Privacy Policy

Effective Date: March 24, 2026

Vylos Solutions, Inc. ("Vylos," "we," "us," or "our") operates the Vylos mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

1. Information We Collect

Account Information

When you create a Vylos account, we collect your name, email address, display name, and username. If you sign in using Apple Sign-In or Google Sign-In, we receive limited profile information from those providers as authorized by you.

Glucose Data (via Dexcom Integration)

With your explicit permission, Vylos connects to your Dexcom CGM account via the Dexcom API using OAuth2 authentication. We access your glucose readings solely to calculate your daily Vylos Vibe Score.

Usage Data

We collect information about how you interact with the App, including features used, scores submitted, achievements unlocked, points earned, friends added, and kudos given.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Calculate and display your Vylos Vibe Score
• Enable social features (leaderboards, friend connections, activity feeds, kudos)
• Track points, achievements, streaks, and rewards
• Process reward redemptions
• Send relevant notifications (friend requests, achievements, etc.)
• Ensure the security and integrity of our services
• Comply with legal obligations

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share limited information in the following circumstances:

• Social Features: Your display name, username, Vylos Vibe Score, achievements, and profile information are visible to friends or other users based on your privacy settings (Public, Friends Only, or Private).
• Service Providers: We use third-party providers (such as Railway for hosting and PostgreSQL for data storage) that process data on our behalf under strict confidentiality agreements.
• Reward Partners: When you redeem points for rewards, we may share limited information (such as your email) with reward fulfillment partners solely to deliver your reward.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests.

4. Data Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (HTTPS/TLS), secure JWT-based authentication with access and refresh tokens, hashed passwords, and secure OAuth2 flows for Dexcom, Apple, and Google integrations. However, no method of electronic transmission or storage is 100% secure.

5. Your Privacy Controls

Vylos gives you control over your data:

• Profile Visibility: Choose Public, Friends Only, or Private
• Leaderboard: Opt out of appearing on leaderboards at any time
• Dexcom Connection: Disconnect your Dexcom account at any time through Settings
• Account Deletion: You may request deletion of your account and all associated data by contacting us at support@myvylos.com. We will process deletion requests within 30 days.

6. Data Retention

We retain your account information and aggregated score data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

8. Third-Party Services

Our App integrates with third-party services including Dexcom, Apple, and Google for authentication and data access. These services have their own privacy policies, and we encourage you to review them. Vylos is not responsible for the privacy practices of third-party services.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. Your continued use of the App after changes are posted constitutes your acceptance of the revised Privacy Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: