Privacy Notice

• Account data: name, email, password hash, profile preferences.
• Wellness data you enter: fasts, meals, hydration, weight, body measurements, workouts, sleep, mood, journal entries, progress photos, coach conversations, goals.
• Household & social data: invites you send, buddy links, and information you choose to share with your household.
• Device & usage data: device type, browser, IP address, session events, feature usage, error diagnostics.
• Communications: support messages and email interactions.
• Cookies & local storage: used for sign-in, preferences, and product analytics.

Payment card details are entered directly with our payments provider (Paddle) and are never stored by AfyaFast.

• Provide, personalize, and secure the Service (contract).
• Generate AI coaching, insights, and forecasts you request (contract).
• Prevent fraud and abuse, and comply with law (legitimate interest / legal obligation).
• Improve product quality using aggregated, non-identifying analytics (legitimate interest).
• Send transactional email (contract) and, only with your consent, marketing email.

• Merchant of Record: Paddle handles checkout, subscriptions, payments, tax, and invoicing.
• Infrastructure providers: cloud hosting, database, email delivery, error tracking, and analytics used to run the Service.
• AI providers: Google (Gemini) and other model providers process the prompts and content you submit to AI features to return a response.
• Household members and buddies you invite, only for the data you have chosen to share.
• Authorities when required by law or to protect our rights.
• Advisers (legal, accounting) under confidentiality.

We do not sell your personal data.

Your data may be processed in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK IDTA.

We retain your account and wellness data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we must keep it longer (for example, billing and tax records held by Paddle).

Depending on where you live, you may have the right to:

• access, correct, or delete your personal data;
• request a portable copy;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, email privacy@afyafast.com from the address on your account. We will respond within 30 days.

We use industry-standard technical and organizational measures — including encryption in transit, row-level access controls, and least-privilege administration — to protect your data. No system is perfectly secure; please use a strong, unique password.

AfyaFast is not directed to children under 16. If you believe a child has provided us with personal data, contact privacy@afyafast.com and we will delete it.

We use strictly-necessary cookies for authentication and session management, and limited analytics cookies to understand product usage. You can control non-essential cookies through your browser settings.

We may update this Privacy Notice. Material changes will be highlighted in-app or by email before they take effect.

AfyaFast · privacy@afyafast.com