Privacy Policy

This policy describes how Gilles Bertheau (“we”, “us”) handles information when you use the Vianto website and application (the “Service”). We operate from Switzerland. The Service is offered globally; many customers are in the United States and elsewhere.

Vianto provides educational wellness information. We are not your healthcare provider. This policy does not describe a doctor-patient relationship.

• Account data: email and credentials when you sign up (processed by our authentication provider).
• Health-related inputs you choose to provide: for example bloodwork files, extracted lab values, onboarding answers, and similar content you upload or enter.
• Technical data: basic device/browser data, cookies or similar technologies as needed for login and security, and diagnostics our hosting providers log.
• Payment data: payments are processed by Stripe; we do not store full card numbers on our servers.

Some information may be stored in your browser (for example local storage or session storage) so the app can work offline-first or remember your session. You can clear it via your browser settings or in-app controls where offered.

• Provide, operate, and improve the Service.
• Generate educational content based on data you submit (including automated analysis).
• Process payments and prevent fraud.
• Respond to support requests sent to vialtohealth@gmail.com.
• Comply with law and protect rights and safety.

Before any lab image, extracted biomarker value, onboarding answer, or coach chat message is transmitted to the AI providers listed below, you must explicitly accept the in-app AI data-use consent screen. That screen names the providers, describes what data is sent and for what purpose, and confirms that your data is not used by those providers to train their models. If you do not accept, the app will not send any data to these providers and AI-powered features (lab extraction, educational pillars, protocol content, the coach) will be unavailable.

We use third parties that process data on our behalf, such as:

• Supabase: authentication, database, and related infrastructure (processing may occur in the United States and other regions they use).
• Stripe: payment processing.
• Hosting: for example Vercel or similar for the web application.

AI processors. To generate the educational content the app produces, we send data to the AI providers listed below. Your data is not used by these providers to train their models, under the API terms currently in force. Each provider retains data only for short operational windows for abuse monitoring, per its current API terms.

• Anthropic (Claude). Processor for: optical-character recognition of the lab image or PDF you upload, generation of educational priority pillars, generation of detailed educational protocols, and generation of coach replies. Data sent to Anthropic: the lab image or PDF, extracted biomarker values, the onboarding survey answers, and the messages you send to the coach. Anthropic privacy policy: anthropic.com/legal/privacy.
• OpenAI. Processor for: converting the voice input you speak into text (speech-to-text) when you use the voice feature. Data sent to OpenAI: the short audio recording of what you say. OpenAI does not use data submitted through its API to train its models. OpenAI privacy policy: openai.com/policies/privacy-policy.

Each provider's use of data is governed by its own privacy policy and our agreement with it.

If you are in the European Economic Area or the UK, we typically rely on performance of a contract (to provide the Service you request) and, where applicable, legitimate interests or consent (for example where required for certain cookies or marketing). Contact vialtohealth@gmail.com to exercise rights under GDPR or UK GDPR (access, correction, deletion, restriction, portability, objection, complaint to a supervisory authority).

We keep information as long as your account is active, as needed to provide the Service, and as required by law (e.g. tax or accounting). You may request deletion of your account and associated data by contacting vialtohealth@gmail.com; we will complete deletion within a reasonable time unless we must retain certain records by law.

You may have rights to access, correct, delete, export, or object to certain processing depending on where you live. Contact vialtohealth@gmail.com. We may need to verify your request.

Because we operate from Switzerland and use providers such as Supabase and Stripe, your information may be processed in the United States, Switzerland, the European Union, and other countries where those providers operate. Where required by law, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) for transfers from the EEA/UK/Switzerland to other countries.

The Service is not directed to children under 18. Do not use it if you are under 18.

We use reasonable measures to protect information. No method of transmission or storage is 100% secure.

We may update this policy. We will post the new version and update the “Last updated” date.

Questions: vialtohealth@gmail.com