Who we are
Zyvae is an app that scans your meals and shows how well they fit a wellness goal you choose. Crysto Ltd runs Zyvae and is responsible for your personal data. In data protection law, that makes us the data controller.
Crysto Ltd is registered in England and Wales, company number 17341542, at 19 Barnard Road, London SW11 1QT. You can contact us about privacy at any time at theo@zyvae.app.
Data we collect
We only collect what Zyvae needs to work.
| Data | What it includes | Where it comes from |
|---|---|---|
| Account details | Email address (or Apple’s private relay address if you use Hide My Email), your name if Apple or Google shares it, login details | You, when you sign up |
| Wellness goals and preferences | The goal you pick (such as skin health, gut health, energy or sleep), dietary preferences, whether you want to see calories, saved recipes, meal plans | You, in the app |
| Meal photos | Photos of food and menus you scan | Your camera or photo library, when you choose to scan |
| Voice note text | The text of a voice note you make to log a meal. The recording itself is never stored or sent to us. | Your microphone, turned into text on your phone or by Apple |
| Meal logs and results | Foods identified, amounts, scores, swaps, history, badges | Created by Zyvae from your scans |
| AI consent | Whether you allowed AI analysis, when, and which version of the wording you saw | You, in the app |
| Purchase information | Whether you have Zyvae Pro, the plan and renewal status. We never see your card details. | Apple and RevenueCat |
| Crash reports | Stack traces, device model, operating system and app version. No name, email, photos or voice note text. | Your device, automatically |
| Notification token | So we can send the meal reminders you turn on | Your device, when you allow notifications |
We only use your camera, photo library and microphone when you choose a feature that needs them. You can turn access off in your phone’s Settings at any time.
Your wellness goals and diet choices can reveal information about your health. We treat them with extra care and use them only to score meals and suggest recipes for you.
How we use your data
We use your data to run Zyvae for you. We don’t sell your data, we don’t show ads, and we don’t track you across other companies’ apps or websites.
| Purpose | Legal basis (GDPR and UK GDPR) |
|---|---|
| Create and run your account | Contract |
| Analyse your meal photos and voice note text with AI and score them | Your explicit consent, given on the AI analysis screen, plus contract |
| Personalise scores and recipes using your wellness goal | Your explicit consent, given when you choose a goal |
| Manage your subscription | Contract |
| Send meal reminders you turn on | Consent |
| Fix crashes and keep Zyvae secure | Legitimate interests |
| Meet legal and tax duties | Legal obligation |
You can withdraw consent at any time: AI analysis in the app’s Account settings, notifications in your phone’s Settings, or everything by deleting your account. This doesn’t affect anything we did before you withdrew it.
We don’t use your meal photos or voice note text to train AI models.
How the AI works
Before your first scan, Zyvae asks for your permission to use AI analysis. When you scan a meal, we send the photo to Anthropic, the company behind the Claude AI models, so it can identify the food. When you log a meal by voice, Apple’s speech recognition turns the recording into text, on your phone where it can and otherwise on Apple’s servers. We then send only that text to Anthropic.
Anthropic processes this data only to give us the result and, under its commercial terms, doesn’t use it to train its models. It deletes it from its systems within 30 days. It may keep it longer only if its safety systems flag it as breaking its usage policy, or if the law requires it.
You can withdraw AI consent at any time in Profile, Account settings, AI analysis. Scanning and voice logging then stop until you allow it again. Meals you already logged stay in your history.
Zyvae’s scores and suggestions are general wellness information, not medical advice. Talk to a doctor or dietitian about any health condition or allergy.
International transfers
Our database and file storage are hosted by Supabase in Ireland, in the EU. Some providers, including Anthropic, RevenueCat and Sentry, are based in the United States. When your data leaves the UK or EU, we rely on approved safeguards. These include the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework where a provider is certified. You can ask us for a copy of these safeguards.
How long we keep your data
We keep your data while your account is open.
Deleting your account: go to Profile, Account settings, Delete account, or email theo@zyvae.app. This deletes your account, every scan and photo, your goals, meal plans and badges straight away. Backups clear within 30 days. We keep purchase records for as long as tax law requires.
Deleting your account doesn’t cancel an App Store subscription. Apple bills it, so cancel it in your Apple account settings. The delete screen has a button that takes you there.
Your rights
Under GDPR and UK GDPR, you can ask us to
- give you a copy of your data
- correct data that is wrong
- delete your data (or do it yourself in the app, see above)
- limit how we use your data, or object to it
- send your data to you or another service in a portable format
- withdraw any consent you gave
Email theo@zyvae.app and we will reply within one month. You can also complain to your data protection authority. In the UK that is the ICO (ico.org.uk). In Spain it is the AEPD (aepd.es). Elsewhere in the EU, it is the authority in your country.
Children
Zyvae is for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you think a child has signed up, email us and we will delete their account.
Security
We encrypt data in transit and at rest, limit who can access it, and use providers with strong security standards. Your meal photos are kept in private storage that only your account can read. The app shows them through links that expire after an hour. No system is perfectly secure, so tell us right away if you spot a problem.
Changes to this policy
We will update this page when things change and show the new date at the top. For important changes, we will tell you in the app.
Contact
Crysto Ltd
19 Barnard Road, London SW11 1QT
Company number 17341542
theo@zyvae.app