This Privacy Policy explains how Myfitsociety collects, uses, discloses, stores, and protects personal data when you use myfitsociety.com, the Myfitsociety mobile applications, and our related products, features, content, and services, collectively referred to as the “Service”.

For purposes of this Privacy Policy, “Myfitsociety”, “we”, “us”, and “our” refer to Myfitsociety, the operator of the Service.

This Privacy Policy applies together with our Terms of Use and any additional privacy notice that may apply to a particular feature or jurisdiction.

Where applicable law provides rights or protections that cannot legally be limited by this Privacy Policy, those rights and protections will continue to apply.

1. PERSONAL DATA WE COLLECT

The personal data we collect depends on the features you use, the information you choose to provide, your device, and how you interact with the Service.

Account and Profile Information

We may collect information such as your name, email address, username, password or authentication information, age or date of birth information, gender, country or region, profile photograph, language, account preferences, and other profile information you choose to provide.

We may also receive limited account information when you register or sign in using Google or Apple.

Health, Fitness, Nutrition, and Wellness Information

When you use our fitness, nutrition, tracking, or wellness features, we may process information such as your height, weight, body measurements, body fat information, goals, activity level, workouts, exercise history, calories, meals, food information, nutritional intake, macronutrients, fasting information, sleep information, steps, menstrual cycle or period information, progress information, and other fitness or wellness information you choose to provide.

We may generate additional information from this data, including calorie targets, macronutrient targets, estimated body composition, weight related targets, workout recommendations, nutrition estimates, fasting information, period predictions, progress information, and other personalized insights.

Depending on applicable law, some of this information may be considered health data, sensitive personal data, specific personal data, or special category personal data.

Photos and Images

We may process photographs or images when you choose to use features involving profile photos, food diaries, food scanning, progress tracking, body composition estimates, or community features.

Photos saved as part of your profile, food diary, progress history, or social content may be retained with your account.

Images submitted solely for temporary AI analysis are intended to be processed for the requested feature and deleted after the analysis is completed, unless you separately choose to save the image as part of another feature.

AI Features

Certain Myfitsociety features use artificial intelligence.

For food scanning and certain body analysis features, information may be processed using Google Cloud Vertex AI. Depending on the feature, this may include a food photograph or body photographs together with information such as age, gender, height, or weight.

AI Coach uses technology provided by OpenAI. To provide AI Coach, we may process the messages you send and relevant fitness or wellness information such as age, gender, height, weight, goals, fitness level, or body fat information.

We do not intentionally provide Google or OpenAI with your name or email address as part of these AI feature requests unless necessary for a separate purpose disclosed to you.

AI Coach conversations may also be stored by Myfitsociety as part of your account so that the feature can provide conversation history and related functionality.

Where required by applicable law or platform requirements, we may provide an additional disclosure or request permission before personal data is provided to a third party AI service.

Running, Location, and Activity Information

If you use an outdoor running or cycling feature, Myfitsociety may process precise location information while the activity is active.

Background location may be used while an activity is in progress so that tracking can continue when the application is not visible on screen.

We may retain information generated from the activity, such as distance, duration, pace, calories, splits, and a representation of the route.

We do not use precise running location data for targeted or behavioral advertising.

We may derive a country or general location from your IP address for purposes such as localization, currency selection, security, and fraud prevention.

If you choose to provide a home location or tag a location in social content, we may store the location information you provide.

Location search functionality may use a third party location or mapping service.

Device Motion and Step Information

The Service may use supported device motion or pedometer functionality to calculate steps or related activity information.

On supported Android devices, you may also choose to connect Health Connect as described below.

Connected Fitness Services

If you choose to connect a supported health or fitness service, we may receive information that you authorize that service to provide to Myfitsociety.

Health Connect may be used on supported Android devices to read step and sleep information that you authorize.

If you connect Strava, we may receive information about completed activities, including activity name, time, duration, distance, calories, speed, pace, elevation, splits, visibility, and other activity information made available through the authorized Strava connection.

If you connect Garmin, we may receive activity information such as distance, duration, calories, heart rate, pace, elevation, and workout related heart rate information made available through the authorized Garmin connection.

Myfitsociety does not currently write activity data back to Health Connect, Strava, or Garmin through these integrations.

You may disconnect a supported integration through the applicable service or through controls we make available.

Community and Communications Information

If you use social or community features, we may process posts, comments, photographs, followers, following relationships, reactions, challenge activity, reports, moderation information, and other social interactions.

We also process private messages and communications transmitted through the Service.

Information you choose to publish may be visible to other users according to the relevant feature and settings.

Messages you send to another user are disclosed to that recipient as necessary to provide the messaging feature.

Payment and Subscription Information

Payments may be handled by Apple, Google, payment processors, Merchants of Record, subscription management providers, banks, or other payment services.

We may receive information such as subscription status, transaction identifiers, purchase date, amount, currency, billing country, payment status, refund status, chargeback information, and other limited information needed to administer a transaction or subscription.

We generally do not receive or store complete payment card numbers when payment information is collected directly by the applicable payment provider.

Customer Support

If you contact us, we may process your contact information, account information, support messages, attachments, transaction information, and our communications with you.

Device, Usage, Analytics, and Technical Information

We may automatically collect technical information such as IP address, device type, operating system, browser type, app version, device or app identifiers, language, time zone, screens or features accessed, event information, dates and times of access, crash information, diagnostics, and security information.

We use this information for purposes such as providing the Service, understanding product usage, analytics, diagnostics, security, fraud prevention, and improving the Service.

2. HOW WE COLLECT PERSONAL DATA

We may collect personal data directly from you, automatically through your use of the Service, from other users who interact with you, from connected services that you authorize, from payment or subscription providers, from app stores, and from service providers supporting the operation of Myfitsociety.

We may request device permissions when relevant to a feature that you choose to use.

3. HOW WE USE PERSONAL DATA

We may use personal data to:

1. Create, authenticate, maintain, and secure user accounts.
2. Provide subscriptions and paid features.
3. Deliver fitness, nutrition, wellness, tracking, and personalization features.
4. Calculate targets, estimates, recommendations, predictions, and other personalized information.
5. Operate AI powered features.
6. Provide food scanning and body analysis features.
7. Operate community, social, and messaging features.
8. Connect supported health and fitness services.
9. Administer purchases, subscriptions, refunds, and payment related matters.
10. Provide customer support.
11. Send account, security, billing, and service communications.
12. Send marketing communications where permitted.
13. Provide push notifications.
14. Perform analytics and understand how the Service is used.
15. Diagnose technical problems and improve the Service.
16. Detect, investigate, and prevent fraud, abuse, security incidents, and prohibited conduct.
17. Moderate content and enforce our Terms of Use.
18. Protect Myfitsociety, our users, and third parties.
19. Comply with applicable law and lawful requests.
20. Establish, exercise, or defend legal claims.

We may also use aggregated, statistical, or deidentified information for analytics, research, product development, business planning, and other lawful purposes where that information is no longer reasonably capable of identifying you.

4. HEALTH AND OTHER SENSITIVE DATA

Myfitsociety recognizes that health, fitness, menstrual, body, and wellness information can be particularly sensitive.

We use this information primarily to provide the tracking, personalization, calculations, recommendations, insights, connected services, and other features that you choose to use.

Where applicable law requires consent or explicit consent for particular sensitive information or processing, we will obtain the required consent or rely on another lawful basis permitted by applicable law.

Where processing is based on consent, you may withdraw that consent as provided by applicable law. Withdrawal does not affect processing that was lawful before the withdrawal.

Certain features may no longer function if you withdraw permission for information that is necessary to provide that feature.

We do not sell consumer health data.

We do not use health, fitness, menstrual, nutrition, Health Connect, or similar sensitive wellness information for targeted or behavioral advertising.

We do not use health data to determine eligibility for employment, insurance, credit, or lending.

5. ANALYTICS AND ADVERTISING

We use analytics and advertising technologies to understand how the Service is used, measure advertising performance, attribute registrations or purchases, prevent fraud, and support our marketing.

These technologies may process information such as device or browser identifiers, IP address, user agent, general location, page or screen activity, purchase or subscription events, transaction value, advertising identifiers where permitted, and limited account identifiers.

For advertising measurement or attribution, we may provide advertising partners with limited information such as hashed contact identifiers, transaction or conversion information, IP address, browser information, and related identifiers where permitted by applicable law.

We do not intentionally send weight, body measurements, menstrual information, calories, meals, workout details, sleep information, fasting information, body photos, AI conversations, Health Connect data, or similar sensitive health or wellness information to advertising platforms.

The Myfitsociety mobile application may offer rewarded advertising for selected optional content or benefits. Rewarded advertising may be provided in a nonpersonalized or contextual manner depending on our configuration, your settings, platform requirements, and applicable law.

Where applicable law requires consent before nonessential analytics, advertising, cookies, or similar technologies are activated, we will use the required consent mechanism.

Some privacy laws may describe certain advertising disclosures as sharing, targeted advertising, or similar activity even where personal data is not sold for money. Where applicable, we provide the rights or choices required by those laws.

6. PAYMENTS AND SUBSCRIPTIONS

Payment and subscription providers may process personal data directly from you under their own privacy notices and legal obligations.

We process transaction and subscription information that we receive from these providers where reasonably necessary to activate paid features, manage subscriptions, provide customer support, handle refunds or chargebacks, prevent fraud, maintain financial records, and comply with legal obligations.

7. COMMUNITY FEATURES AND OTHER USERS

Information that you intentionally publish or make available through community features may be visible to other users.

Other users may copy, save, capture, or share information that you voluntarily disclose to them.

We process private messages as necessary to operate the messaging feature.

We may review or process relevant content or communications where reasonably necessary to investigate a report, enforce our Terms of Use, protect users, prevent fraud or serious abuse, comply with law, or establish, exercise, or defend legal claims.

8. SERVICE PROVIDERS AND OTHER DISCLOSURES

We use service providers and technology partners to operate Myfitsociety.

These may include providers of cloud hosting, data storage and backup, content delivery and security, analytics, advertising and attribution, payment processing, Merchant of Record services, subscription management, artificial intelligence, authentication, communications, marketing email, push notifications, customer support, error monitoring, location services, and other technical infrastructure.

When a provider processes personal data on our behalf, it may process the information only for the applicable services or as otherwise permitted by its contractual obligations and applicable law.

Some third party services, such as app stores, payment providers, connected fitness services, or other independent platforms, may process information as independent controllers under their own privacy policies.

We may also disclose information where reasonably necessary to:

1. Comply with applicable law or valid legal process.
2. Respond to lawful government or regulatory requests.
3. Investigate fraud, abuse, or security incidents.
4. Protect the safety, rights, or property of users, Myfitsociety, or other persons.
5. Establish, exercise, or defend legal claims.
6. Enforce our agreements.
7. Act with your direction or consent.

9. BUSINESS TRANSACTIONS

If Myfitsociety or the business operating the Service is involved in a merger, acquisition, financing, restructuring, reorganization, sale of assets, transfer of ownership, or similar business transaction, personal data may be disclosed or transferred as part of that transaction, subject to applicable law.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies, pixels, tags, and similar technologies for purposes such as website operation, security, preferences, analytics, advertising measurement, and advertising.

Where required by applicable law, nonessential technologies are activated only after the required consent has been obtained.

You can find additional information in our Cookie Policy and, where available, through our cookie preference controls.

11. EMAIL, MARKETING, AND PUSH NOTIFICATIONS

We may send account, security, billing, support, and other service related communications where necessary to operate the Service.

We may also send marketing communications where permitted by applicable law.

You can unsubscribe from marketing email using the unsubscribe mechanism provided in the message or another method we make available.

Opting out of marketing does not prevent us from sending necessary account, security, billing, legal, or service communications.

If push notifications are enabled, we may send notifications through the applicable mobile platform. You can control push notification permissions through your device settings.

12. LEGAL BASES FOR PROCESSING

The legal basis for processing personal data depends on the information involved, the purpose of the processing, and the law applicable to you.

Where relevant, we may process personal data because:

1. Processing is necessary to perform our agreement with you or provide a feature you request.
2. You have provided consent.
3. You have provided explicit consent where required for sensitive information.
4. Processing is necessary to comply with a legal obligation.
5. Processing is necessary for our legitimate interests or those of another person where those interests are not overridden by your rights.
6. Another lawful basis is available under applicable law.

Our legitimate interests may include operating and improving the Service, maintaining security, preventing fraud and abuse, understanding product usage, administering our business, protecting users, enforcing our agreements, and establishing or defending legal claims.

13. INTERNATIONAL DATA PROCESSING

Myfitsociety operates internationally and uses service providers located in multiple countries and regions.

Personal data may therefore be processed outside the country where you live, including in countries where Myfitsociety or our service providers operate.

Privacy laws in those countries may differ from those in your country.

Where applicable law requires safeguards for an international transfer of personal data, we use an appropriate lawful transfer mechanism or another safeguard permitted by law.

14. DATA RETENTION

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining security, preventing fraud, complying with legal requirements, resolving disputes, and enforcing our agreements.

Retention periods depend on the type of information and the purpose for which it is processed.

While your account is active, we generally retain the account and product data needed to provide the Service.

When you request account deletion, your account is scheduled for permanent deletion within 28 days. During this recovery period, ordinary account data may remain available so that the account can be restored if you choose to do so.

If the account is not restored, ordinary account and product data is deleted or anonymized as part of the permanent deletion process.

For website subscriptions controlled by Myfitsociety, requesting account deletion stops future automatic renewal as described in our Terms of Use.

Temporary images submitted solely for AI scanning are intended to be deleted after processing. Images separately saved to your profile, food diary, progress history, or social features remain subject to the ordinary account retention rules.

After permanent account deletion, we may retain limited information where reasonably necessary or required for accounting, tax, invoices, payment records, refunds, chargebacks, fraud prevention, security, enforcement of account restrictions, investigation of serious abuse or illegal conduct, regulatory obligations, or legal claims.

Information may also remain in restricted backup systems until the applicable backup is overwritten or expires through our normal backup rotation process.

Backup copies are maintained for recovery and continuity purposes and are not intended to be used as active product records.

15. SUSPENDED AND RESTRICTED ACCOUNTS

If an account is suspended, we may retain relevant account information during the applicable review period so that we can investigate the matter, protect users, and restore access if the suspension is reversed.

If a suspension is not reversed, ordinary product data may be deleted or anonymized.

We may retain limited information reasonably necessary to document or enforce a permanent restriction, prevent repeated abuse, investigate an incident, protect users, comply with law, or establish, exercise, or defend legal claims.

A request to delete an account does not require us to delete limited enforcement, security, financial, or legal records that we are permitted or required to retain.

16. YOUR PRIVACY RIGHTS

Depending on where you live, you may have rights concerning your personal data.

These may include rights to:

1. Obtain information about how your personal data is processed.
2. Access personal data concerning you.
3. Correct inaccurate or incomplete information.
4. Request deletion of personal data.
5. Restrict certain processing.
6. Object to certain processing.
7. Receive certain personal data in a portable format.
8. Withdraw consent where processing is based on consent.
9. Opt out of certain advertising or disclosures where applicable.
10. Appeal certain privacy decisions where applicable.
11. Lodge a complaint with an applicable privacy or data protection authority.

These rights are subject to the conditions, limitations, and exceptions provided by applicable law.

We may take reasonable steps to verify your identity before completing a privacy request.

You may submit a privacy request by contacting [email protected].

17. EEA AND UNITED KINGDOM USERS

If the GDPR or UK GDPR applies to our processing of your personal data, you have the rights available under those laws, subject to their conditions and exceptions.

Certain health and wellness information may constitute special category personal data.

Where explicit consent is the applicable legal basis for processing such information, you may withdraw that consent as permitted by law.

You may also have the right to lodge a complaint with a competent data protection supervisory authority.

Where personal data is transferred internationally, we use an appropriate transfer mechanism where required by applicable law.

18. UNITED STATES PRIVACY RIGHTS

Residents of certain United States jurisdictions may have additional privacy rights.

Depending on applicable law, these may include rights relating to access, correction, deletion, portability, targeted advertising, certain disclosures, consent, withdrawal of consent, and appeals.

We do not sell consumer health data.

Where a United States consumer health privacy law requires a separate Consumer Health Data Privacy Policy or similar notice, that notice applies in addition to this Privacy Policy.

19. CHILDREN

Myfitsociety is intended only for individuals who are at least 18 years old.

We do not knowingly permit individuals under 18 to create or use a Myfitsociety account.

If we learn that personal data has been collected from an individual under 18 in circumstances where it should not have been collected, we will take reasonable steps to address or delete the information as required by applicable law.

A parent or legal guardian who believes that an individual under 18 has provided personal data to Myfitsociety may contact us.

20. SECURITY

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

Access to personal data is restricted according to operational need where reasonably appropriate.

We use security measures for data transmission and storage that we consider appropriate based on the nature of the information and the systems involved.

No method of electronic transmission, storage, or security can be guaranteed to be completely secure.

You are responsible for taking reasonable steps to protect your account credentials and devices.

If a personal data security incident occurs, we will take the actions and provide the notifications required by applicable law.

21. THIRD PARTY SERVICES

The Service may link to, connect with, or rely on services operated by third parties.

When a third party processes your information independently from Myfitsociety, its own terms and privacy practices apply.

This may include app stores, payment providers, connected fitness platforms, authentication providers, or other independent services that you choose to use.

Where Myfitsociety receives information through Google APIs, our use and transfer of that information will comply with the applicable Google API Services User Data Policy, including applicable Limited Use requirements.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to the Service, our technology, our business practices, or applicable law.

Where required by applicable law, we will provide notice of material changes or request consent where required.

The date shown at the beginning of this Privacy Policy indicates when it was last updated.

Your continued use of the Service after an updated Privacy Policy becomes effective is subject to applicable law and does not limit any rights that cannot legally be waived.

23. CONTACT

If you have questions about this Privacy Policy, our privacy practices, or your personal data, or if you wish to exercise a privacy right, contact:

Myfitsociety
Jakarta, Indonesia
[email protected]