As of: 18.06.2026
Christoph Schemel
Bürkleinstraße 17, 80538 München
E-mail: contact@vitally-app.com
Vitally is an application for nutritional and health guidance. We process personal data solely to provide the app's functions, on the basis of the GDPR. Health and nutrition data are special categories of personal data within the meaning of Art. 9 GDPR and are processed only on the basis of your explicit consent (Art. 9(2)(a) GDPR). The app does not replace medical advice, diagnosis or treatment.
The app is delivered via ALL-INKL.COM – Neue Medien Münnich (Germany). Account data and synchronised content are stored with Supabase in a data centre in Germany (EU). In this respect, no transfer to a third country takes place. Legal basis: performance of a contract or your consent (Art. 6(1)(b) and (a), Art. 9(2)(a) GDPR).
For the individual evaluations, food recognition and suggestions, we use the application programming interface of Google Gemini (Google Ireland Ltd. or Google LLC). The transmission takes place technically via a relay server operated by us (at ALL-INKL.COM, Germany), which only passes on the request and does not store it permanently; only the result (e.g. the estimated nutrient values) is stored in your profile. The content you enter (text/photo) and relevant context from your profile (dietary approach, allergies, dislikes/preferences, goal, tracked nutrient and body values, your first name; blood-value notes only if present) are transmitted. The processing may involve a transfer to the USA or to servers outside the EU; Google bases this on the EU Standard Contractual Clauses. We do not sell your data and do not use your health data for advertising.
The legal basis is your explicit consent (Art. 9(2)(a), Art. 6(1)(a), Art. 49(1)(a) GDPR). You grant this actively in the app (during onboarding or before first use of the AI) and can withdraw it at any time (Info tab → "AI processing"). The AI functions are optional; without consent you use the app manually, though the practical scope of functionality depends substantially on the AI functions.
The app currently shows no advertising. Should advertising be integrated in future, this policy will be supplemented accordingly beforehand (network used, data categories, consent/opt-out).
Data is only passed on to the processors engaged to provide the service (hosting, Supabase, Google Gemini, and where applicable a connected health platform (Apple Health / Android Health Connect)) under corresponding contracts, as well as to other League participants insofar as you have explicitly activated this.
We store your data for as long as your account exists. When the account is deleted, the associated data is deleted (see point 9). Server logs are kept only briefly to secure operations.
You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw any consent given at any time. You can delete your account and all associated data directly in the app (Info → Account → "Delete account & data"). You also have the right to lodge a complaint with a data protection supervisory authority (for Munich: the Bavarian State Office for Data Protection Supervision).