This Privacy Policy explains how Myfitsociety (“Myfitsociety,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our websites, mobile applications, features, and related services collectively referred to as the “Service.”

It also explains the choices and rights that may be available to you.

By using the Service, you acknowledge the practices described in this Privacy Policy.

1. WHO WE ARE

Myfitsociety provides fitness, nutrition, wellness, activity tracking, community, artificial intelligence, and related digital services.

For privacy-related questions or requests, contact:

Myfitsociety
Jakarta, Indonesia
[email protected]

2. INFORMATION WE COLLECT

Depending on how you use the Service, we may collect information including:

Account Information

This may include:

name;
username;
email address;
profile photo;
phone number, where provided;
account identifiers;
authentication information; and
account settings.

Profile and Personalization Information

You may provide information such as:

age or date of birth;
gender;
height;
weight;
fitness level;
goals;
preferences; and
other information used to personalize the Service.

Fitness, Wellness, and Health-Related Information

Depending on the features you choose to use, we may process information such as:

workouts and exercise activity;
steps;
running or cycling activity;
calories and nutrition information;
food entries;
weight history;
body measurements;
body fat information;
progress information;
sleep information;
fasting information;
menstrual cycle information;
activity and fitness information from connected services;
heart rate or other activity-related information made available through a connected service; and
information you voluntarily provide to AI or personalization features.

Some of this information may be considered health information, sensitive personal information, or special category data under applicable law.

3. PHOTOS, IMAGES, AND OTHER CONTENT

Depending on the features you use, you may upload or provide:

profile photos;
food photos;
progress photos;
body photos;
photos included in community posts;
images used for AI-powered analysis; and
other content you choose to submit.

Photos used solely for certain AI analysis may be processed temporarily and may not be retained after the analysis is completed unless retention is necessary to provide the requested feature, investigate an error, protect the Service, or comply with applicable law.

Other photos that you choose to save to your account, profile, progress history, or community features may remain stored as part of your account until deleted or otherwise handled in accordance with this Privacy Policy.

4. AI AND AUTOMATED FEATURES

Myfitsociety may use artificial intelligence and automated systems to provide features such as:

food recognition;
nutritional estimates;
body composition estimates;
calorie and macronutrient targets;
workout recommendations;
weight-management recommendations;
fasting recommendations;
menstrual cycle predictions;
AI Coach responses; and
other personalized features.

Depending on the feature, information may be processed using service providers such as Google Cloud Vertex AI or OpenAI.

For example, an AI feature may process an image or information such as age, gender, weight, height, fitness goals, body composition information, or text that you voluntarily provide.

We seek to limit information provided to AI model providers to what is reasonably necessary for the applicable feature.

For AI Coach processing, we do not intentionally provide direct account identifiers such as your name, email address, phone number, or Myfitsociety user ID to AI model providers.

However, information you voluntarily enter into an AI feature may itself contain personal information. You should avoid including information that is unnecessary for your request.

AI outputs may be incomplete or inaccurate and should not be treated as medical advice.

5. INFORMATION FROM CONNECTED FITNESS SERVICES

If you choose to connect a supported third-party service, Myfitsociety may receive information authorized through that connection.

Depending on the integration, this may include information from services such as:

Android Health Connect;
Strava;
Garmin; or
other supported fitness or activity services.

The categories of information received depend on the permissions you grant and the functionality of the applicable integration.

We do not access information from a connected service beyond the permissions and functionality made available through that connection.

You can generally disconnect a connected service through Myfitsociety or the third-party service.

6. LOCATION INFORMATION

Myfitsociety may process location information for features that require it.

For example, precise device location may be used while an outdoor running or cycling activity is active in order to provide activity-related functionality.

Where supported, background location may be processed while an applicable activity is actively being tracked.

We may also process:

country information derived from an IP address;
city or region information you provide;
location information selected through a place-search feature; and
location information you voluntarily attach to community content.

We do not use precise workout location information for targeted advertising.

7. DEVICE, LOG, AND TECHNICAL INFORMATION

When you use the Service, we may automatically collect technical information such as:

IP address;
device identifiers;
operating system;
browser or application version;
device type;
language;
network information;
login information;
timestamps;
diagnostic data;
crash and performance information;
security logs; and
interactions with features of the Service.

We may use this information to operate, secure, troubleshoot, analyze, and improve the Service.

8. ANALYTICS AND ADVERTISING TECHNOLOGIES

We may use analytics and advertising technologies to understand how the Service is used, measure performance, attribute marketing, prevent fraud, and support advertising.

Depending on the platform and applicable consent requirements, these technologies may include services such as:

Firebase Analytics;
Google Tag Manager;
Google AdSense;
Google Mobile Ads;
Meta Pixel;
Meta Conversions API; and
similar analytics or advertising technologies.

Information processed for these purposes may include limited device information, identifiers, IP-related information, product interaction information, advertising interaction information, or transaction-related event information.

We do not intentionally provide health, fitness, menstrual, body measurement, nutrition, food, progress photo, or AI conversation content to advertising platforms for targeted advertising.

Where required by law, non-essential analytics or advertising technologies are used only after the required consent or another valid legal basis has been established.

For more information about web tracking technologies, see our Cookie Policy.

9. PURCHASE AND PAYMENT INFORMATION

When you make a purchase, we may process information relating to:

the product or subscription purchased;
price;
currency;
transaction status;
billing period;
renewal status;
payment provider;
refunds;
chargebacks; and
transaction or payment identifiers.

Payment card or bank information may be collected and processed directly by the applicable payment provider, app store, financial institution, or Merchant of Record.

Myfitsociety may receive limited information needed to confirm, administer, reconcile, refund, investigate, or support the transaction.

For some international website purchases, Cleeng B.V. may act as Merchant of Record.

Apple App Store and Google Play independently process purchases made through their respective platforms according to their own privacy practices.

10. COMMUNITY AND COMMUNICATION FEATURES

The Service may allow users to:

create profiles;
post content;
upload photos;
comment;
follow other users;
send direct messages; and
interact with community features.

Information you make public through a profile, post, comment, or other public feature may be visible to other users.

Direct messages are intended for selected recipients but should not be treated as end-to-end encrypted communications unless we expressly state otherwise.

We may process community content and communications as reasonably necessary to provide the feature, respond to reports, investigate abuse, enforce our Terms, protect users, and comply with law.

11. HOW WE USE INFORMATION

We may use information to:

create and manage accounts;
provide the Service;
personalize workouts, recommendations, nutrition targets, and other features;
process purchases and subscriptions;
provide AI-powered features;
synchronize connected fitness services;
track activities when requested;
enable community and messaging features;
provide customer support;
communicate about accounts, billing, security, and the Service;
send marketing communications where permitted;
measure and improve Service performance;
conduct analytics;
attribute advertising and marketing;
detect and prevent fraud, abuse, security incidents, and unauthorized activity;
enforce our Terms and promotional rules;
process refunds, payment disputes, and chargebacks;
comply with legal obligations; and
establish, exercise, or defend legal claims.

12. LEGAL BASES FOR PROCESSING

Where applicable law requires a legal basis, we may process personal information based on:

Performance of a Contract

Where processing is necessary to provide the Service, administer your account, provide purchased features, or otherwise perform our agreement with you.

Consent

Where you have provided consent for particular processing, such as certain optional permissions, connected services, marketing communications, cookies, or processing of certain sensitive information where consent is required.

Where applicable law requires explicit or affirmative consent for certain health or other sensitive information, we will request that consent separately or through an appropriate feature-level mechanism.

You may withdraw consent where applicable. Withdrawal does not affect processing already lawfully performed and may prevent us from providing features that require the information covered by that consent.

Legitimate Interests

Where reasonably necessary for interests such as:

operating and improving the Service;
maintaining security;
detecting fraud and abuse;
customer support;
understanding Service usage;
enforcing our rights; and
protecting users and the Service.

We consider the nature of the information and the rights of users when relying on legitimate interests.

Legal Obligations

Where processing is necessary to comply with legal, regulatory, accounting, tax, court, law-enforcement, or other legally binding obligations.

13. HEALTH AND OTHER SENSITIVE INFORMATION

Some information processed through Myfitsociety may be considered sensitive under applicable law.

This may include health, fitness, body measurement, menstrual, nutrition, sleep, fasting, or similar information.

We process this information to provide the features you request, personalize the Service, maintain the Service, and for other purposes described in this Privacy Policy.

Where applicable law requires explicit or affirmative consent to process certain health or other sensitive information, we will request that consent before or when the relevant processing occurs.

You may withdraw such consent where applicable, although doing so may prevent us from providing features that rely on the relevant information.

We do not sell consumer health data.

We do not intentionally use health, fitness, menstrual, body measurement, nutrition, or similar sensitive information for targeted advertising.

Residents of jurisdictions with specific consumer health privacy laws may have additional rights. Where applicable, separate consumer health privacy notices may apply.

14. WHEN WE SHARE INFORMATION

We may share information with service providers and other parties where reasonably necessary for the purposes described in this Privacy Policy.

These may include providers supporting:

cloud hosting and storage;
infrastructure;
database services;
security;
analytics;
advertising;
communications;
push notifications;
customer support;
payment processing;
subscription management;
artificial intelligence;
email delivery;
technical monitoring; and
connected fitness services.

Depending on the feature and location, service providers may include companies such as Google, OpenAI, Cloudflare, Amazon Web Services, Sentry, RevenueCat, Xendit, Cleeng, and other providers used to operate the Service.

We may also disclose information:

when you request or authorize the disclosure;
to process a transaction or connected service;
to investigate fraud, abuse, security incidents, or payment disputes;
to comply with law, legal process, or governmental requests;
to protect our rights, users, or the public;
in connection with a merger, acquisition, financing, restructuring, sale, or transfer of all or part of the business; or
where otherwise permitted by applicable law.

We do not share sensitive health and wellness information with advertising platforms for targeted advertising.

15. COOKIES AND SIMILAR TECHNOLOGIES

Our websites may use cookies, pixels, tags, scripts, local storage, and similar technologies.

These technologies may support:

essential website functionality;
security;
preferences;
analytics;
advertising;
attribution; and
performance measurement.

Where required by law, non-essential cookies and similar technologies are used only after the required choice or consent has been provided.

See our Cookie Policy for more information.

16. MARKETING COMMUNICATIONS

Where permitted, we may use contact information to send news, product information, offers, or other marketing communications.

You may unsubscribe from marketing emails using the unsubscribe mechanism provided or other available preference controls.

Opting out of marketing does not prevent us from sending essential transactional, account, billing, security, legal, or Service-related communications.

17. INTERNATIONAL DATA TRANSFERS

Myfitsociety operates internationally and uses service providers that may process information in countries other than the country where you live.

As a result, personal information may be transferred to or processed in countries with different data protection laws.

Where applicable law requires safeguards for an international transfer, we may rely on recognized mechanisms such as:

adequacy decisions;
Standard Contractual Clauses;
the UK International Data Transfer Agreement or applicable UK Addendum;
contractual safeguards;
other legally recognized transfer mechanisms; or
another lawful basis permitted under applicable law.

The transfer mechanism used may depend on the countries involved, the recipient, and the applicable law.

You may contact [email protected] for additional information about safeguards applicable to international transfers of your personal information.

18. DATA RETENTION

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, administer accounts, maintain security, prevent fraud and abuse, comply with legal obligations, resolve disputes, and enforce agreements.

Different categories of information may have different retention periods.

Active Accounts

Information associated with an active account may generally be retained while the account remains active and as otherwise necessary for the purposes described above.

Suspended or Restricted Accounts

Suspension does not automatically start the account deletion process.

If an account is suspended or restricted, information may remain associated with the account while the restriction remains in effect and for as long as reasonably necessary for account administration, review or appeal, security, fraud prevention, abuse prevention, payment disputes, enforcement, legal obligations, or legal claims.

We do not retain personal information merely because an account is suspended where that information is no longer reasonably necessary.

Certain information may be deleted, anonymized, or reduced over time in accordance with our retention practices even if a restriction remains in effect.

Account Deletion

If you request account deletion, we may provide a recovery period of up to 28 days before ordinary account information is permanently deleted or anonymized.

During the recovery period, you may be able to restore the account.

A suspended or restricted user may also request account deletion. Requesting deletion does not automatically remove or reverse an account restriction.

After the applicable deletion period, we may delete or anonymize ordinary account data such as profile information, fitness information, nutrition records, weight information, menstrual information, sleep and fasting records, ordinary photos, AI conversations, social content, settings, and similar Service data, subject to applicable technical and legal limitations.

We may retain limited information after account deletion where reasonably necessary for:

accounting and tax obligations;
transaction and invoice records;
refunds and chargebacks;
payment disputes;
fraud and abuse prevention;
security;
enforcement of account restrictions;
regulatory compliance;
dispute resolution; and
establishing, exercising, or defending legal claims.

Where an account remains subject to a continuing restriction, we may retain a limited identifier or other minimal enforcement record reasonably necessary to prevent circumvention of that restriction.

Such retained information is not intended to recreate the deleted account or restore ordinary account data.

Backup copies may persist for a limited period as part of normal backup, security, and disaster-recovery processes before being overwritten or otherwise removed.

19. YOUR PRIVACY RIGHTS

Depending on where you live, you may have rights regarding your personal information, including the right to:

request access;
request correction;
request deletion;
request restriction of certain processing;
object to certain processing;
withdraw consent where processing is based on consent;
request portability;
opt out of certain targeted advertising or similar activities where applicable;
appeal certain privacy decisions; or
lodge a complaint with an applicable data protection authority.

These rights are subject to applicable legal conditions, limitations, and exceptions.

To submit a privacy request, contact [email protected].

We may need to verify your identity before fulfilling certain requests.

EEA and United Kingdom

Where the GDPR or UK GDPR applies, you may have rights including access, correction, deletion, restriction, objection, portability, and withdrawal of consent.

You may also have the right to complain to the data protection authority responsible for your location.

United States

Residents of certain U.S. states may have additional privacy rights under applicable state privacy or consumer health data laws.

Depending on the applicable law, these may include rights relating to access, deletion, correction, portability, targeted advertising, sale or sharing of personal information, sensitive information, consumer health data, and appeals.

Myfitsociety does not sell health, fitness, menstrual, nutrition, body measurement, or similar consumer health information.

Where required, separate state-specific consumer health privacy notices may apply.

20. ACCOUNT DELETION

You may request deletion through the account deletion functionality made available by Myfitsociety.

Where a recovery period applies, the account may remain recoverable for up to 28 days before ordinary account data is permanently deleted or anonymized.

For website subscriptions controlled by Myfitsociety, requesting account deletion stops future automatic renewal.

If you later restore an account during the recovery period, a website subscription that was stopped because of the deletion request will not automatically restart.

Subscriptions purchased through Apple App Store or Google Play must be cancelled separately through the applicable Apple or Google account or platform. Deleting your Myfitsociety account does not cancel those subscriptions.

A suspended or restricted account may still submit a deletion request. The account restriction and the deletion request are treated separately.

21. CHILDREN

The Service is intended only for individuals who are at least 18 years old.

We do not knowingly offer the Service to children under 18.

If we become aware that an individual under 18 has created an account or submitted personal information in violation of our requirements, we may take appropriate action, including restricting or deleting the account and associated information as appropriate.

22. SECURITY

We use reasonable technical, organizational, and administrative measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, encryption in transit, infrastructure protections, monitoring, authentication measures, and internal access restrictions.

No system, transmission method, or storage technology can be guaranteed to be completely secure.

You are responsible for protecting your login credentials and for notifying us if you believe your account has been compromised.

23. THIRD-PARTY SERVICES

The Service may contain links to or integrations with third-party services.

Those services may process information under their own privacy policies and terms.

Myfitsociety is not responsible for the independent privacy practices of third parties, including Apple, Google, connected fitness services, payment providers, or websites that you choose to access.

24. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in the Service, technology, business practices, or legal requirements.

When we update the Policy, we will update the “Last Updated” date above.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

25. CONTACT US

For questions, privacy requests, complaints, or other concerns relating to this Privacy Policy or our privacy practices, contact: