Privacy Policy
Last updated October 20, 2026
This Privacy Policy explains how VYELA HEALTH LLC ("Vyela," "we," "us") collects, uses and shares information when you use Vyela AI agent, a personal assistant you reach by text message, phone call, WhatsApp or the website agent.vyela.ai (together, the "Service"). It also includes our Consumer Health Data Privacy Policy.
The short version. We use your information to do the tasks you ask for. We do not sell it. We do not use it for third-party advertising. We do not use your health information to train AI models. We share it with others only to complete a task you approved, with service providers who help us run the Service, or when the law requires it. You can get a copy or have it deleted at any time.
1. Vyela AI agent is separate from medical care
Vyela AI agent is a consumer personal assistant. It is not a healthcare provider and is not part of any medical practice. Clinical care offered under the Vyela Care name is provided by independent licensed clinicians at affiliated medical practices, which keep their own medical records and follow their own privacy notices, including under HIPAA.
Information you give Vyela AI agent is stored separately from those medical records. It is sent to a medical practice only when you ask us to and give a separate, specific yes for that share. Because Vyela AI agent is not a healthcare provider, the information you share with it is generally not covered by HIPAA. It is protected by this policy and by the consumer privacy and health data laws that apply to you.
2. Information we collect
Information you give us. Your name, mobile number and email; the messages, voice notes, photos and documents you send; things you ask us to remember, such as your doctors, pharmacy, insurance, sizes and preferences; and the people you ask us to contact for you.
Health-related information you choose to share. For example, symptoms, sleep, cycle, mood, medications or supplements you log, and appointments you ask us to book. See the Consumer Health Data Privacy Policy below.
Task information. Details of tasks we complete for you, such as orders, bookings, calls made for you and their results, and your approvals.
Payment information. Card details are collected and processed by our payment processor. We do not store full card numbers.
Calls. When you call Vyela AI agent, or it calls you or someone else for you, we process the audio to understand and respond. We do not record calls unless we tell you at the start of the call and everyone on the call agrees.
Information collected automatically. When you visit our website: device and browser type, IP address, pages viewed and similar usage data, collected through cookies and similar tools. Our analytics tools record events (for example, "booking completed"), not the content of your conversations.
Information from others. Replies from businesses and people we contact for you, and data from services you choose to connect in the future, such as a wearable.
3. How we use information
- To understand your requests and complete the tasks you approve.
- To remember context, so you do not have to repeat yourself.
- To send reminders and updates you asked for, and service messages about your account.
- To prepare summaries you request, such as a one-page report for your doctor.
- To process payments, prevent fraud and keep the Service secure.
- To fix problems and improve the Service, using de-identified or aggregated information where we can.
- To comply with law and protect our rights and the safety of others.
AI models. We use AI models from third-party providers to run the Service. We do not use your health information, or the content of your conversations, to train AI models, ours or anyone else's, and we choose provider settings that do not allow them to train on it.
4. How we share information
- To complete a task you approved. For example, your name and order details to a store, or your name and preferred times to a clinic. We share only what the task needs.
- With people you ask us to contact. For example, when you ask us to coordinate a plan with a friend, we share your first name and the plan, never your health information.
- With a medical practice, only with your separate yes. See section 1.
- With service providers who host, secure and operate the Service for us (such as cloud hosting, messaging and calling, AI model providers and payment processing), under contracts that limit their use of your information to providing services to us.
- For legal reasons, when required by law or legal process, or to protect someone's safety.
- In a business transfer, such as a merger or sale, subject to this policy.
We do not sell your personal information or health information. We do not share it for cross-context behavioral advertising.
5. Text messages and calls
If you agree to receive texts and calls from Vyela AI agent, including AI-generated voice calls, we use your number to send the messages and make the calls you asked for. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
6. How long we keep information
We keep your information while your account is active and as long as needed to provide the Service. When you ask us to delete it, we delete it from our active systems within 30 days, and from backups within 90 days, unless the law requires us to keep part of it (for example, payment records). We keep records of your consents and opt-outs as long as the law requires.
7. Security
We encrypt your information in transit and at rest, limit access to people who need it, and log that access. No system is perfectly secure. Because Vyela AI agent acts on your behalf, mistakes are possible, such as a message sent to the wrong place, and businesses it contacts could try to mislead it. We ask for your yes before any purchase, booking or share to reduce these risks. If a breach of your information occurs, we will notify you and the authorities as required by law, including the FTC Health Breach Notification Rule.
8. Your choices and rights
- Access and copy. Text "send my data" or email privacy@vyela.ai.
- Delete. Text "delete my data" or email privacy@vyela.ai.
- Correct. Tell Vyela AI agent, or email us.
- Withdraw consent. Reply STOP to messages, or tell us which consent you are withdrawing.
- Appeal. If we decline your request, reply to our decision to appeal. If you are not satisfied with the appeal, you may contact your state attorney general.
Depending on where you live (for example, California, Colorado, Connecticut, Nevada, Texas, Virginia or Washington), you may have additional rights under state law. We will not treat you differently for using your rights. We verify requests before acting on them, and an authorized agent may make a request for you where the law allows.
9. Consumer Health Data Privacy Policy
This section applies to "consumer health data" as defined by laws such as Washington's My Health My Data Act and Nevada's and Connecticut's consumer health data laws.
What we collect: health information you choose to share, such as symptoms, sleep, cycle and bleeding, mood, energy, medications and supplements you log, appointments and providers, and summaries we prepare for you.
Sources: you, and services you choose to connect.
Why we collect and use it: only to provide the features you request, such as tracking, patterns, reminders, doctor reports and appointment booking.
Consent: we collect and use consumer health data only with your consent, which we ask for separately when you start using Vyela AI agent. We share it with a third party only with a further, separate consent for that share, except with service providers acting for us as described above.
Who receives it: service providers acting for us; and, only with your separate consent, the doctor, clinic or medical practice you choose.
Your rights: you can confirm whether we hold your consumer health data, get a list of third parties we shared it with, withdraw consent and have it deleted, using the contacts in section 8.
We do not sell consumer health data, and we do not use geofencing around healthcare facilities.
10. Children
The Service is for adults 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Changes
We will update the date above when we change this policy, and tell you by text or email before material changes take effect. We will ask for your consent again where the law requires it.
12. Contact us
VYELA HEALTH LLC · privacy@vyela.ai