Privacy Policy
Last updated 14 August 2026
This policy explains what personal data MYVU handles, why, and what rights you have over it. It covers the MYVU web platform and the MYVU mobile app.
Who we are
MYVU is operated by MYDIS(“we”, “us”). For questions about this policy or to exercise any right described below, contact admin@myvu.ai.
Two different roles
This matters more than anything else on this page, so it comes first.
- Account data — we are the controller. Your name, email address and the settings on your account exist because we need them to run the service, and we decide how they are handled.
- Camera footage and detections — we are the processor. The farm or business operating the cameras is the controller. They decide where cameras point, who works in front of them, and how long evidence is kept. We process that material on their instructions and do not use it for our own purposes.
If you are a worker who appears on a MYVU camera and you want to exercise your rights over that footage, your employer is the right first point of contact. If you cannot reach them, write to us and we will help you identify the controller.
What we collect
| Data | Why |
|---|---|
| Name, email address, profile photo | To identify your account, address you in the interface, and show colleagues who acknowledged an alert. |
| Password (hashed) | To sign you in. Stored as a one-way hash — we cannot read it. |
| Organisation, site and role assignments | To decide which farms, cameras and alerts you are permitted to see. |
| Device push token, platform, device name | To deliver alert notifications to your phone. Removed when you sign out or notifications are disabled. |
| Detection events — time, camera, detector, and a still frame or short clip | To raise an alert and evidence it. Frames may show people who were in view at the time. |
| Audit records — action, account, time, IP address | Security, and to answer “who changed this setting” and “who acknowledged that alert”. |
| Technical logs | To keep the service running and diagnose faults. Retained briefly. |
What we do not collect
- No audio. MYVU does not record sound. The mobile app does not request microphone access.
- No location tracking.The app does not request or record your device’s location.
- No facial recognition. The detectors identify that a person is present, and whether they are wearing approved garments. They do not identify who a person is and we do not build biometric templates.
- No advertising, no data sales. We do not sell or share personal data with advertisers or data brokers, and there is no third-party advertising or tracking SDK in the app.
Where footage goes
Detection runs on a computer physically located at the farm. Continuous video is processed there and is not uploaded. What leaves the site is limited to the evidence attached to an event: a still frame, sometimes a short clip, plus the metadata describing it.
Live video you watch in the app is streamed from the site through our servers to your device for the duration you are watching it, and is not stored in the process.
Legal bases
- Contract — providing the service to the organisation you belong to, including your account and its notifications.
- Legitimate interests — keeping the platform secure, preventing abuse, and maintaining audit records. We have considered these against your interests and rights.
- Legal obligation — where we must retain records to comply with law.
The legal basis for monitoring in the workplace itself is the controller’s to establish. Employers using MYVU are responsible for informing their workers that cameras are in use, for the signage and consultation their jurisdiction requires, and — in the UK and EU — for a Data Protection Impact Assessment where one is needed.
How long we keep it
- Account data — for as long as your account exists, then deleted or anonymised.
- Detection events and evidence — for the retention period configured by the controlling organisation. Where none is set, material is kept until deleted by that organisation.
- Sign-in tokens and one-time codes — cleared within 24 hours of use or expiry.
- Audit records — retained for security and accountability.
Who we share it with
We use a small number of providers to run the service, each bound by contract to process data only on our instructions:
- Cloud hosting and database infrastructure.
- Object storage for evidence images and clips.
- Push notification delivery — Expo, and through them Apple Push Notification service and Firebase Cloud Messaging. Notification content includes the alert headline and camera name.
- Email delivery for sign-in, invitations and alert emails.
We do not share personal data with anyone else unless you ask us to, or we are required to by law.
International transfers
Data is stored in the United Kingdom and the European Economic Area where possible. Some providers named above may process data elsewhere; where they do, transfers are covered by the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision.
Security
- Encrypted in transit throughout.
- Passwords stored as one-way hashes; sign-in supports a one-time code step.
- Access to farm data is scoped per organisation, per site and per module, and every change is audited.
- Evidence images are served through short-lived, single-user tokens rather than public links.
Your rights
Under UK and EU data protection law you may request access to your personal data, correction of it, deletion, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to admin@myvu.ai and we will respond within one month.
For footage, requests are passed to the organisation that operates the cameras, as they are the controller of that material.
You may also complain to the UK Information Commissioner’s Office at ico.org.uk, or your local supervisory authority.
The mobile app
The MYVU app asks for the following, and only these:
- Notifications — to deliver alerts. Decline and the app still works; you will not be paged.
- Photo library — only when you choose a profile picture, or save a frame from a live view. The app reads nothing else from your library.
You can withdraw either at any time in your device settings, and turn notifications off per detector inside the app.
Children
MYVU is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If we change this policy we will update the date at the top, and tell you in the app or by email where the change is significant.