Privacy policy

Vigo is run by a sole trader in the UK. We decide how your personal data is used, so we’re its “controller” under UK data protection law (the UK GDPR and the Data Protection Act 2018).

For anything about your data, email hello@askvigo.com.

• Your account: your email address, and your name and picture if you sign in with Google.
• Your mobile number, and the code you text to confirm it.
• What you tell us when you set up: your goals, your week, how you like to be coached, and for each specialist you choose, things like your training and kit, the food you eat, allergies and intolerances, and what you’d like help with.
• Health information: injuries, medical conditions, medication, supplements, health numbers such as weight, and how you’re feeling, sleeping and coping.
• Your messages: every text you send your coaches and every message they send you.
• What your coaches keep track of: your logged workouts, meals and measurements (like weight, sleep and mood), facts they remember about you, your plans and your weekly reviews.
• Your settings: your crew, your message times and your timezone.
• Payments: whether you’ve paid and your subscription. Stripe holds your card details; we never see them.
• Safety records: when a message you sent suggested you might be at risk (see below).
• Technical information: our hosting provider’s records of requests to our website, such as IP addresses, used to keep it secure and working.

Some of this, like your health and, if you tell us, your religious beliefs, is “special category” data, which the law protects more strongly. We only use it with your explicit consent.

• To coach you, and run your account and subscription. This is to provide the service you’ve asked for (our contract with you).
• To use your health information, and anything else in a special category, for your coaching. You give your explicit consent for this when you sign up. You can withdraw it at any time by asking us to delete your account, though we can’t coach you without it.
• To take payments and keep financial records. This is part of our contract with you, and the law requires us to keep tax records.
• To keep you safe (see below), keep Vigo secure, and fix and improve it. This is in our legitimate interests, and where someone’s life may be at risk, in their vital interests.

We don’t sell your data, share it for advertising, or send you marketing without your permission.

Your coaches are AI. To reply to you and write your plans, what you’ve shared (your profile, recent messages and logs) is sent to AI models run by our providers below, which write the reply. Separate AI checks decide which specialist should help, what to log, and whether a reply is safe and on topic.

This is all to coach you. None of it makes decisions with legal or similarly significant effects on you. Our AI providers handle your data to provide their service to us, under contract.

Every message you send is checked automatically for signs that you might be at risk of harming yourself. If it looks that way, you get a reply with where to find help straight away, your scheduled messages pause for 24 hours, and we keep a record that it happened.

We’re also alerted by text, so a person knows. The alert says who it was, not what you said.

If you're struggling or in crisis, you don't have to wait: call Samaritans free on 116 123, text SHOUT to 85258, call NHS 111 and choose option 2, or call 999 if you're in danger.

These companies handle personal data for us, only to provide their service, and under contracts that require them to keep it safe:

• Anthropic: the AI models (Claude) that write your coaches’ replies and plans.
• SubQ: the AI that makes quick decisions about your messages, such as which specialist should help.
• Sendblue: sends and receives your iMessages.
• Clerk: accounts and signing in.
• Stripe: payments and billing.
• Railway: hosts our website, servers and database.
• Google: only if you choose to sign in with Google.

Apple carries iMessages between your phone and our messaging provider, under Apple’s own terms. We may also share data if the law requires it, or to protect someone’s safety.

Some of these companies are based in, or store data in, the United States. When your data goes outside the UK, it’s protected by the safeguards UK law requires, such as the UK Extension to the EU-US Data Privacy Framework or the UK’s International Data Transfer Agreement.

• While you have an account, we keep what you share so your coaches remember you.
• If you cancel, we keep it so you can pick up where you left off if you come back, until you ask us to delete it.
• When you ask us to delete your account, we permanently delete your profile, messages, logs, memories, plans, reviews and safety records.
• We keep payment and invoice records for six years, as tax law requires.

You have the right to:

• get a copy of your data
• have it corrected
• have it deleted
• limit or object to how we use it
• get it in a form you can take elsewhere
• withdraw your consent at any time

To do any of these, email hello@askvigo.com from the email address on your account. We’ll reply within a month.

If you’re not happy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We only use cookies that the website needs to work: Clerk’s, to keep you signed in, and Stripe’s, on its payment pages, to take payments safely and prevent fraud. We don’t use analytics or advertising cookies.

Your data is sent over encrypted connections, and only the people who run Vigo can get at it, when they need to. iMessages are protected by Apple’s encryption on their way between your phone and our messaging provider, which then passes them to us.

Vigo is only for adults. We don’t knowingly collect data from anyone under 18, and we’ll delete it if we find we have.

If we change how we use your data, we’ll update this policy and, if the change matters, tell you first. The date at the top shows when it last changed.