Privacy Policy

1. Who we are

BiteMigo is a strength-training product that helps athletes log workouts, track progress, follow plans, and optionally share training activity.

[email protected] · [email protected]

2. Scope

This Policy applies to personal information processed through the BiteMigo app on supported platforms (including H5, iOS, and Android builds) and associated backend APIs.

It does not cover third-party websites, stores, or services that we do not control (for example Apple App Store, Google Play, or Discord), which have their own policies.

3. Information we collect

Account & identity: email and/or phone number, username, nickname, password (stored hashed), avatar, and authentication tokens.

Profile & body metrics: gender, height, weight, weight unit, and related body-profile fields you choose to provide; historical weight logs and their timestamps/sources.

Training data: workout sessions, exercises, sets, reps, loads, rest, duration, notes, visibility settings, ranks/progress derived from training, and adaptation/plan preferences (goals, equipment, schedule, experience).

User content: photos, videos, captions, comments, likes/flexes, follows, and other content you upload or create.

Device & usage: app version, device model/OS, language, crash/diagnostic logs, IP address and approximate network information, and product analytics needed to keep the Service reliable and improve features.

On iOS, Apple Health access is optional: read body weight and write completed strength workouts after authorization. You can revoke access in Health or system settings. Reading may return no data even if authorization was requested. Health data is not sold, used for advertising or automatically sent to AI. Deleting your BiteMigo account does not erase records already in Apple Health; manage those in Health.

We do not intentionally collect sensitive government ID numbers, precise continuous location, or payment card numbers inside the app. Store purchases are handled by Apple/Google under their terms.

4. How we collect information

Directly from you when you register, edit your profile, log workouts, publish feed posts, or contact support.

Automatically when you use the Service (device identifiers, logs, performance metrics).

On iOS, Apple Health access is optional: read body weight and write completed strength workouts after authorization. You can revoke access in Health or system settings. Reading may return no data even if authorization was requested. Health data is not sold, used for advertising or automatically sent to AI. Deleting your BiteMigo account does not erase records already in Apple Health; manage those in Health.

5. How we use information

Provide core features: account security, syncing workouts across devices, ranks, plans, library, feed, and settings.

Personalize content such as recommended plans, language, units, and UI preferences.

Operate social features for content you choose to make public or share with friends.

Maintain safety, prevent abuse/fraud, debug crashes, and improve product quality.

Communicate service notices (security, material policy changes, account issues). Marketing messages, if any, will be optional and can be stopped.

Comply with applicable laws and respond to lawful requests.

We do not sell your personal information.

6. Legal bases (where applicable)

Depending on your region, we process data based on: contract performance (providing the Service you request), consent (optional permissions and certain body/health data), legitimate interests (security, product improvement, anti-abuse) balanced against your rights, and legal obligations.

7. How we share information

Service providers: cloud hosting, storage, CDN, push notification, email/SMS, and analytics vendors that process data only under instructions and confidentiality obligations.

Other users: nickname, avatar, public workouts, comments, and other fields you set as public or friends-visible.

Legal & safety: when required by law, regulation, legal process, or to protect rights, safety, and integrity of users or BiteMigo.

Business transfers: if we are involved in a merger, acquisition, or asset sale, information may transfer under continued protection commitments.

We do not share personal data with advertisers for third-party advertising networks at this time.

When you enable community notifications, the Getui SDK processes device and network information and a push identifier to deliver messages. You can turn this off in notification settings. Getui privacy policy: https://www.getui.com/privacy

AI features require separate permission before sending data to DeepSeek / OpenAI / xAI. The feature notice identifies the data, purpose, processor, processing location, training use and retention. Your US-hosted BiteMigo server does not determine where DeepSeek / OpenAI / xAI processes data. Analysis photos are not stored by BiteMigo; we release the in-memory photo after the request completes or fails. Saved analysis results can be removed in the app. Turning off AI permission stops future requests.

8. Cross-border transfer

Servers or vendors may be located in regions different from where you live. Where required, we use appropriate safeguards (contractual clauses, security controls, and vendor diligence) for cross-border transfers.

9. Retention

Account, profile and workout history are generally retained while the account is active to provide synchronization and history.

After an account deletion request, we process the associated account data, training records, private media and published content. Necessary store reconciliation, security, legal or deletion-processing evidence may remain for the relevant purpose and is not used to restore a deleted profile.

Refer to the in-app receipt for the status of deletion processing. Copies held by others, files you downloaded and Apple Health records are not directly controlled by account deletion. Third-party provider retention rules apply separately.

If backups or pending erasure tasks exist, their removal may not occur at the same time as account deactivation. Contact [email protected] about retention and deletion of particular data.

10. Security

We use industry-standard measures such as encrypted transport (HTTPS/TLS), access controls, hashed passwords, and least-privilege internal access.

No method of transmission or storage is 100% secure. Please protect your credentials and notify us of suspected unauthorized access.

11. Your rights & choices

Access and update profile information in the app (Settings → Edit profile, Weight, Preferences).

Control workout visibility when publishing (private / friends / public).

Withdraw device permissions in system settings (camera, photos, notifications, health).

In the app, open Profile → Settings → Account & security → Delete account. For exports, open Settings → Account data & privacy. You may also contact [email protected]. We verify your identity before processing these requests.

Depending on your location (for example under PIPL, GDPR, or similar laws), you may also have rights to restrict processing, object, or lodge a complaint with a supervisory authority.

12. Children

The Service is intended for users 16 years of age or older (or the higher age required in your region). We do not knowingly collect personal information from children below that age. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

13. Health & fitness data

Body metrics and workout loads are fitness data you provide for training features. They are not medical records and are not used to diagnose or treat conditions.

On iOS, Apple Health access is optional: read body weight and write completed strength workouts after authorization. You can revoke access in Health or system settings. Reading may return no data even if authorization was requested. Health data is not sold, used for advertising or automatically sent to AI. Deleting your BiteMigo account does not erase records already in Apple Health; manage those in Health.

14. Changes to this Policy

We may update this Policy to reflect product or legal changes. We will revise the “Last updated” date and, for material changes, provide in-app notice or other reasonable notice. Continued use after the effective date means you accept the updated Policy.

15. Contact

Privacy, account deletion, and data requests: [email protected]

Public support: [email protected]

16. This website

This static website uses no analytics, advertising or third-party tracking scripts and does not store visitor preferences in browser storage. Hosting and CDN providers may process necessary network and security logs such as IP address, request time and browser information.

Email links open your mail client; this website does not automatically send messages or submit deletion requests.