Myoful — Privacy Policy

Last updated: September 12, 2026.

Who we are. Myoful ("we") is a consumer wellness app operated by 1001397574 Ontario Inc, contact cla892us+myoful@gmail.com.

What Myoful is. A general wellness app that helps you track food, protein, medication reminders, symptoms, and weight. It is not a medical service and does not provide medical advice. See our in-app disclaimer.

Information we collect.

• Account info: email, authentication data.
• Health-related info you enter: meals and protein, injections you log, side-effect check-ins, resistance-training days, water intake, and weight.
• Barcode lookups: when you scan or type a product barcode, the camera reads the code on your device and only the barcode number is sent to Open Food Facts to look up nutrition information. No photograph is captured, stored, or uploaded, and nothing identifying you is sent with it.
• Device identifiers. Our subscription provider (RevenueCat) assigns your installation an identifier so it can tell which device holds which subscription, and reads the device identifier the operating system provides for that purpose. It is used only to match a purchase to an account and to restore a subscription you already paid for. It is never used for advertising or tracking across other apps, and no health data is attached to it.
• App update checks. Myoful checks for over-the-air updates through Expo. That check sends your app version, runtime version, and platform, together with an installation identifier that is specific to this app. It carries no account or health data.
• Basic technical data. Myoful contains no analytics, advertising, or crash-reporting SDK, so we do not collect usage analytics or crash reports from your device. Our hosting provider keeps standard server logs (such as IP address and request time) for security and reliability. We never put your health data in logs.

How we use it. To provide the app's features (your protein target, logs, reminders, and wellness summaries), to keep your account secure, and to improve the product.

How we share it. We do not sell your personal information. We share data only with service providers that run the app on our behalf, under contract, and only as needed:

• Supabase — database, authentication, and hosting for your account and your logs.
• Open Food Facts — receives only a product barcode number when you look one up, with no account or device identifier attached.
• RevenueCat, and the Google Play Store — subscription purchases, entitlement status, and the device identifier described above. They do not receive your health data. (The Apple App Store would play the same role if you use Myoful on iOS.)
• Expo — app builds, delivery, and over-the-air update checks.

Reminders. Any reminders you switch on are created and stored on your own device. We do not send push notifications from our servers, and your reminder settings are not uploaded to us.

Your control. You can view, edit, export, and delete your data in the app, or by contacting cla892us+myoful@gmail.com. Exporting produces a CSV file on your device that you choose what to do with. Deleting your account removes your account and your personal data from the live app immediately, and cannot be undone. Two things necessarily outlast it: deleted records may sit in routine encrypted backups for up to 30 days before those backups age out, and the record of any subscription payment is held by Google Play and by our subscription provider to meet tax and record-keeping obligations. Neither is reachable from the app, and the payment record contains no health data. The full list of what is removed and what is kept is at https://myoful-legal.netlify.app/delete-account.html

Security. Data is encrypted in transit and at rest, and every record is isolated to your account by database row-level security, so one account cannot read another's data. Access requires authentication. No system is perfectly secure.

Breach notice. If a breach of your health-related information occurs, we will notify you (and regulators where required) without undue delay.

Children. Myoful is not intended for anyone under 18. We do not knowingly collect their data.

Changes. We'll post updates here and, for material changes, notify you in-app.

Contact. cla892us+myoful@gmail.com · 356 Archdekin, Brampton, ON L6V 3E8, Canada.