Privacy policy

Who we are

Unyx Health is operated by Creayate Ltd (company number 16619313), registered at First floor, Suite 1, 141–143 King Street, Hammersmith, London W6 9JG, United Kingdom. We are the data controller for the personal data described in this policy. You can reach us at hello@unyxhealth.com.

Website launch emails and optional updates

If you request a launch notification on this website, we use your email address to send that notification. The launch signup does not opt you in to ongoing updates. If you previously chose optional Unyx Health updates and tracking tips, that separate preference continues to apply until you withdraw it. You can unsubscribe through the link in an email, or contact hello@unyxhealth.com to withdraw your consent or request deletion.

We record your email address, signup source, consent wording, preferences and signup time. Netlify hosts the website and receives a signup copy; Supabase records the request; Klaviyo processes email subscriptions and delivery on our behalf. This website signup does not send your app health records to Klaviyo. We retain the records needed to manage your request and respect your email preferences, including a record of withdrawal where needed.

What we collect

We only collect what the app needs to work. That is:

• Account details — your email address and, if you give it, your name.
• Your profile — date of birth, sex, height, weight, activity level and your goal. These are what the calorie and macro targets are calculated from.
• What you log — food and meals, workouts and cardio, supplements, body measurements, and any notes you add.
• Photos you choose to send for analysis — a meal, a supplement label, or a physique check.
• A profile picture, if you set one.
• Your subscription status — whether you are on the free or Premium plan, so the app knows which features to unlock. We never see your card details.
• Basic technical data — app version and error reports, so we can fix crashes.

We do not collect your contacts, your location, or your browsing activity. We do not use advertising trackers, and we do not sell your data to anyone, ever.

Health data

Weight, body measurements, body-composition estimates and what you eat are special category health data under UK GDPR. We process it only to provide the features you have asked for — your targets, your trends and your history. We process it on the basis of your explicit consent, which you give by entering the data, and which you can withdraw at any time by deleting your account.

Photos and AI features

Several features use artificial intelligence: meal-photo logging, the supplement label scanner, the physique check, and the meal-plan and program builders.

When you use one of these, the photo or text is sent to one of our AI providers — Anthropic, or Google (via OpenRouter), depending on the feature — to be analysed, and the result comes back to your app. This matters, so we will be exact about it:

• Photos you send for analysis are not stored by us. They are resized on your phone, sent to be analysed, and discarded. We keep the result — for example the estimated calories, or the body-fat range — not the image.
• Your profile picture is the one exception. It is stored, because it has to be shown back to you, and it is deleted when you remove it or delete your account.
• We do not send your name or email address with these requests.
• Our AI providers process each request on our behalf and do not use your photos or text to train their models.

AI output is an estimate, not a measurement, and it can be wrong. Please read the Medical disclaimer before acting on it.

Apple Health and Health Connect

If you give permission, the app reads a small set of data from Apple Health (on iPhone) or Health Connect (on Android): steps, sleep, resting heart rate, active calories and weight. It is used for one thing — showing your day and adjusting your targets — and:

• You choose exactly what to share, and you can revoke it at any time in your phone's settings.
• It is never used for advertising or marketing, never sold, and never shared with third parties.
• It is not sent to our AI providers.

Our use of information received from Apple Health and Health Connect adheres to the Apple Health app policy and the Health Connect Permissions policy, including the Limited Use requirements.

Where your data is held

Your account and logs are stored with Supabase, our hosting and database provider, and protected so that only your signed-in account can read them. Some processing — including the AI features above — happens outside the UK, in the United States. Where data leaves the UK we rely on the safeguards required by UK GDPR, including the International Data Transfer Addendum and equivalent contractual protections with our providers.

Who we share it with

Only the providers that make the app work, and only for that purpose:

• Supabase — hosting, database and authentication.
• Anthropic, and Google via OpenRouter — the AI analysis described above.
• Apple and Google — app distribution and, if you subscribe, payment. We never see your card details.
• RevenueCat — manages subscriptions on our behalf. It receives your account identifier and purchase history, not your name, email or card details.

We may also disclose data if the law requires it. We do not share your data with advertisers or data brokers.

How long we keep it

We keep your data for as long as your account exists. Your history is the point of the app, so we do not quietly delete old logs. When you delete your account we permanently delete your profile, logs, photos and analysis results — this is immediate and cannot be undone. We may keep minimal records where the law requires it, such as records of a purchase.

Your rights

Under UK GDPR you have the right to:

• Access a copy of the data we hold about you.
• Correct anything that is wrong — most of it you can edit yourself in the app.
• Delete your account and everything in it, from Profile → Delete account.
• Object to or restrict how we use your data.
• Ask for your data in a portable format.
• Withdraw consent at any time.

To exercise any of these, email hello@unyxhealth.com. We will respond within one month. If you are not happy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Children

Unyx Health is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Security

Your data is encrypted in transit and at rest. Access is restricted to your own signed-in account by database-level security rules. Our AI provider is reached through our own server, so no third-party key or credential is ever present in the app. No system is perfectly secure, but we take this seriously and will tell you promptly if a breach ever affects you.

Changes to this policy

If we change this policy we will update the date at the top and, where the change is significant, tell you in the app before it takes effect.