Privacy Policy
VIV · vivfem.io Last updated: May 2026 · Version 1.0
Who we are
VIV is a hormonal performance intelligence platform for women. VIV is currently operated as a trading name by its founder, pending formal legal incorporation within the European Union.
Data controller: VIV (vivfem.io) Contact for all data matters: estefania@muzoholding.com Supervisory authority:Der Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
What this policy covers
This policy explains what personal data VIV collects, why we collect it, how we use and protect it, how long we keep it, and what rights you have over it. We have written it in plain language because you deserve to understand exactly how your data is handled — not to decode legal text.
This policy applies to the VIV mobile application and website (vivfem.io).
The data we collect and why
Health and cycle data, our highest protection tier
This is the most sensitive data VIV holds. We collect it only with your explicit consent and use it only to generate your personal performance recommendations.
We collect:
Menstrual cycle dates, cycle length, and period length
Your cycle phase (calculated from your cycle data)
Reproductive health status (natural cycle or hormonal contraception affected) — collected to confirm eligibility for the app
Symptoms and energy levels (from check-ins)
Recovery scores and mood logs (from check-ins)
Sleep patterns, sleep quality, and wake recovery (from onboarding and check-ins)
Stress and psychological state indicators (from onboarding and check-ins)
Digestive health symptoms such as bloating, reflux, constipation, or sensitivity (from onboarding)
Body metrics: weight and height (from onboarding)
Legal basis: Article 9 GDPR, your explicit consent. You provide this when you tick the health data consent checkbox on the app's first screen. You can withdraw this consent at any time in Settings → Privacy.
Note on eligibility screening: If you indicate you are currently pregnant, postpartum, or in menopause during onboarding, VIV is not currently suitable for you. In this case, your answer is used only to show you this information, it is not stored in our systems.
Behavioral and performance data
We collect this to personalise your training, nutrition, and recovery guidance.
We collect:
Training frequency, duration, type, and time of day
Training goals and current priorities
Post-training physical sensations (muscle soreness, fatigue, heaviness)
Dietary restrictions, allergies, and food preferences
Eating patterns, meal frequency, and meal consistency
Daily activity level outside of training
Sunday check-in responses
Legal basis: Article 6(1)(b) GDPR, necessary for the performance of our service, and Article 6(1)(f) our legitimate interest in providing you with accurate, personalised recommendations.
Identity and account data
We collect:
Your preferred name
Your date of birth (used to confirm you are 16 or older, and to inform age-related recommendations)
Your email address
Basic device information
Legal basis: Article 6(1)(b) GDPR — necessary to provide you with an account and deliver the service.
Age requirement: VIV is for users aged 16 and older. If you are under 16, we do not collect or store any of your data.
Analytics data
We collect anonymised usage data (which screens you visit, which features you use) to understand how the app is performing and where we can improve. This data uses a pseudonymous identifier — it cannot be linked back to your name or email address.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in improving the product.
How long we keep your data
When your data is deleted, we may first convert it into a fully anonymised form (with all identifying information removed) for use in improving our recommendation engine. Anonymised data cannot be linked back to you in any way.
Who we share your data with
We do not sell your data. We do not share your data with advertisers. We share your data only with the vendors who help us run VIV, and only to the extent necessary to provide the service.
Each vendor operates under a Data Processing Agreement with VIV. We do not share your data with any other third parties without your explicit consent.
Your intelligence contribution (optional)
If you choose to opt in, your fully anonymised data may be used to train VIV's shared intelligence engine — improving recommendations for all users on the platform. This is entirely optional. Opting in or out has no effect on your personal experience.
You can change this preference at any time in Settings → Privacy.
Legal basis: Article 9 GDPR, your explicit consent (separate from your main health data consent).
Your rights
Under GDPR, you have the following rights over your data:
Right to access: You can request a copy of all data we hold on you at any time. Use the "Download my data" button in Settings → Privacy, or email estefania@muzoholding.com.
Right to correction: If any data we hold is inaccurate, you can correct it directly in the app or by contacting us.
Right to deletion: You can delete your account and all associated data at any time via Settings → Privacy → Delete my account. Your data is permanently deleted within 30 days.
Right to withdraw consent: You can withdraw your health data consent at any time in Settings → Privacy. This will mean VIV can no longer generate personalised recommendations for you.
Right to data portability: You can request your data in a machine-readable format via Settings → Privacy → Download my data.
Right to object: You can object to processing based on legitimate interest by contacting estefania@muzoholding.com.
Right to lodge a complaint: If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information (berliner-datenschutz.de).
To exercise any of your rights, contact us at estefania@muzoholding.com. We will respond within 30 days.
Data security
We take reasonable technical and organisational measures to protect your data. Your data is stored on encrypted infrastructure. Access to personal data is restricted to authorised personnel only. In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay.
Changes to this policy
When we make material changes to this policy, such as collecting new types of data or changing how we use your data, we will notify you in the app and ask for your renewed consent where required. The version number and date at the top of this page will be updated.
Contact
For any questions about this policy or your data: estefania@muzoholding.com
VIV · vivfem.io