the Open Food Facts database (a public, open-source food database) to retrieve product information. We do not store images from your camera; the camera is used solely for real-time barcode recognition.

2.3 Exercise and Workout Data

When you use the exercise-tracking features, we collect:

  • Workout sessions — start time, end time, and duration.
  • Exercise logs — exercises performed, sets, repetitions, weight lifted, distance, speed, and other exercise-specific metrics.
  • Workout targets — your weekly training-day goal.

2.4 Health Data from Apple HealthKit and Android Health Connect

With your explicit permission, the App reads health and fitness data from Apple HealthKit (iOS) or Health Connect (Android). The App reads this data but does not write to HealthKit or Health Connect. The categories of data we may read include:

  • Activity: steps, distance walked/run, floors climbed, active calories burned, total calories burned, basal metabolic rate, and exercise sessions.
  • Heart: heart rate, resting heart rate, heart rate variability, and VO2 max.
  • Sleep: sleep sessions and sleep stages.
  • Body measurements: weight, height, body fat percentage, lean body mass.
  • Vitals: oxygen saturation and respiratory rate.

This data is synced from your device to our server so that it can be displayed in your personal dashboard and used to calculate trends over time. Health data collected through HealthKit or Health Connect is handled in accordance with Apple’s and Google’s respective developer guidelines.

We do not sell your health data. We do not use your health data for advertising or marketing purposes. We do not share your health data with third parties for advertising, marketing, or data-brokering purposes.

2.5 Location Data

The App requests access to your device’s location solely to determine your country. This is used to filter food search results to show products sold in your region. You may also manually select a country or disable this feature entirely within the App’s settings.

We collect coarse location data (country level) only. We do not continuously track your location, and we do not collect precise GPS coordinates for storage.

2.6 Goals and Preferences

We store your personal goals and preferences on our server so they sync across sessions:

  • Daily calorie target and macro split (protein, carbohydrate, and fat percentages).
  • Nutrition plan selection (Balanced, High Protein, Low Carb, Keto, or Custom).
  • Unit preferences (miles/kilometers, mph/km/h, pounds/kilograms).
  • Weekly workout target.

2.7 Device and Technical Data

The App collects minimal technical data necessary to operate:

  • User ID — a unique identifier assigned to your account, used for authentication.
  • Authentication tokens — JSON Web Tokens (JWTs) stored securely on your device (in the iOS Keychain or Android secure storage) to keep you signed in.

We do not collect device advertising identifiers (IDFA/GAID), and we do not collect device IDs for tracking purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • App Functionality: To authenticate your account, sync your data across sessions, enable core features (food logging, exercise tracking, health dashboard, barcode scanning, food search), and ensure the App operates correctly.
  • Personalization: To display your personal dashboard, nutrition targets, workout progress, health trends, and food search results filtered to your region.
  • Security: To protect your account through secure authentication, password hashing, and encrypted token storage.

We do not use your information for:

  • Third-party advertising or sharing data with advertising networks.
  • First-party advertising or marketing communications (unless you separately opt in through the Youlytical website).
  • Behavioral analytics, audience measurement, or profiling.
  • Sale to data brokers or any third party.
  • Tracking you across other apps or websites.

4. Apple HealthKit and Google Health Connect Compliance

In accordance with Apple’s HealthKit and Google’s Health Connect requirements:

  • Health data obtained through HealthKit or Health Connect is not used for advertising, marketing, or sale to third parties or data brokers.
  • Health data is not shared with third parties without your explicit consent, except as required to provide the App’s core functionality (syncing to our server for your personal dashboard).
  • Health data is not used to make decisions about insurance eligibility, coverage, or underwriting.
  • We use health data solely to provide and improve the health and fitness features of the App for your personal use.

5. Third-Party Services

5.1 Open Food Facts

When you search for foods or scan a barcode, the App may query the Open Food Facts database (https://world.openfoodfacts.org), an open-source, publicly available food product database. The data sent to Open Food Facts consists of a barcode number or food search query and your selected country for filtering. Open Food Facts is a nonprofit project; their privacy policy is available at https://world.openfoodfacts.org/privacy.

5.2 No Third-Party Analytics, Advertising, or Tracking SDKs

The App does not include any third-party analytics SDKs (such as Firebase Analytics, Mixpanel, or Amplitude), crash-reporting SDKs (such as Sentry or Crashlytics), advertising SDKs, or tracking pixels. All data collected by the App is transmitted only to Youlytical’s own servers, with the exception of Open Food Facts queries as described above.

If we add any third-party services in the future, we will update this privacy policy before doing so.

6. Data Sharing

We do not sell, rent, or trade your personal information or health data.

We may share your information only in the following limited circumstances:

  • Service providers: We may use third-party infrastructure providers (such as cloud hosting) to store and process data on our behalf. These providers are contractually obligated to protect your data and may not use it for their own purposes.
  • Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
  • Safety: We may disclose information if we believe in good faith that it is necessary to protect the safety of our users, the public, or Youlytical.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you of any such change.

7. Data Storage and Security

Your data is stored on secure servers. We implement industry-standard security measures including:

  • Passwords are cryptographically hashed before storage; we never store plaintext passwords.
  • Authentication tokens are stored on your device using platform-provided secure storage (iOS Keychain / Android EncryptedSharedPreferences).
  • Communication between the App and our servers uses standard API protocols.
  • Access to our servers and databases is restricted to authorized personnel.

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information and app data for as long as your account is active and as reasonably needed to provide the App’s services. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required by law to retain it for longer.

Health data synced from your device is retained on our server as part of your account data and is subject to the same retention and deletion practices.

9. Your Rights and Choices

9.1 Account and Data Controls

  • Health data permissions: You can grant or revoke the App’s access to HealthKit or Health Connect at any time through your device’s system settings. Revoking access stops future syncing; previously synced data remains on our server unless you request deletion.
  • Camera permission: You can grant or revoke camera access through your device’s system settings. The camera is used only for barcode scanning.
  • Location permission: You can grant or revoke location access through your device’s system settings, or select your country manually, or disable country filtering in the App’s settings.
  • Sign out and account deletion: You can sign out of the App at any time through the Settings screen. To request complete deletion of your account and all associated data, contact us at info@youlytical.com.

9.2 Rights Under Applicable Law

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate personal information.
  • Delete your personal information.
  • Port your data to another service in a machine-readable format.
  • Withdraw consent for data processing at any time.
  • Object to certain processing of your personal information.
  • Lodge a complaint with a data protection authority.

To exercise any of these rights, contact us at info@youlytical.com. We will respond within the timeframe required by applicable law.

9.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information. To make a request, contact us at info@youlytical.com.

9.4 European Economic Area Residents (GDPR)

If you reside in the EEA, our legal basis for processing your personal data is your consent (for health data and location) and the performance of a contract (for account and app functionality data). You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

10. Children’s Privacy

The App is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@youlytical.com.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. By using the App, you consent to the transfer of your information to such countries. We take appropriate safeguards to ensure your data is protected in accordance with this privacy policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, where appropriate, through a notice within the App. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Youlytical 7901 4TH ST N, Ste 300, ST. PETERSBURG, FL 33702 Email: info@youlytical.com