When you create an account or sign in, we may collect:
We do not collect or store passwords from third-party login providers.
You may choose to enter:
This data is stored only for your personal use within the app and to generate personalised insights.
If you choose to connect supported services, we may collect health-related data such as:
If you connect Garmin Connect, VertigoMe collects the following health metrics through Garmin's authorised Health API — only for metrics you enable, and only while the connection is active:
How Garmin data is used, processed, stored, and shared. Garmin-sourced metrics are used to calculate your personalised vestibular risk score and to surface your trigger patterns, which is processed on our secure servers. If you use the premium AI features, Garmin-derived health values are also included in the data used to generate your daily insights and to answer your questions in the AI Chat Assistant. Garmin data is stored in our Supabase (PostgreSQL) database hosted in the European Union, encrypted in transit and at rest, and isolated to your account with row-level security. The only third party that ever receives Garmin-derived data is OpenAI, which processes it to produce those AI daily insights and chat answers. Garmin data is never sold, never used for advertising, never used to train any AI model, and is not shared with any other third party. You can disconnect Garmin at any time, which stops all further collection.
This data is only collected if you explicitly enable the integration and grant the required permissions. You can disconnect any integration at any time.
If you grant permission, VertigoMe may collect the following device-based metrics:
Each of these requires explicit user permission and can be individually disabled at any time in the app's Data Settings.
If enabled, VertigoMe collects approximate daily location data to retrieve local weather conditions and associate environmental factors with spin patterns. Location collection is optional, requires explicit permission, can be disabled at any time, is stored at daily resolution (not continuous tracking), and is used solely to fetch weather data for your area.
If you log food or connect a nutrition source, we may process food names, meal types, macro and micronutrient values, and vestibular-relevant exposure flags (tyramine, alcohol, gluten, caffeine). Nutrition data is used to identify dietary trigger patterns.
Your data is used to authenticate your account, store and display your spin and health history, calculate personalised risk scores and trigger analysis, generate AI-powered daily insights (premium), synchronise enabled third-party health data, and improve app functionality and reliability.
VertigoMe uses artificial intelligence, provided by OpenAI, for a few features. To generate personalised daily insights (premium), we aggregate and summarise your health data and send that summary to OpenAI's API to produce actionable advice. To power voice and text spin logging, the words you dictate or type are sent to OpenAI so your entry can be interpreted. The AI Chat Assistant (premium) sends your question together with the relevant recent health data from your account — including any connected wearable metrics such as Garmin data — to OpenAI so your question can be answered.
Important: For daily insights, only aggregated health values are sent — never your name, email, or account information. In all cases your data is never sold, used for advertising, or used to train the provider's models — OpenAI states that data submitted through its API is not used to train its models.
If you share with a practitioner: an AI summary by your practitioner only happens if you switch on Allow AI summaries in the app. The parts of your board they select are then sent to OpenAI, which can include notes you wrote. Your name is removed first.
Appointments with a practitioner: if you share with a practitioner, or ask one for an intro call, appointment times that either of you suggests, and any note added, are stored so you can both see them, until either account is deleted or you ask us to remove them. If your practitioner uses practice software such as Cliniko, an accepted time is booked there, and your sessions from it are shown in the app; these are fetched when you open the page and we do not store them. If your practitioner saves a video call link, it opens Google Meet, Microsoft Teams, Zoom or Webex, whose own privacy terms apply. We do not see or record calls.
VertigoMe supports login via email and password, Google Sign-In, Facebook Login, and Apple Sign-In. When using a third-party provider, authentication is handled securely by the provider and Supabase. VertigoMe receives a session token and basic profile identifier only — we never receive access to your provider password.
All data is stored securely using Supabase, a managed backend platform built on PostgreSQL, hosted in the European Union. Security measures include:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Backend, database, authentication | All app data (encrypted) |
| RevenueCat | Subscription management | User ID, purchase status |
| OpenAI | AI daily insights, voice/text log parsing, and the AI chat assistant; summaries your practitioner asks for, if you allow them | Aggregated health summaries; the entries you dictate or type; for chat, your question plus recent health data (including connected Garmin metrics) |
| Google / Facebook / Apple | Authentication (optional) | Session token only |
| Garmin | Health metrics (optional) | Health data via authorised API |
| Open-Meteo | Weather data | Approximate location coordinates |
Each third-party service is governed by its own privacy policy. VertigoMe only accesses the minimum data required for functionality.
VertigoMe uses AI-powered systems internally to enhance your experience. These systems are integral to the app's core functionality and include:
| AI Feature | Purpose | Data Used |
|---|---|---|
| Voice Parsing | Extracts spin details (severity, timing, symptoms, medicines, position at onset) from spoken or typed descriptions | Your voice/text input for that session, sent to OpenAI to interpret |
| Risk Score & Outlook | Calculates a live vestibular risk percentage and 7-day outlook based on your combined health data | Your sleep, HRV, weather, cycle, and trigger data (on-device and server-side) |
| Smart Recalibration | Analyses your spin history to suggest trigger adjustments, threshold changes, and new patterns | Your aggregated spin and health history (no personal identifiers sent externally) |
| AI Chat Assistant | Answers plain-English questions about your personal spin data (premium feature) | Your question plus recent health data from your account (including connected Garmin metrics), sent to OpenAI |
| Food Risk Classification | Identifies tyramine, gluten, and alcohol content in logged foods | Food names and nutritional data from the USDA database |
| Daily Insights | Generates personalised daily recommendations based on your current data (premium feature) | Aggregated health summaries |
| AI Companions | Curates articles relevant to your specific vestibular profile and triggers | Your trigger and pattern profile (anonymised) |
Important: Your personal health data is never used to train AI models. All AI processing is performed on secure servers via encrypted connections. AI-generated insights are informational only and do not constitute medical advice. You should always consult a healthcare professional for medical decisions.
| Permission | Purpose | Required? |
|---|---|---|
| Internet | Core app functionality | Yes |
| Location (approximate) | Weather data for trigger correlation | Optional |
| Microphone | Ambient noise level sampling | Optional |
| Health Connect | Sleep, heart rate, activity data | Optional |
| Notifications | Reminders and check-in prompts | Optional |
| Usage Stats | Screen time tracking | Optional |
All optional permissions can be granted or revoked at any time through your device settings or the app's Data Settings screen.
Your data is retained as long as your account remains active, or until you request deletion. If you disconnect a third-party service, no new data will be collected from that provider. Previously collected data remains unless you delete it.
You have full control over your data.
To request complete deletion of your account and all associated data, visit our account deletion page or email us directly:
📧 help@vertigome.com — Subject: "VertigoMe Data Deletion Request"
Include the email address used to sign in. Your request will be processed within 30 days.
You may request a copy of all your stored data by contacting us at the email address above.
Your data is stored on servers within the European Union. If you access VertigoMe from outside the EU, your data will be transferred to and processed in the EU. For the AI insights feature, aggregated (non-identifying) health summaries may be processed by OpenAI's servers in the United States.
VertigoMe is not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it.
We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. If we make material changes, we will notify you through the app.
If you have questions or concerns about this Privacy Policy or your data:
VertigoMe is run by Andlane Ltd, a company registered in England and Wales under number 16945714, registered office Flat 19 Milliner House, Hortensia Road, London SW10 0QB. Andlane Ltd is the data controller for your account and your diary.
We use your account details because we need them to provide the app you asked for. We use your health data only with your consent. You can withdraw that consent at any time by changing your settings, ending a practitioner connection or deleting your account; this does not affect what happened before you withdrew it.
You can ask us for a copy of your data, have it corrected or deleted, limit or object to how we use it, or receive it in a portable format, by writing to help@vertigome.com. We answer within one month. You can also complain to the Information Commissioner's Office in the UK, or to the data protection authority in your own country.
Some companies we use are outside the UK and EU, for example OpenAI in the United States. Those transfers rely on recognised safeguards, such as adequacy decisions or standard contractual clauses.