Privacy policy

DMC Digital LLC ("we", "our", "MyFitScan") is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, store and protect your personal data when you use our MyFitScan mobile application and our website myfitscan.com.

We collect the following categories of data:

2.1 Data provided directly

• Email address and password (registration)
• Profile information: gender, age, height, weight, activity level, goals, dietary preferences
• Body photos (body scan)
• Meal photos (food analysis)
• Messages sent to the AI coach

2.2 Data collected automatically

• Usage data (features used, frequency)
• Technical data (device type, OS, app version)
• Cookies and similar technologies (website only)

MyFitScan requests access to your device's camera and photo library for the following purposes:

• Camera: To take body scan photos (front and side views) and meal photos for nutritional analysis.
• Photo library: To select existing photos from your library for body scan or meal analysis.

Photos are uploaded to our secure servers solely for AI analysis and are never shared with third parties. You can revoke camera access at any time through your device settings.

MyFitScan is not a medical device and is not intended to diagnose, treat, cure or prevent any disease or medical condition. The body composition analysis, nutritional information and coaching recommendations provided by our AI are for informational and wellness purposes only. They do not constitute medical advice and should not be relied upon as a substitute for professional medical advice, diagnosis or treatment.

MyFitScan does not collect, store or process any data classified as "health data" under HIPAA (Health Insurance Portability and Accountability Act). The app does not integrate with Apple Health (HealthKit) or Google Health Connect.

We process your personal data on the following legal bases:

• Performance of a contract: processing necessary to provide the service (body analysis, food tracking, coaching)
• Consent: body and meal photos, non-essential cookies
• Legitimate interest: service improvement, fraud prevention

Your data is used to:

• Provide and personalize our services (scans, analyses, coaching)
• Create and manage your user account
• Generate body and nutritional analyses via AI
• Personalize meal plans and recommendations
• Provide customer support
• Improve our services and AI technology
• Comply with our legal obligations

We use the following sub-processors to operate our service:

• Supabase (Supabase Inc., USA): database hosting and authentication
• Cloudflare R2 (Cloudflare Inc., USA): photo storage (body scans and meals)
• Anthropic (Anthropic PBC, USA): AI analysis of body scans (Claude)
• OpenAI (OpenAI LLC, USA): AI analysis of meal photos and conversational coaching (GPT)
• RevenueCat (RevenueCat Inc., USA): in-app subscription management
• Vercel (Vercel Inc., USA): website hosting

Our sub-processors are based in the United States. Data transfers from the European Economic Area (EEA) to the United States are governed by the European Commission's Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework, depending on the sub-processor.

• Account data: retained for the duration of your registration, then deleted within 30 days of account deletion
• Body and meal photos: retained for the duration of your registration, then deleted within 30 days of account deletion
• Coaching history: retained for 12 rolling months
• Billing data: retained in accordance with legal obligations (10 years)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured, readable format
• Right to object: object to the processing of your data
• Right to restriction: restrict the processing of your data in certain cases
• Withdrawal of consent: withdraw your consent at any time

To exercise your rights, contact us at support@myfitscan.com. We will respond within 30 days.

You may also file a complaint with the competent supervisory authority (in France: CNIL, www.cnil.fr; in Germany: your state's data protection authority).

You can request the complete deletion of your personal data at any time by:

• Using the "Delete my account" feature in the app settings under "My Account"
• Sending an email to support@myfitscan.com with the subject "Data Deletion Request"

Upon receiving your request, we will delete all your personal data, including body photos, meal photos, coaching history and profile information, within 30 days. Billing records may be retained longer as required by law.

MyFitScan does not track you across other companies' apps or websites. We do not use advertising identifiers (IDFA) or participate in cross-app tracking. We do not share your data with data brokers or advertising networks.

Our website uses the following cookies:

• Essential cookies: necessary for the website to function (session, consent preferences)
• Analytical cookies: anonymized audience measurement (with your consent)

You can manage your cookie preferences via the banner displayed on your first visit or through your browser settings.

We implement appropriate technical and organizational security measures to protect your personal data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with password hashing
• Restricted access to data on a need-to-know basis
• Pre-signed URLs with expiration for photo access
• Regular monitoring and auditing of our systems

MyFitScan is not intended for persons under 16 years of age. In accordance with COPPA (Children's Online Privacy Protection Act), we do not knowingly collect personal data from children under 13. If we discover that data from a minor has been collected, we will delete it promptly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: what personal data we collect, use, share or sell
• Right to delete: request the deletion of your personal data
• Right to opt-out of sale: we do not sell your personal data
• Non-discrimination: we will not discriminate against you for exercising your rights

We reserve the right to modify this privacy policy at any time. Changes will be published on this page with the update date. We will notify you of significant changes via an in-app notification.

For any questions regarding this privacy policy or the protection of your data, contact us:

• Email: support@myfitscan.com
• Address: DMC Digital LLC, 4405 Jager Dr NE Ste C4-4456, Rio Rancho, NM 87144, United States