Privacy Policy
Last updated: 27 October 2026
This policy explains what personal data the FitMY app and the fitmy.world website (“FitMY”, “we”, “us”) collect, why, who processes it, and the choices you have. We follow Malaysia’s Personal Data Protection Act 2010 (PDPA). If you have questions, email [email protected].
In short: we collect what we need to track your food and training and to coach you. We don’t sell your data or show ads. Meal photos are analysed and then discarded. You can delete your account and all of its data at any time, in the app or at fitmy.world/delete-account.
1. What we collect
Account
Your email address, your name, and your password (stored only in hashed form by our authentication provider). If you sign in with Google or Apple, we receive your name, email address and an account identifier from them.
Profile and health details
To calculate your targets and plans, you give us your birth year, sex, height, current and target weight, activity level, goal, training experience, halal preference, diet pattern, food allergies and daily food budget. Some of this is information about your physical health, which we treat as sensitive personal data and use only with your consent, given when you set up your profile.
What you log
Foods and meals, water, weight entries, workouts, meal and workout plans, and foods you add yourself.
Meal photos
When you use the photo scanner, the photo is sent to our AI provider to estimate its nutrition and is then discarded. We never store meal photos. If you log the result, only the dish name and nutrition values are saved.
AI coach conversations
The messages you send to the coach and its replies, so the conversation can continue. You can clear them at any time with New chat.
Technical data
Like any online service, our servers record basic technical information such as IP address, device and app version, and error details, to keep the service secure and working. We count how many photo scans and coach messages you use each day to keep the service fair.
Subscriptions
Payments are handled entirely by Google Play or the App Store. We never see your card details; we only receive whether you have an active subscription and which plan.
2. How we use it
- To run your account and sync your data between devices.
- To calculate your calorie and macro targets and build meal and workout plans.
- To estimate nutrition from your meal photos.
- To let the AI coach give advice based on your profile and recent logs.
- To send you account emails, such as sign up confirmation and password resets.
- To keep FitMY secure, fix problems and prevent misuse.
We do not sell your personal data, use it for advertising, or share it with data brokers.
3. AI features
The photo scanner and the AI coach are powered by Anthropic’s Claude models. When you use them, we send Anthropic the photo, or your message together with a short summary of your profile and recent logs, so it can reply. Under its commercial terms, Anthropic does not use this data to train its models, and it keeps it only for a limited time for safety and abuse monitoring before deleting it. AI estimates and advice can be wrong; see our Terms.
4. Who processes your data
We use a small number of service providers who process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign in and server functions: stores your account and logs | Singapore |
| Anthropic | AI photo scanner and coach | United States |
| Our email delivery provider | Sending account emails | United States |
| Google Play, Apple App Store | App downloads and subscription payments | Global |
| Cloudflare, Google Fonts | Hosting and fonts for this website | Global |
Some providers are outside Malaysia. We choose providers with strong security and data protection commitments. We may also disclose data if the law requires it.
5. How long we keep it
We keep your data while your account is open. When you delete your account, your profile, logs, plans and coach conversations are deleted immediately; copies in encrypted backups are overwritten within 30 days. Server logs are kept for a short period for security.
6. Your rights and choices
- See and correct: you can view and edit your profile and logs in the app at any time.
- Delete: delete your account in the app (Settings → Delete my account) or at fitmy.world/delete-account.
- Access a copy, or ask a question: email [email protected]. We’ll reply within 21 days, as the PDPA requires.
- Withdraw consent: you can stop using a feature, clear coach chats, or delete your account. Some features can’t work without the data they need.
7. Age
FitMY is for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you believe a child has created an account, email us and we’ll delete it.
8. Security
Data is encrypted in transit and at rest. Each user’s data is protected by database rules so that only that user can read it, and secret keys stay on our servers, never in the app. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you.
9. Changes
If we make important changes to this policy, we’ll update the date above and tell you in the app or by email before they take effect.
10. Contact
Email [email protected]. If you’re not satisfied with our answer, you can contact Malaysia’s Personal Data Protection Department (JPDP).