MyFitLife360

Privacy Policy

Effective October 25, 2026

The short version

MyFitLife360 (“the app”, “we”, “us”) is published by Nicholas Wyatt. This policy explains what information the app collects, why, who helps us run it, and the choices you have. It covers the MyFitLife360 apps for iPhone and Android, the web version, and this website.

What we collect

Your account

You sign in with Apple or Google. We receive your name and email address from them. If you choose Apple’s “Hide My Email”, we only receive a private relay address. We never see your Apple or Google password.

What you log

Workouts (exercises, sets, reps and weights), cardio, sports and classes (activity, distance, time, pace and estimated calories), food and drinks (with nutrition values), water, custom foods and exercises you create, anything else you choose to log (such as a supplement, sauna session or habit, with an amount), and any notes you add. If you use them, your grocery list and the recipes you save from meal ideas are stored and synced the same way. Foods to avoid that you choose for meal ideas are saved with your settings.

Body weight

If you log your weight (“weighed 182.4”), we store each weigh-in with its date, synced like the rest of your logs, and use the latest one for calorie estimates. Your weight is never shared.

Wellbeing

If you log them: your mood, sleep (how long and how well), symptoms such as being sick or having a headache, and meditation minutes. These are stored and synced like the rest of your logs.

Apple Health and Health Connect (only if you connect them)

On iPhone you can connect Apple Health, and on Android, Health Connect. You choose which types to allow, and you can turn any of them off at any time in Apple Health or Health Connect. With your permission the app reads your daily steps, flights of stairs climbed, active calories and walking and running distance, your workouts (type, start time, duration, and distance and calories when recorded), weigh-ins, sleep (time asleep per night) and, on iPhone, mindful minutes. It never writes to or changes your Apple Health or Health Connect data.

What it reads is saved to your account like the rest of your logs, so it appears on your other devices and in your progress and insights. Workouts, weigh-ins and sleep you already logged yourself aren’t added twice. Choosing “Stop importing” in Settings stops new imports on that phone; what was already imported stays in your log until you delete it or your account.

Cycle and sexual health (only on your phone)

Cycle tracking (period days, flow and cycle symptoms) and sexual activity tracking (date, whether protection was used, an optional partner nickname you choose, and how long) are off unless you turn them on. When you do, these entries are stored on your device, and viewing them requires a private 6-digit passcode you choose (or Face ID, Touch ID or your fingerprint as a shortcut). Only a scrambled (scrypt) form of the passcode is stored, on your device and inside your encrypted backup; the passcode itself is never stored or sent. They are never sent to AI and never shared.

Encrypted backup (optional). So you don’t lose these entries when you switch or lose a phone, you can turn on an encrypted backup. Your phone encrypts the entries with a key made from a passphrase you choose (scrypt and XChaCha20-Poly1305), and only that encrypted copy is stored with us. The passphrase and key never leave your device (the key is kept in your phone’s secure keychain), so we cannot read the backup, and we cannot reset a forgotten passphrase. We can see only that a backup exists, its size and when it was updated. Turning the backup off, or “Delete all private data”, deletes it from our servers.

Without a backup, we don’t have a copy, so signing out, deleting the app, or using “Delete all private data” in Settings erases these entries permanently. If you use “Share summary” in Private history, the app creates a text summary and hands it to the app you pick (for example Messages or Mail); it goes only where you send it. Cycle estimates in the app are for planning only and are not a method of birth control.

Optional body details and goals

If you choose to set targets, we store your goal, activity level, birth year, height, weight, and which energy formula to use (female, male or an average). These are used only to estimate your daily targets and calories burned. You can skip them, and you can change or clear them at any time.

Purchases

If you subscribe, Apple (or Google) handles the payment. We never receive your card details. We store your plan (Free, Plus or Lifetime) and when it renews or ends, so the app knows which features you have.

AI usage records

To apply the free weekly AI allowance and manage costs, we record when you use AI logging, the type of request (text or photo), and its size and cost. These records do not include what you typed or photographed.

Technical information

Your device’s time zone offset (so your entries land on the right day) and the timestamps needed to sync your data. Like most online services, our hosting providers keep short-lived server logs that can include IP addresses, for security and troubleshooting.

What we don’t collect

We don’t collect your location, contacts, or advertising identifiers, and the app contains no advertising, ad trackers or analytics SDKs. The camera is used only when you choose to scan a barcode or photograph a meal.

Website and web app visits

To understand how people find us, we count visits to myfitlife360.com and the web app at app.myfitlife360.com with Vercel Web Analytics, run by our hosting provider. It records the page visited, the site that linked to it, and your country, device type, browser and operating system. It uses no cookies, doesn’t track you across other websites, and doesn’t know who you are: a visitor is recognized only by a code that resets every day. It never sees anything you log. The iPhone and Android apps don’t use it.

Anonymous log phrases (only if you turn it on)

If you turn on Settings → Help improve MyFitLife360, the app shares what you type when you log something, with every number replaced by “#” and any email address or link removed, plus what kind of entry the app first guessed and what you saved it as (for example “food” or “exercise”). Cycle and sexual health entries are never shared. These phrases are stored without your account, name or email; a one-way code lets us count how many different people logged a phrase without knowing who they are. We use them only to see what the app misunderstands and what people want to track, so we can improve it. They are kept for 180 days. Because they can’t be linked back to you, they can’t be found or deleted per account; turning the setting off stops sharing straight away. It’s off unless you turn it on.

Beta tester sign-ups (only if you sign up)

If you sign up to test at myfitlife360.com/testers, we keep your name, email, which versions you want to test (iPhone, Android, web), the Apple ID or Google account email you give us for TestFlight or Google Play testing, and any optional answers (devices, what you’d use most, notes). We use them only to invite you to test and to contact you about testing, and we share the email you give for each platform with Apple or Google only to send that invite. Email us to be removed at any time.

How we use your information

We don’t use your health or fitness information for advertising, and we don’t sell it or share it for cross-context behavioral advertising.

AI logging

We ask first. The first time you use an AI feature, the app explains what will be sent and to whom, and sends nothing unless you agree. You can turn AI features off at any time in Settings → AI features; the app then asks again before sending anything. Typing, voice and barcode logging never need AI.

When you choose “Log this with AI” or send a meal photo, the text or photo is sent through our server to Anthropic, which provides the AI model. Anthropic processes it to return a result under its commercial terms, which do not allow it to train its models on this content. We keep the structured result you choose to save (for example “2 eggs, 140 calories”). We don’t store the photo. Voice input uses your phone’s built-in dictation (provided by Apple or Google), and the app only receives the resulting text.

Weekly review. When you ask for a weekly review, the app sends a summary of your last 7 days (totals and averages such as days logged, average calories and protein, active minutes, average sleep, average mood and how often symptoms were logged) through our server to Anthropic, which writes the review under the same terms. It never includes your individual entries or anything from cycle or sexual health tracking. We store the review so you can read it again, and record the request’s size and cost. You can report a review from the app.

Meal ideas. When you ask for meal ideas on the Insights tab, the app sends your answers (meal or snack, where you’ll eat, how much time you have, and a restaurant name if you enter one), the foods you’ve chosen to avoid, about how many calories and grams of protein are left of today’s targets, and, unless you turn it off, the names of up to ten foods you log most often. If you add photos of your fridge, pantry or groceries (up to three), they’re sent too, so the ideas can use what you have; we don’t store them. It never sends amounts, dates, your weight, or anything from cycle or sexual health tracking. Anthropic writes the ideas under the same terms. We don’t store the ideas; if you log one, it’s saved like any other entry. Ideas are not checked for allergens.

Your own API key (Lifetime plan). On the Lifetime plan you can add your own Anthropic API key. We check it with Anthropic, then store it encrypted on our server (in Supabase Vault). It isn’t stored on your devices, is never shown again in the app, and is used only to send your own AI requests to Anthropic, which then bill your Anthropic account under your agreement with them. We keep the key’s last four characters, the model you chose and whether the key works, so the app can show them. Removing the key in Settings, or deleting your account, deletes it from our server.

Who helps us run the app

We use these service providers. They may process your information only to provide their service to us:

We may also disclose information if required by law, to protect someone’s safety, or as part of a sale or transfer of the app, in which case this policy would continue to apply to your information.

Health information

We treat everything you log about your body, food, exercise and wellbeing, and everything read from Apple Health or Health Connect, as sensitive health information. It’s private to your account by default. Our database enforces that each account can read only its own records. Any future sharing features (for example with friends) will be opt-in, by category, and will never include your weight or calories unless you choose to share them.

Data from Apple Health and Health Connect is used only to show you your own activity, progress and insights inside the app. We don’t use it for advertising or marketing, we don’t sell it or share it with data brokers, and we don’t share it with anyone except the service providers listed above that store it for us. Its use follows Apple’s HealthKit rules and the Health Connect Permissions policy, including its Limited Use requirements.

How long we keep it

We keep your information while you have an account. When you delete an entry it disappears from the app on all your devices; it is permanently erased when you delete your account. When your account is deleted, we erase your account and logs from our live systems within 30 days, and remaining copies in backups are overwritten within a further 30 days. We may keep limited purchase records where the law requires it.

Your choices and rights

Depending on where you live (for example California, Washington, Colorado, Virginia and other US states), you may have additional rights, such as to know what we collect, to delete it, to correct it, to withdraw consent, and to appeal a decision about your request. We honor these requests for all users, and we won’t treat you differently for making one. To make a request, contact us using the address below. If we decline a request, you can appeal by replying to our decision.

Security

Data is encrypted in transit (HTTPS). Access to each account’s data is restricted by database security rules, and keys and secrets are stored encrypted on our servers. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.

Children

MyFitLife360 is not directed to children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has given us information, contact us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date above. If the changes are significant, we’ll let you know in the app before they take effect.

Contact

Questions or requests: support@myfitlife360.com