Privacy Policy

Effective date: 24 July 2026 Last updated: 24 July 2026

This Privacy Policy explains how BP Consulting Africa Sàrl (“we”, “us”, “our”), the operator of the Vydalo mobile and web application (the “App”), collects, uses, shares, and protects your information. Please read it carefully. By using the App you agree to the practices described here.

This is a template draft. It is not legal advice. Because the App handles health related data and serves users in the US, Europe, and the Middle East, have a qualified attorney review it before you publish.

1. Who we are

The App is operated by BP Consulting Africa Sàrl, registered in Vaud, Switzerland, contactable at:

Email: privacy@vydalo.com
Postal address: Marais Rond 11a, 1847 Rennaz, Switzerland

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, BP Consulting Africa Sàrl is the “data controller” of your personal data. If we appoint an EU or UK representative or a Data Protection Officer, their details will be listed here.

2. Information we collect

a. Information you provide - Account details: name, email address, and password (passwords are stored in hashed form, never in plain text). - Profile and goals: age, sex, height, weight, weight goals, activity level, and dietary restrictions (for example gluten free). - Content you enter: food logs, meal descriptions, workout entries, weight history, and notes. - Photos: images of meals or barcodes that you choose to submit for analysis.

b. Information collected automatically - Device and usage data: device type, operating system, app version, language, and general interaction data. - Approximate location derived from your IP address (we do not collect precise GPS location unless you enable it). - Cookies and similar technologies on the web version (see Section 9).

c. Information from third parties - If you sign in with Apple or Google, we receive basic account identifiers from them. - If you connect a health platform (for example Apple Health or Google Fit), we receive the specific data you authorize, such as steps or workouts.

Some data you provide, such as weight, dietary restrictions, and nutrition logs, may be considered health related or “special category” data under laws like the EU General Data Protection Regulation (GDPR). We process this data only to provide the App’s features to you, and, where required by law, on the basis of your explicit consent, which you give by choosing to enter this information. You can withdraw consent at any time by deleting the data or your account.

4. How we use your information

We use your information to: - Create and manage your account. - Provide core features: food and calorie tracking, AI photo and text analysis, barcode lookups, workout estimates, weight tracking, reminders, and educational content. - Personalize your targets and recommendations. - Process payments and manage subscriptions. - Send you service messages and, if you opt in, reminders and marketing. - Monitor, secure, debug, and improve the App. - Comply with legal obligations and enforce our Terms.

5. AI processing of your food photos and descriptions

When you submit a meal photo, a barcode image, a food description, or a workout description, that content is sent to our third party AI provider, Anthropic (the provider of the Claude models), through our servers, so it can estimate nutrition or calories. This processing is necessary to deliver the feature you requested. We do not use your photos to identify you, and we instruct our AI provider not to train their models on data sent through our business API. Nutrition and calorie outputs are estimates and may be inaccurate (see our Health and AI Disclaimer).

6. Legal bases for processing (EEA, UK, Switzerland)

Where GDPR applies, we rely on these legal bases: - Performance of a contract: to provide the App’s features you signed up for. - Consent: for optional features, marketing, certain cookies, and processing of health related data. You may withdraw consent at any time. - Legitimate interests: to secure, debug, and improve the App, balanced against your rights. - Legal obligation: to comply with applicable law.

We do not sell your personal data. We share it only with: - Service providers who work on our behalf, including hosting, database, payment processing, AI analysis (Anthropic), analytics, and error monitoring, each bound by confidentiality and data protection terms. - App stores (Apple, Google) for subscription and payment handling. - Legal and safety recipients when required by law, court order, or to protect rights and safety. - Business transfers, if we are involved in a merger, acquisition, or asset sale, in which case we will notify you.

8. International data transfers

We operate globally, so your data may be processed in countries other than your own, including the United States. Where we transfer personal data out of the EEA, UK, or other regions with transfer restrictions, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

9. Cookies and similar technologies

The web version uses cookies and local storage for essential functionality (such as keeping you logged in) and, with your consent where required, for analytics. You can control cookies through your browser settings or our cookie banner where shown.

10. Data retention

We keep your personal data for as long as your account is active and as needed to provide the App. When you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain certain records to comply with legal, tax, or accounting obligations.

11. Your rights

Depending on where you live, you may have rights to: - Access the personal data we hold about you. - Correct inaccurate data. - Delete your data (“right to be forgotten”). - Restrict or object to certain processing. - Receive your data in a portable format. - Withdraw consent at any time. - Lodge a complaint with a supervisory authority.

European users (GDPR): you can exercise these rights and complain to your local data protection authority.

California users (CCPA/CPRA): you have the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. You will not be discriminated against for exercising your rights.

To exercise any right, contact us at privacy@vydalo.com. We will respond within the timeframe required by law.

12. Data security

We use technical and organizational measures such as encryption in transit, hashed passwords, and access controls to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children’s privacy

The App is not intended for children under 16 years of age, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version with an updated “Last updated” date and, for material changes, notify you in the App or by email.

15. Contact us

Questions or requests: privacy@vydalo.com, or BP Consulting Africa Sàrl, Marais Rond 11a, 1847 Rennaz, Switzerland.