Privacy policy
Version 2026-10-14 · applies to the MyFitness Health Android app and the myfitness.bezuri.in service.
Summary
- Your health information is stored encrypted on your phone. The key is kept in your phone’s secure keystore.
- Nothing is sent to our server unless you create an account and agree to cloud sync.
- We do not sell your data or use it for advertising.
- The AI health coach is optional. Only if you turn it on, the information described below is sent to Google’s Gemini AI to generate suggestions.
- You can export your data, withdraw consent, or delete everything at any time from inside the app.
What we collect and why
- Profile (name or nickname, date of birth, optional sex and pregnancy status, height, country, units, diet and allergies, goals, optional conditions, lifestyle answers, optional emergency contact): to personalise explanations, reminders and food suggestions. Optional questions can be skipped.
- Health records you enter or import (blood pressure, heart rate, glucose, weight, waist, SpO2, temperature, steps, exercise, sleep, water, meals, symptoms, medication reminders): to show your readings, trends and summaries.
- Account email and a hashed password (only if you create an account): to sign you in and sync your data.
Health Connect and Samsung Health
If you connect Health Connect, the app reads only the data types you allow (for example steps, sleep, heart rate, blood pressure, weight, glucose, SpO2, temperature, hydration, exercise). It never writes to Health Connect. Data from Health Connect is used only to show your own health information inside the app, and is uploaded to our server only if you have turned on cloud sync. It is not used for advertising, not sold, and not shared with third parties. You can remove access at any time in Health Connect settings, and the app can delete imported records when you disconnect.
The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
AI health coach (optional)
If you turn on the AI coach, the app sends the following through our server to Google’s Gemini API to generate meal calorie estimates, daily reviews and chat answers: your age (not your date of birth), sex if you shared it, height, latest weight, activity level, diet, allergies, goals and conditions you entered, today’s check-in (sleep, meals, water, exercise), recent readings with their status label, and your chat messages. Your name, date of birth, phone number, emergency contact, email and account details are never sent. Our server does not log the content of AI requests or answers. Google processes requests under the Gemini API terms. Messages describing emergency warning signs are answered by the app with emergency instructions and are not sent to the AI. You can turn the AI coach off at any time in Privacy & permissions, which also deletes your chat history on the phone.
Where data is stored
- On your phone: in encrypted app storage. Android cloud backup is disabled for this app.
- On our server (only with cloud sync): in a PostgreSQL database on a server operated for myfitness.bezuri.in, reached only over an encrypted (HTTPS) connection.
Notifications
Reminders are scheduled on your phone. Notification text never includes your readings.
Your choices and rights
- Export: More → Health history & export (JSON or CSV).
- Withdraw consent: More → Privacy & permissions. Withdrawing cloud sync deletes your health data from our server. Withdrawing the main consent erases all data on the phone and on the server.
- Delete your account: More → Account → Delete account permanently. This removes your account and all its data from our server.
- Erase this device: More → Settings → Erase all data on this device.
Security
Passwords are stored as argon2id hashes. Sessions use short-lived access tokens and rotating refresh tokens. Server logs do not contain request bodies or health values. A minimal audit log (for example “account deleted”) is kept without identifying information.
Retention
Server data is kept while your account exists and is deleted when you delete it or withdraw cloud-sync consent. Database backups age out on a rolling basis.
Medical disclaimer
MyFitness Health helps you track and understand your readings. It does not diagnose, treat or prevent any condition and does not replace professional medical advice. In an emergency, call your local emergency number.
Children
The app is for adults aged 18 and over.
Contact
Questions or requests about your data: contact details to be added by the operator before public release.