Privacy Policy for MyFitLife
com.miaki.fitlifeEffective Date: May 2, 2024Last Updated: October 1, 2026Miaki Media Limited ("we", "our", or "us") is dedicated to safeguarding your personal data and ensuring transparency regarding how your information is handled. This Privacy Policy governs your use of the mobile application MyFitLife (the "App", Package Name: com.miaki.fitlife).
This policy is designed to comply with Google Play Developer Program Policies (including the User Data Policy, Health Apps Policy, and Permissions Policy), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).
1. Information We Collect
We collect information to provide personalized fitness tracking, workout guidance, and nutrition insights. The data we collect falls into the following categories:
A. Personal Information Provided by You
- Account Credentials: Full name, email address, password (stored in salted hashed format), and assigned client/user ID.
- Demographic Information: Date of birth (or age), gender, profile photo, country, and regional preferences.
- Body Metrics & Target Goals: Height, weight, target fitness goal (e.g., weight loss, muscle gain), activity level, and meal dietary preferences.
B. Health, Fitness & Physical Activity Data (Special Category Data)
- Step & Movement Data: Daily step counts, distance covered, active duration, and estimated calories burned.
- Fitness Metrics: Calculated Body Mass Index (BMI), Basal Metabolic Rate (BMR), and Total Daily Energy Expenditure (TDEE).
- Activity & Wellness Records: Intermittent fasting schedules/timers, guided Kegel routine history, workout completion history, and stretching logs.
- Hardware Sensors: Real-time hardware step counter data retrieved via
android.hardware.sensor.stepcounterand theandroid.permission.ACTIVITY_RECOGNITIONpermission.
C. Device, Technical & Usage Information
- Device Attributes: Device model, manufacturer, Android operating system version, system language, and network state.
- App Interaction & Diagnostic Logs: App start/exit timestamps, features accessed, time zone offset, and crash stack traces collected via Firebase Crashlytics.
- Device Identifiers & Push Tokens: Firebase Cloud Messaging (FCM) registration tokens used to deliver workout notifications and hydration alerts.
- Advertising Identifiers: Google Advertising ID (AAID) for ad serving and frequency capping (for users on the ad-supported tier).
D. In-App Purchase & Billing Data
Purchases and subscriptions (such as premium workout access or Kegel routines) are processed directly by the Google Play In-App Billing system. We never collect, process, or store your payment card numbers, bank details, or billing addresses. We receive only transaction confirmation tokens and subscription validity status from Google Play.
2. How We Use Your Information
We process your information exclusively for legitimate purposes:
- Core Fitness Functionality: Accurately calculating daily steps, active time, calorie burn, BMI, and fasting intervals.
- Personalization: Adapting workout regimens and regional meal recipes to your physical metrics and fitness goals.
- Synchronization & Account Management: Ensuring your fitness progress persists securely across devices and app updates.
- Reminders & Push Notifications: Delivering scheduled alarms for workouts, hydration reminders, and fasting completion.
- Diagnostics & Stability: Identifying bugs, memory leaks, and application crashes via Firebase Crashlytics to optimize performance.
- Monetization & Advertising: Displaying contextual and non-intrusive ads via Google AdMob (for free-tier users).
3. Google Play Health Apps Policy Disclosures
In accordance with the Google Play Health Apps Policy:
- No Sale of Health Data: We never sell your health, fitness, or wellness data to data brokers or third parties under any circumstances.
- No Third-Party Advertising Using Health Data: Your physical activity data (steps, calories, workouts, fasting) is never used for targeting third-party advertisements.
- Strict Purpose Limitation: Health data is accessed and stored only to provide the specific wellness features requested by the user.
4. Device Permissions Requested
MyFitLife requests only standard runtime permissions necessary for its functionality:
| Android Permission | Technical Purpose | Mandatory or Optional |
|---|---|---|
| ACTIVITY_RECOGNITION | Reads physical movement to count daily walking and running steps accurately. | Required for step tracking |
| FOREGROUND_SERVICE & specialUse | Keeps the step counting service (StepCountServices) running consistently in the background without being killed by Android battery optimization. | Required for background step counter |
| POST_NOTIFICATIONS | Delivers timely step goal achievements, hydration alerts, and fasting timers on Android 13+. | Optional (user configurable) |
| USE_EXACT_ALARM | Schedules precision notifications for fasting start/end times and daily workout routines. | Required for fasting/workout alarms |
| REQUEST_IGNORE_BATTERY_OPTIMIZATIONS | Prevents the operating system from terminating the background step counter sensor service. | Optional |
| INTERNET & ACCESS_NETWORK_STATE | Connects to cloud servers to synchronize user records, fetch healthy recipes, and load blog updates. | Required for cloud sync |
| com.android.vending.BILLING | Interfaces with Google Play Billing for in-app subscriptions and premium feature unlocking. | Required for in-app purchases |
5. Third-Party Service Providers & SDKs
We integrate certified third-party service providers who process information under strict confidentiality:
- Google Play Services: Core platform functionality, app updates, and account authentication (Google Privacy Policy).
- Google Firebase:
- Firebase Authentication: Manages user sign-in and token authentication.
- Firebase Cloud Messaging (FCM): Delivers push notifications and reminders.
- Firebase Crashlytics & Analytics: Aggregated crash analytics and telemetry (Firebase Privacy Policy).
- Google AdMob: Serves in-app banner and interstitial advertisements (AdMob Privacy Policy). You can reset or delete your Advertising ID via Android Settings > Google > Ads.
- Google Play In-App Billing: Handles encrypted subscription payments without sharing sensitive financial details with us.
6. Data Security & Encryption
We implement robust technical and organizational security measures:
- Encryption in Transit: All communications between the App and our backend servers are strictly encrypted using HTTPS / Transport Layer Security (TLS 1.2+).
- Access Control: Administrative access to user databases is restricted to authorized personnel under multi-factor authentication.
- Password Protection: Passwords are never stored in plaintext and are protected using industry-standard cryptographic hashing.
7. Data Retention & Account Deletion Policy
In full compliance with Google Play's User Data: Account Deletion requirements, users have complete autonomy over their data. While the current version of the App does not provide an in-app self-service account deletion button, we provide a direct and dedicated web and email deletion procedure that allows users to permanently delete their account and associated personal and health records at any time without needing the app installed.
A. Retention Duration
We retain your profile data and fitness logs only as long as your account is active. If your account remains inactive for over 24 consecutive months, your data will be queued for automated purging.
B. How to Request Account & Data Deletion
Users can submit an official request to permanently delete their account and all associated personal and health data through our designated support channel:
Step-by-step Request Process:
- Send an email to: [email protected]
- Subject line: "Account Deletion Request - MyFitLife"
- Provide your registered email address associated with your MyFitLife profile.
Upon receipt, our data compliance team will verify your request and initiate complete permanent deletion across all systems.
C. What Data is Deleted?
Upon receiving your request, we permanently delete from all active production databases:
- Your user account, name, email address, password hashes, and profile photo.
- All associated fitness logs: step history, calorie burn history, weight logs, fasting timers, and Kegel routine logs.
- Firebase push notification tokens and device association records.
Note: Financial records related to Google Play transactions may be retained in anonymized format solely to the extent required by applicable taxation and accounting laws.
Processing Time: All verified deletion requests are executed within 30 calendar days.
8. International Privacy Rights (GDPR & CCPA/CPRA)
Depending on your jurisdiction, you have statutory rights regarding your personal information:
- Right of Access: Request a copy of the personal and health data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data via app profile settings.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your data as described in Section 7.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Withdraw Consent: Revoke granted permissions (e.g., Activity Recognition, Notifications) at any time through Android System Settings.
- California Residents (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising. You have the right to request disclosure of categories of information collected without facing discrimination.
9. Children's Privacy (COPPA & GDPR-K Compliance)
MyFitLife is directed to a general audience aged 13 and above (or 16 and above in the European Union). The App is not designed for or targeted at children under 13.
We do not knowingly collect personal or health information from children under 13. If we discover that personal data of a child under 13 has been collected without verifiable parental consent, we will immediately take steps to permanently delete that information from our servers. Parents or guardians who believe their child has provided data can contact us at [email protected].
10. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect enhancements in our App features or revisions in applicable legal requirements. When updates occur, the "Last Updated" date at the top of this document will be revised. We advise reviewing this page periodically. Continued use of MyFitLife following posted changes constitutes acceptance of the revised terms.
11. Contact Information
For questions, privacy inquiries, or data access/deletion requests, please reach out to our designated data support team:
Company / Developer: Miaki Media Limited
Application: MyFitLife (com.miaki.fitlife)
Privacy Contact Email: [email protected]
Telephone: +8801843900056
Corporate Address: House-11A, Road-99, Gulshan-2, Dhaka 1212, Bangladesh