Privacy Notice
Last updated: July 19, 2026
AfyaFast ("AfyaFast", "we", "us") is the controller of the personal data we collect through the AfyaFast website and app. AfyaFast is an all-in-one wellness companion for fasting, nutrition, hydration, movement, sleep and mood, listed in the Health & Fitness category on the App Store and Google Play. This notice explains what we collect, why, who we share it with, and the choices you have. Questions? Email privacy@afyafast.com.
1. Information we collect
- Account data: name, email, password hash, profile preferences.
- Wellness data you enter: fasts, meals, hydration, weight, body measurements, workouts, sleep, mood, journal entries, progress photos, coach conversations, goals.
- Household & social data: invites you send, buddy links, and information you choose to share with your household.
- Device & usage data: device type, browser, IP address, session events, feature usage, error diagnostics.
- Communications: support messages and email interactions.
- Cookies & local storage: used for sign-in, preferences, and product analytics.
Payment card details are entered directly with our payments provider (Paddle) and are never stored by AfyaFast.
2. Why we use it
- Provide, personalize, and secure the Service (contract).
- Generate AI wellness information, insights, and forecasts you request (contract). AfyaFast's AI features provide general educational content only and do not make, or materially influence, decisions about you.
- Prevent fraud and abuse, and comply with law (legitimate interest / legal obligation).
- Improve product quality using aggregated, non-identifying analytics (legitimate interest).
- Send transactional email (contract) and, only with your consent, marketing email.
3. Who we share it with
- Merchant of Record: Paddle handles checkout, subscriptions, payments, tax, and invoicing.
- Infrastructure providers: cloud hosting, database, email delivery, error tracking, and analytics used to run the Service.
- AI providers: Google (Gemini) and other model providers process the prompts and content you submit to AI features to return a response.
- Household members and buddies you invite, only for the data you have chosen to share.
- Authorities when required by law or to protect our rights.
- Advisers (legal, accounting) under confidentiality.
We do not sell your personal data.
4. Data safety summary (Google Play)
This summary mirrors our Google Play Data safety form. "Shared" uses Google Play's definition; service providers acting on our behalf (hosting, database, email delivery, analytics, AI providers, and our payments provider Paddle) are not counted as sharing. We do not sell personal data and do not use any data for advertising.
Security practices
- Data is encrypted in transit (HTTPS/TLS).
- You can request deletion of your account and personal data in-app or by emailing privacy@afyafast.com.
- Not directed to children (18+); we have not committed to the Play Families Policy.
- We have not undergone an independent security review.
Data we collect
- Personal info: name (optional), email (required), user IDs, and profile info such as age band, sex, goals and timezone — for account management, app functionality and personalization.
- Financial info: purchase history for subscribers — for account management and app functionality. Payment card and bank details are collected directly by Paddle and never stored by AfyaFast.
- Health and fitness: health info you enter (weight, body measurements, fasts, hydration, sleep, mood, journal entries, and any wearable metrics you choose to connect) and fitness info (workouts, steps, movement activity) — for app functionality, personalization and analytics.
- Photos: progress photos and meal photos you upload (including photos submitted to the AI Wellness Guide for food recognition) — for app functionality and personalization.
- App activity: app interactions and other user-generated content such as fasting notes, meal logs, mood entries, journal entries and AI Wellness Guide prompts — for app functionality, personalization and analytics.
- App info and performance: crash logs, diagnostics and other performance data — for analytics and app functionality.
- Device or other IDs: — for analytics, fraud prevention, security and app functionality.
Data we do not collect
- Precise or approximate location.
- Contacts from your device (household invites use the email address you type).
- In-app search history, installed apps, or web browsing history across other apps.
- Voice, audio, files, documents, calendar events or SMS/in-app messages.
- Health data from sensors unless you explicitly connect a wearable or enter it yourself.
AI features
The AI Wellness Guide returns general educational information based on your recent in-app activity. It does not diagnose, prescribe, or make (or materially influence) decisions about you. AI providers (for example Google Gemini) process prompts on our behalf under a data-processing agreement and do not use your content to train their models.
5. International transfers
Your data may be processed in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK IDTA.
6. How long we keep it
We retain your account and wellness data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we must keep it longer (for example, billing and tax records held by Paddle).
7. Your rights
Depending on where you live, you may have the right to:
- access, correct, or delete your personal data;
- request a portable copy;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data-protection authority.
To exercise any of these rights, email privacy@afyafast.com from the address on your account. We will respond within 30 days.
8. Security
We use industry-standard technical and organizational measures — including encryption in transit, row-level access controls, and least-privilege administration — to protect your data. No system is perfectly secure; please use a strong, unique password.
9. Children
AfyaFast is not directed to children under 16. If you believe a child has provided us with personal data, contact privacy@afyafast.com and we will delete it.
10. Cookies
We use strictly-necessary cookies for authentication and session management, and limited analytics cookies to understand product usage. You can control non-essential cookies through your browser settings.
11. Changes to this notice
We may update this Privacy Notice. Material changes will be highlighted in-app or by email before they take effect.
12. Contact
AfyaFast · privacy@afyafast.com