Privacy Policy
Last updated: August 18, 2026
IylaVista (“IylaVista,” “we,” “us”) provides a white-label text coaching service for clinics (“Iyla”) and a clinic visibility layer (“Vista”). This policy explains what we collect, how we use it, how we protect it, and how to reach us.
Who this service is for
IylaVista is a business service for clinics. We do not market to patients. Patients who text with Iyla do so because their clinic enrolled them, under that clinic’s direction.
Information we collect
- Clinic contact details you give us (name, email, clinic name, phone).
- Demo-line texts, including the word START, food descriptions, photos you send, and replies.
- Email addresses submitted to receive a sample Friday report.
- Patient messages and enrollment data when a clinic uses Iyla under a signed agreement and Business Associate Agreement (BAA).
- Basic website usage (pages viewed and button taps) through a privacy-light analytics tool. We do not use advertising cookies or sell visitor profiles.
How we use information
- To run the demo and show you what patients would see.
- To send a sample Friday report when you ask for one.
- To provide Iyla and Vista to a clinic that has enrolled, including routing clinical mentions to that clinic.
- To operate, secure, and improve the service.
- To meet legal, carrier, and 10DLC requirements for SMS.
SMS/Text Messaging
SMS/Text Messaging. If you opt in to receive text messages from a coaching program powered by IylaVista, we collect your mobile phone number and the contents of your message exchanges in order to provide the service. We do not sell, rent, or share your mobile phone number or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to deliver the messages (e.g., our SMS service provider) or as required by law. Message frequency varies, typically 1–4 messages per day for patient coaching programs, and up to approximately 10 total messages for the demo program. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. Patient information is processed on behalf of, and under the direction of, the patient's clinic.
HIPAA and clinic patient data
When we handle patient messages for a clinic customer, we do so as a service provider under that clinic’s direction and a signed BAA. That information is treated as protected health information. We do not use it to market to patients or to compete with the clinic.
Sharing
We share information only with vendors needed to run the service (for example email delivery, SMS delivery, hosting) under contracts that limit their use; with the clinic that owns the patient relationship; or if the law requires it. We do not sell personal information.
Security
We use reasonable administrative, technical, and physical safeguards to protect information. No method of transmission or storage is completely secure.
Retention
Demo texts and sample-report emails are kept only as long as needed to run the demo, follow up if you ask, and meet legal or carrier rules. Clinic customer data is retained per the clinic agreement and deleted or returned when that agreement ends, except where we must keep a record.
Your choices
Reply STOP to end SMS, or HELP for help. Use the unsubscribe link in a sample Friday Pulse email to stop those emails. Email hello@iylavista.com to ask for a copy of your information, a correction, or deletion of demo or marketing emails.
Children
IylaVista is not directed at children under 13. We do not knowingly collect their information.
Changes
If we update this policy, we will post the new date on this page.
Contact
IylaVista, Monterey, California. hello@iylavista.com