Privacy Policy — Relivital
Last updated: 10 November 2026
Scope
This policy explains what the Relivital app ("the app") does with your data. The app is a daily face-exercise marathon by Relivital. The data controller is Vionelle spółka z ograniczoną odpowiedzialnością, ul. Ludwika Idzikowskiego 16/401, 00-710 Warszawa, Poland, support@vionele.com ("we").
Information only. Not medical advice; results vary from person to person.
Using the app as a guest (anonymous profile)
You can use the app without giving us your e-mail. When you first open it with an internet connection, the app creates an anonymous profile for you on our server. It has a random identifier and no name, e-mail or phone number. Your test answers, plan, progress, points and settings are kept on your phone and copied to this profile, so that your points can be counted by our server and so that you can later attach an e-mail without losing anything. Without a connection the app works from your phone and sends the data when a connection is available. A guest has no consent records: consents are recorded from the moment you create an account. An anonymous profile that has no recorded day, points or promo code is removed in a regular clean-up, normally within 60 days after 30 days of inactivity. A profile with progress is kept until you delete it (see "Your choices and your rights"). Deleting the app from the phone does not delete the profile, because the profile is on our server; use "Delete my data" in Settings first.
Information we store when you create an account
An account is created by attaching your e-mail address to your anonymous profile with a one-time code sent to that address; there is no password. Everything you did as a guest stays with the account. If the e-mail address already has an account, the code signs you in to that account and we merge what you did as a guest (credited days, points, promo codes and answers) into it, without replacing anything the account already has. We store:
- name, e-mail address, the app language and, if you enter it, a phone number (optional);
- the creator code, if you typed one;
- your personal invite code and, if you came with a friend's invite code, the link to that friend's account (see "Inviting a friend");
- your test answers and settings, synced from the phone: skin concerns and areas, goals (including a free-text "other goal"), experience, reminder time, distance, style and minutes per day;
- your care data, synced with the account: the cosmetics shelf (the products you add and when you use them; product names are free text that you write yourself), your skin type and your avatar look;
- your progress: credited days (with dates), streak, freezes, points and their history, promo codes issued to you (issue date, status);
- your consents and a log of them: type, granted or withdrawn, time, text version, language and where you gave it.
Our processors also keep technical records: sign-in logs (IP address, device type, time) at Supabase, and the recipient address and delivery status of each e-mail at Resend.
Progress photos and morning marks (only on your phone)
The app can help you take a "before / after" photo once a week and lets you mark how your face looks each morning. These stay on your phone:
- Photos. You take a photo with the camera (or choose one from your library) only after you allow it in the app. The app copies the picture into its own storage on your phone. We do not receive, upload or look at your photos, and they are not used for advertising or to train anything. They are not part of the data synced to your account: only a count of photos reaches the achievements, and usage statistics record that a photo was taken (its number and the programme day), never the picture. Your phone's camera and library permissions can be changed in the system settings.
- Sharing. Only when you press "Share" on the collage screen does the app build one picture of your latest photos and open the system share sheet. It leaves your phone only to the place you choose there. The temporary picture is deleted right after.
- Morning marks. The mark (puffy, tired, usual, fresh) is kept on your phone and is not synced. Usage statistics record only that a mark was made, not which one.
- Backups. On Android the app is excluded from the phone's cloud backup, so the photos are not copied to it. On iPhone the photos can be part of your own device backup (iCloud or a computer backup) if you use one; we have no access to it.
- Deleting. Photos are removed from your phone when you log out, delete your account (or a guest deletes their data), or choose to delete them when you switch the photo permission off in Settings. Uninstalling the app removes them too.
How the information is used and on what basis
- To run the account, sign you in, keep your progress and points, and issue promo codes. Promo codes are issued on our server.
- To send you e-mail with the sign-in code (always) and messages about the marathon and offers (only with your marketing consent).
- To personalise offers, only with your separate personalisation consent.
- To call you by phone, only with your separate consent to calls and only if you gave a phone number. The phone number is not used for anything else, and the app does not send SMS in this version.
- To count how the app is used (see "Services we use").
- Contact export: Vionelle may export contact data (e-mail, name, phone, consents, creator code, progress) for its sales and marketing; only users with the matching consent are used for marketing.
| Purpose | Legal basis |
|---|---|
| Anonymous profile, account, progress, points, promo codes | Contract (Art. 6(1)(b) GDPR) |
| Sign-in security, fraud limits | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing, personalised offers, calls | Your consent (Art. 6(1)(a) GDPR) |
Marketing, personalisation and phone calls are three separate consents, all off by default. You can change each one at any time in Settings. Withdrawing a consent does not affect what was done before.
Points and promo codes
Points expire 90 days after they are earned. "Sklep" opens relivital.pl in your browser; purchases happen on that site, not in the app, and the app does not see them. A promo code you receive is linked to your account. Some codes are lifetime percentage discounts (3, 5, 7 or 10%) that cost no points and do not expire; the server issues them. If you delete your account, the code stays without any link to you and the discount is lost.
Inviting a friend
Every account has a personal invite code. A friend can type it when she creates her account. When the friend has confirmed her e-mail and completed her first day, both of you receive points, in the amount and up to the monthly limit shown in the app; the points work like all other points. We store the link between the two accounts (which code was used, when, whether the reward was paid) and the points added. The person who invited never sees who the friend is: the app shows her only numbers. A friend sees only that she joined with a code. To prevent repeated rewards (the same person, a second account, going over the monthly limit) we also keep a record that holds no name, no e-mail address and no readable account identifier: only a one-way code (HMAC) calculated from the normalised e-mail address with a secret key kept on our server, the status, the date and the number of points. When either account is deleted, the invite code is removed from the record at once; the other person's account stays linked to the record only for as long as that account exists, and when both accounts are gone nothing in it points to anyone. What remains is only the one-way codes, the status, the date and the points. The record is kept for as long as the invitation programme runs; when it ends, we delete it. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Attempts to enter a code are logged for one day to limit guessing.
Notifications
The app uses local reminders on your phone (a daily reminder and a reminder 7 days before points expire). They need your permission and can be turned off in Settings or in the phone settings. The app does not send remote push messages in this version.
Services we use
- Supabase (servers in the EU, Frankfurt): stores the anonymous profile, the account, progress, points, consents, promo codes and sign-in logs. Processor for us.
- Resend: sends e-mail (sign-in codes and, with your consent, messages) and keeps the recipient address and delivery status. Processor for us.
- Amplitude: usage statistics. It receives an install identifier, device type, system, language, approximate location from the IP address, and events (for example days completed) plus your creator code if you entered one. It never receives your e-mail, name, phone or promo code strings.
- The database is hosted in the EU; the operator is Vionelle.
The app has no advertising SDK, does not track you across other apps and does not ask for App Tracking Transparency permission. We do not sell your data.
Your choices and your rights
- Request my data: Settings → "Request my data". We send a copy to your e-mail.
- Delete account: Settings → "Delete account" (a guest sees "Delete my data"). Deleting your account, or a guest's anonymous profile, removes your profile, progress, cosmetics shelf, skin type, avatar look, points, consents and requests from our database, and the data from the phone, including your progress photos and morning marks. Technical logs of our processors and backups are kept for 30 days and then deleted. Usage statistics use a random identifier that is no longer linked to you after deletion. You can also ask on the web page https://app.relivital.pl/delete-account or by e-mail to support@vionele.com.
- You may also ask us to correct your data, restrict or object to its use, receive your data in a portable format (Art. 20 GDPR), withdraw any consent at any time, or complain to the Polish data protection authority (UODO).
Data retention
We keep account data while the account exists, and a guest's anonymous profile while it holds progress (an empty one is removed in a regular clean-up, see above). When you delete the account or the profile its data is removed as described above. The pseudonymous invitation record described under "Inviting a friend" is the one exception: it stays after deletion while the invitation programme runs. Backups and the technical logs of our processors are kept for 30 days.
Children's privacy
The app is not directed at children under 16. If you believe a child gave us data, write to us and we will delete it.
International use
Our database is in the EU (Frankfurt). Some providers may process data outside the EU.
Changes
We may update this policy. The date above shows the latest version. Consents are asked again when their wording changes.
Contact
Vionelle sp. z o.o., ul. Ludwika Idzikowskiego 16/401, 00-710 Warszawa, support@vionele.com