How we handle your data.

Last updated: June 19, 2026. Read together with our Cookie Policy, Consumer Health Data Privacy Policy, and Terms of Service.

Who we are and how to reach us

Vinys is operated by Sanatosha, LLC, a limited liability company formed in Delaware, United States ("Vinys," "we," "us," "our"). Our registered agent address is Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. For any request, including privacy, legal, billing, support, and cancellation, email privacy@vinys.app. Because Vinys is an early-stage company, this single address is used across these areas and messages are routed internally as needed.

Quick summary

We collect what we need to give you a movement practice adapted to your body, to run and secure the service, to process subscriptions, to communicate with you, and to market Vinys. We use ordinary, non-health usage and conversion data for advertising and measurement, and you can opt out. We never send your health or condition data to advertising partners, and we do not sell it. We honor privacy rights under US state laws and the GDPR.

Information we collect

• Account information: email address, display name, first name, and authentication data.
• Health and practice information you provide: body areas and conditions you select (for example back, hip, neck, knee, or shoulder discomfort, sciatica, osteoarthritis, pregnancy or postpartum status), stated limits and physical restrictions, energy and how you feel on a given day, and responses during the guided movement check. We treat this as sensitive consumer health data and use it only to build and adapt your practice. See the Consumer Health Data Privacy Policy.
• Usage information: sessions started and completed, check-in responses, practice history, and in-app activity.
• Marketing and conversion information: non-health events such as visits to our general marketing pages, signups, account creation, trial starts, checkout steps, purchases, subscription and renewal events, referral and affiliate attribution, and email signups.
• Device and technical information: browser type, operating system, device identifiers, IP address, approximate location from IP, language settings, and diagnostic data.
• Cookies and similar technologies: identifiers for authentication, preferences, analytics, and, where you consent, advertising and measurement.
• AI assistant interactions: if you use an in-app AI assistant, the messages you send are processed to generate a response. These may include health details if you choose to share them. We do not send AI assistant health content to advertising partners.
• Payment information: processed by Stripe on the web and by Apple or Google on mobile. We do not receive or store your full payment card number.

How we use your information

To create, deliver, and adapt your personalized practice; to operate, secure, and improve the service; to authenticate you and prevent fraud and abuse; to process subscriptions, trials, renewals, and billing; to provide support; to send service, transactional, and marketing messages; to run and measure advertising; to understand usage through analytics; and to comply with legal obligations and enforce our terms.

Advertising, marketing, and analytics, and our advertising data boundary

We market Vinys actively and use a full range of advertising and measurement tools. These may include Meta, Google, TikTok, Reddit, X, and similar platforms, along with affiliate, referral, and influencer tracking and privacy-friendly analytics. Through cookies, pixels, SDKs, and server-side conversion APIs, we and these partners may run paid social and search ads, retargeting, custom audiences, lookalike or similar audiences, conversion optimization, hashed-email matching, campaign attribution, A/B testing of marketing funnels, and lifecycle and winback emails.

We apply a clear boundary. We use non-health events for advertising and measurement, such as visits to general marketing pages, signup started and completed, trial started, checkout started, subscription started and renewed, referral and email-lead signups, and generic engagement. We do not send your health or condition data to advertising partners. Specifically, we do not send your condition or body-area selections, movement-check answers, pain or mobility inputs, pregnancy or postpartum status, restriction data, AI assistant health content, or any condition-specific audience or event names to ad platforms. We also avoid sending URLs, event names, or parameters that would reveal a person's condition or sensitive status.

Under California and other US state laws, some of this activity may be considered a sale, sharing, or targeted advertising. You can opt out through our Do Not Sell or Share My Personal Information control and by enabling Global Privacy Control, which we honor where legally required and technically feasible. We do not sell or share sensitive health data for advertising. In the EEA and UK we rely on consent for non-essential cookies and advertising technologies.

You can unsubscribe from marketing emails at any time. Transactional and service messages continue while you have an account.

AI assistant

If you use an in-app AI assistant, your messages are processed to generate a response, and they may contain health information if you choose to include it. You should not rely on AI responses for diagnosis, treatment, emergency care, or medical decisions. AI assistant health content is not used for advertising and is not sent to advertising partners.

Legal bases for EEA and UK users

We process account and practice data to perform our contract with you. We process sensitive health data only with your explicit consent, which you may withdraw at any time. We rely on legitimate interests to secure, operate, and improve the service and for non-health marketing and analytics. We rely on consent for non-essential cookies, advertising technologies, and electronic marketing where required. We process certain data to comply with legal obligations.

Sensitive and consumer health data

Your conditions, restrictions, and how your body feels are sensitive personal information and consumer health data under laws including the Washington My Health My Data Act and the Nevada consumer health data law. We collect it only with your consent, use it solely to provide and personalize your practice, never use it for advertising, and never share it with advertising or analytics partners. You may withdraw consent and request deletion at privacy@vinys.app. See our Consumer Health Data Privacy Policy.

How we share your information

We share with service providers that process data on our behalf under contract to operate Vinys: hosting, database, and authentication (Supabase); video hosting and streaming (Bunny Stream); product analytics (Plausible); guided-session audio generation (ElevenLabs); in-app AI assistant functionality (our application platform and its AI provider); transactional email (Resend); bot and abuse protection (Cloudflare Turnstile); and payment processing (Stripe on web, Apple and Google on mobile). We share non-health marketing and conversion data with advertising and analytics partners as described above. We may disclose information to comply with law, enforce our terms, protect rights and safety, and in a merger, acquisition, or sale of assets. We do not sell health information and never share health or condition data for advertising.

International data transfers

Vinys is operated by a US company, our team works in part from Israel, and our service providers operate in the US and other countries. For transfers out of the EEA or UK, we use appropriate safeguards such as the European Commission Standard Contractual Clauses and the UK addendum, or another lawful mechanism.

Data retention

We keep your information while your account is active. If you delete your account, we permanently delete your personal data within 30 days, except limited records we must retain for legal reasons such as tax or fraud prevention. Anonymized, aggregated data may be kept indefinitely.

Your rights in the United States

Depending on your state, you may have rights to access, correct, delete, and obtain a portable copy of your personal information, to opt out of the sale or sharing of personal information and of targeted advertising, and to limit the use of sensitive personal information. We do not use sensitive health data for advertising. To exercise rights, email privacy@vinys.app or use in-app controls. You may use an authorized agent where allowed. We will not discriminate against you, and you may appeal a denial.

Your rights in the EEA and UK

You have rights to access, rectify, erase, restrict, and object to processing, to data portability, and to withdraw consent at any time. You may lodge a complaint with your local supervisory authority. Contact privacy@vinys.app. If we are required to appoint an EU or UK representative under Article 27, their details will be published here.

Children

Vinys is intended for adults aged 18 and over. We do not knowingly collect information from anyone under 18.

Security, breach, third-party links, and changes

We use reasonable technical and organizational measures to protect your information; no system is perfectly secure. If a breach affecting your personal information occurs, we will notify you and authorities where required by law. The service may link to third-party sites we do not control. We may update this policy and will post changes here with a new date, seeking consent again for material changes affecting health data where required.

Contact

For any request, including consumer health data requests, email privacy@vinys.app.