MyFitLife360

Privacy Policy

Effective October 24, 2026

MyFitLife360 (“the app”, “we”, “us”) is published by Nicholas Wyatt. This policy explains what information the app collects, why, who helps us run it, and the choices you have. It covers the MyFitLife360 apps for iPhone and Android, the web version, and this website.

What we collect

Your account

You sign in with Apple or Google. We receive your name and email address from them. If you choose Apple’s “Hide My Email”, we only receive a private relay address. We never see your Apple or Google password.

What you log

Workouts (exercises, sets, reps and weights), cardio, sports and classes (activity, distance, time, pace and estimated calories), food and drinks (with nutrition values), water, custom foods and exercises you create, and any notes you add.

Body weight

If you log your weight (“weighed 182.4”), we store each weigh-in with its date, synced like the rest of your logs, and use the latest one for calorie estimates. Your weight is never shared.

Wellbeing

If you log them: your mood, sleep (how long and how well), symptoms such as being sick or having a headache, and meditation minutes. These are stored and synced like the rest of your logs.

Apple Health and Health Connect (only if you connect them)

On iPhone you can connect Apple Health, and on Android, Health Connect. You choose which types to allow, and you can turn any of them off at any time in Apple Health or Health Connect. With your permission the app reads your daily steps, flights of stairs climbed, active calories and walking and running distance, your workouts (type, start time, duration, and distance and calories when recorded), weigh-ins, sleep (time asleep per night) and, on iPhone, mindful minutes. It never writes to or changes your Apple Health or Health Connect data.

What it reads is saved to your account like the rest of your logs, so it appears on your other devices and in your progress and insights. Workouts, weigh-ins and sleep you already logged yourself aren’t added twice. Choosing “Stop importing” in Settings stops new imports on that phone; what was already imported stays in your log until you delete it or your account.

Cycle and sexual health (only on your phone)

Cycle tracking (period days, flow and cycle symptoms) and sexual activity tracking (date, whether protection was used, an optional partner nickname you choose, and how long) are off unless you turn them on. When you do, these entries are stored on your device, and viewing them requires a private 6-digit passcode you choose (or Face ID, Touch ID or your fingerprint as a shortcut). Only a scrambled (scrypt) form of the passcode is stored, on your device and inside your encrypted backup; the passcode itself is never stored or sent. They are never sent to AI and never shared.

Encrypted backup (optional). So you don’t lose these entries when you switch or lose a phone, you can turn on an encrypted backup. Your phone encrypts the entries with a key made from a passphrase you choose (scrypt and XChaCha20-Poly1305), and only that encrypted copy is stored with us. The passphrase and key never leave your device (the key is kept in your phone’s secure keychain), so we cannot read the backup, and we cannot reset a forgotten passphrase. We can see only that a backup exists, its size and when it was updated. Turning the backup off, or “Delete all private data”, deletes it from our servers.

Without a backup, we don’t have a copy, so signing out, deleting the app, or using “Delete all private data” in Settings erases these entries permanently. If you use “Share summary” in Private history, the app creates a text summary and hands it to the app you pick (for example Messages or Mail); it goes only where you send it. Cycle estimates in the app are for planning only and are not a method of birth control.

Optional body details and goals

If you choose to set targets, we store your goal, activity level, birth year, height, weight, and which energy formula to use (female, male or an average). These are used only to estimate your daily targets and calories burned. You can skip them, and you can change or clear them at any time.

Purchases

If you subscribe, Apple (or Google) handles the payment. We never receive your card details. We store your plan (Free, Plus or Lifetime) and when it renews or ends, so the app knows which features you have.

AI usage records

To apply the free weekly AI allowance and manage costs, we record when you use AI logging, the type of request (text or photo), and its size and cost. These records do not include what you typed or photographed.

Technical information

Your device’s time zone offset (so your entries land on the right day) and the timestamps needed to sync your data. Like most online services, our hosting providers keep short-lived server logs that can include IP addresses, for security and troubleshooting.

What we don’t collect

We don’t collect your location, contacts, or advertising identifiers, and the app contains no advertising or third-party analytics. The camera is used only when you choose to scan a barcode or photograph a meal.

How we use your information

• To run the app: save your logs, sync them across your devices, show your history, progress and records, and calculate targets.
• To provide AI logging when you ask for it.
• To manage your subscription and free AI allowance.
• To keep the service secure, fix problems and prevent abuse.
• To answer you when you contact us.

We don’t use your health or fitness information for advertising, and we don’t sell it or share it for cross-context behavioral advertising.

AI logging

We ask first. The first time you use an AI feature, the app explains what will be sent and to whom, and sends nothing unless you agree. You can turn AI features off at any time in Settings → AI features; the app then asks again before sending anything. Typing, voice and barcode logging never need AI.

When you choose “Log this with AI” or send a meal photo, the text or photo is sent through our server to Anthropic, which provides the AI model. Anthropic processes it to return a result under its commercial terms, which do not allow it to train its models on this content. We keep the structured result you choose to save (for example “2 eggs, 140 calories”). We don’t store the photo. Voice input uses your phone’s built-in dictation (provided by Apple or Google), and the app only receives the resulting text.

Weekly review. When you ask for a weekly review, the app sends a summary of your last 7 days (totals and averages such as days logged, average calories and protein, active minutes, average sleep, average mood and how often symptoms were logged) through our server to Anthropic, which writes the review under the same terms. It never includes your individual entries or anything from cycle or sexual health tracking. We store the review so you can read it again, and record the request’s size and cost. You can report a review from the app.

Your own API key (Lifetime plan). On the Lifetime plan you can add your own Anthropic API key. We check it with Anthropic, then store it encrypted on our server (in Supabase Vault). It isn’t stored on your devices, is never shown again in the app, and is used only to send your own AI requests to Anthropic, which then bill your Anthropic account under your agreement with them. We keep the key’s last four characters, the model you chose and whether the key works, so the app can show them. Removing the key in Settings, or deleting your account, deletes it from our server.

Who helps us run the app

We use these service providers. They may process your information only to provide their service to us:

• Supabase: database, sign-in and server functions. Your data is stored in the United States.
• PowerSync: keeps the copy of your data on your devices in sync with our database.
• Anthropic: AI analysis of text and photos you send to AI logging.
• Open Food Facts: when you scan a barcode, our server looks up the product number in this public food database. Your identity is not sent.
• RevenueCat, Apple and Google: subscriptions and purchases. RevenueCat receives a random account ID and your purchase history, not your name or logs.
• Apple and Google: sign-in.
• Vercel: hosts this website.

We may also disclose information if required by law, to protect someone’s safety, or as part of a sale or transfer of the app, in which case this policy would continue to apply to your information.

Health information

We treat everything you log about your body, food, exercise and wellbeing, and everything read from Apple Health or Health Connect, as sensitive health information. It’s private to your account by default. Our database enforces that each account can read only its own records. Any future sharing features (for example with friends) will be opt-in, by category, and will never include your weight or calories unless you choose to share them.

Data from Apple Health and Health Connect is used only to show you your own activity, progress and insights inside the app. We don’t use it for advertising or marketing, we don’t sell it or share it with data brokers, and we don’t share it with anyone except the service providers listed above that store it for us. Its use follows Apple’s HealthKit rules and the Health Connect Permissions policy, including its Limited Use requirements.

How long we keep it

We keep your information while you have an account. When you delete an entry it disappears from the app on all your devices; it is permanently erased when you delete your account. When your account is deleted, we erase your account and logs from our live systems within 30 days, and remaining copies in backups are overwritten within a further 30 days. We may keep limited purchase records where the law requires it.

Your choices and rights

• Access and correction: you can view and edit your logs and details in the app at any time.
• Copy of your data: email us and we’ll send you an export.
• Deletion: delete any entry in the app, or delete your whole account in Settings → Delete account, which erases your account and data. You can also email us to ask.
• Subscriptions: manage or cancel in your App Store or Google Play account settings.

Depending on where you live (for example California, Washington, Colorado, Virginia and other US states), you may have additional rights, such as to know what we collect, to delete it, to correct it, to withdraw consent, and to appeal a decision about your request. We honor these requests for all users, and we won’t treat you differently for making one. To make a request, contact us using the address below. If we decline a request, you can appeal by replying to our decision.

Security

Data is encrypted in transit (HTTPS). Access to each account’s data is restricted by database security rules, and keys and secrets are stored encrypted on our servers. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.

Children

MyFitLife360 is not directed to children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has given us information, contact us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date above. If the changes are significant, we’ll let you know in the app before they take effect.

Contact

Questions or requests: support.myfitlife360@gmail.com