Privacy policy

How Lymity collects, uses, stores and protects personal data when you use our website and app.

Last updated: May 2026

These documents are provided for general information. They are not legal advice. You should review them with a qualified adviser before relying on them for compliance purposes.

Who we are

Lymity ("we", "us", "our") operates the Lymity website at lymity.com and the Lymity health tracking application. For data protection purposes, Lymity is the data controller of personal data described in this policy.

Contact: hello@lymity.com

What this policy covers

This policy applies to personal data we process when you visit our public website, browse the compound library, request early access, create an account, or use the Lymity app. It does not cover third-party websites you reach through links on our service, such as affiliate retailers.

Personal data we collect

Depending on how you use Lymity, we may collect:

  • Account details, such as your email address and authentication information
  • Profile and preference data you provide during onboarding or in settings
  • Health and wellness data you log or sync, including nutrition, sleep, activity, body composition, supplement and compound use, skin tracking and related notes
  • Usage data, such as app interactions and feature usage
  • Technical data, such as IP address, browser type, device information and server logs when you use the website or app
  • Communications you send to us, including support requests

Some of the data described above may be classified as special category data under UK data protection law because it relates to health.

How we use your data

We use personal data to:

  • Provide, operate and improve the Lymity website and app
  • Create and manage your account
  • Display your tracked data, insights and reminders
  • Sync data from services you connect, such as Apple Health, where you choose to enable this
  • Maintain security, prevent abuse and troubleshoot issues
  • Respond to enquiries and support requests
  • Comply with legal obligations

We rely on different lawful bases depending on the processing, including performance of a contract, consent, legitimate interests and legal obligation. Where we process health-related data, we generally rely on your explicit consent or another lawful basis permitted under UK GDPR for special category data.

How we share data

We do not sell your personal data. We may share data with service providers who help us run Lymity, such as:

  • Hosting and infrastructure providers
  • Database and authentication providers, including Supabase
  • Analytics or error monitoring providers, if we use them in future
  • Professional advisers where reasonably required
  • Authorities or regulators where required by law

If you use third-party links, such as affiliate product links, those third parties may collect information under their own privacy policies.

International transfers

Some of our service providers may process data outside the United Kingdom. Where this happens, we aim to use appropriate safeguards, such as standard contractual clauses or equivalent protections, where required by law.

How long we keep data

We keep personal data only for as long as needed for the purposes described in this policy, unless a longer retention period is required by law. Account and health tracking data is generally kept while your account remains active. You may request deletion of your account and associated data, subject to legal retention requirements.

Your rights

Under UK data protection law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request erasure of your data in certain circumstances
  • Object to or restrict certain processing
  • Request data portability where applicable
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise your rights, contact us at hello@lymity.com. We will respond within the time limits required by law.

Security

We use technical and organisational measures designed to protect personal data, including access controls, encrypted connections and provider security features. No online service can be guaranteed completely secure.

Children

Lymity is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do. Significant changes may also be communicated through the app or by email where appropriate.

Questions? Contact us at hello@lymity.com. See also our privacy policy, terms of service and cookie policy.