MyFitnessPal
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
You share health diaries and ads data; they take a license, auto-renew Premium.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
Account info, food and fitness diaries, photos, device IDs, and data from ads partners and wearables.
Read the exact line
Privacy policy
“MyFitnessPal collects information from you directly when you create an account, use our Services, and through third parties.”
Training
They run the app, personalize with machine learning, and show targeted ads on and off MyFitnessPal.
Read the exact line
Privacy policy
“MyFitnessPal uses your information to provide you with our Services, show you relevant ads and content, and improve the quality of our Services.”
Sharing
Service providers, other users you share with, and marketing and advertising partners can get your data.
Read the exact line
Privacy policy
“MyFitnessPal shares your information with service providers, business partners, and other third parties to provide you with our Services.”
Kept
They keep it as long as they say they need it for the policy’s purposes or the law.
Read the exact line
Privacy policy
“We will retain your personal information as long as necessary to fulfill the purposes outlined in this Policy (including to satisfy our legal or reporting requirements), unless a longer retention period is required or allowed under law.”
Controls
You can change ad cookies, app personalization, marketing emails, and file access or delete requests.
Read the exact line
Privacy policy
“You can exercise your by visiting our MyFitnessPal Privacy Request Center and selecting the country/region in which you reside along with the you wish to exercise.”
Fine print
Premium auto-renews with no refunds; they take a forever license.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off targeted advertising cookies and in-app personalization ads
Website footer “Cookie Preferences”; in the app, Privacy Center under the “More” menu
Request access or deletion of your data
MyFitnessPal Privacy Request Center, or privacy@myfitnesspal.com
Cancel Premium before renewal
Website Settings if you signed up on myfitnesspal.com; otherwise Apple App Store or Google Play
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Anything you post or log can be used, copied, changed, and passed on forever, even after you leave.
Read the exact line
Terms of service
“you grant us and our users a , non-exclusive, , , freely transferable, , worldwide right and license to use, host, store, cache, copy, reproduce, publish, display”
For example, a progress photo or diary note could be reused in the product without paying you or asking again.
They and ad companies track you to show personalized ads on this app and other sites and apps.
Read the exact line
Privacy policy
“We and our third-party partners may use Tracking Technologies to collect certain information, including your device’s IP address, online identifiers (e.g., cookie ID, mobile advertising ID, etc.), and activity information for such purposes.”
For example, logging meals in the app could help an ad network show you diet ads in another app.
They say they do not “sell” data in the everyday sense, but cookie tracking can still count as a sale or share under privacy laws.
Read the exact line
Privacy policy
“certain uses of Functional Cookies and/or Targeted Advertising Cookies on our website to collect, use, and disclose information may constitute “sales” or “sharing” of personal information”
For example, a California user can opt out of that cookie sharing in Cookie Preferences.
If you pay for Premium, you generally cannot get money back, and it keeps charging until you cancel.
Read the exact line
Terms of service
“All purchases of Premium Services are final and non-refundable, except at our sole discretion.”
For example, if you forget to cancel an annual plan, you still pay for the rest of the year.
If someone sues them over something you posted or how you used the app, you may have to pay their legal bills.
Read the exact line
Terms of service
“you agree to and hold MyFitnessPal harmless from any and all liabilities, claims, demands, losses, or expenses, including reasonable accounting and attorneys’ fees, made by any third party due to or arising out of (a) the User-Generated Content you access or share”
For example, if a photo you shared leads to a lawsuit, they can ask you to cover their lawyers.
They can cut off features or your access without warning.
Read the exact line
Terms of service
“We may also impose limits on certain Services or restrict your access to part or all of the Services without notice or .”
For example, they could lock you out of the app one day and you would not get a heads-up first.
Your data can be fed into machine learning and AI to improve the product, and they do not describe a training opt-out.
Read the exact line
Privacy policy
“We use your personal information to improve and enhance our Services, including through the use of various technologies (e.g., business intelligence tools, machine learning systems, and artificial intelligence)”
For example, your food logs could help train systems that suggest meals to other people.
What you log about food, meds, weight, and conditions can be treated as sensitive health information.
Read the exact line
Privacy policy
“Food and Activity Diary Data may include sensitive personal information when the information indicates or allows someone to infer a health condition.”
For example, logging a medication or BMI could reveal a health issue they store with your account.
The app is for adults 18 and up, and they say they try to block younger people from signing up.
Read the exact line
Privacy policy
“We implement technical measures to prevent individuals under 18 years of age from creating an account or otherwise using our Services.”
For example, if they find an under-18 account, they say they will delete it and the data.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- data subject rights
- The legal rights you have over your data, such as seeing it, fixing it, deleting it or moving it. For example, you can email the company and ask for a copy of everything it holds about you.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
How we got here · grade D · score 35/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
Besides account and diary data, they collect device IDs, cookies, inferred location, partner and social data, photos, and browsing-like activity for ads.
Does it record your voice, face or body, and what happens to that?
Voice logging of food is collected as diary data and stored with your account; they do not say it is deleted after the session.
Are your chats and uploads used to train AI models, and is that off by default?
They say they use personal information with machine learning and AI to improve the service and do not offer a training opt-out.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They run targeted ads with third-party cookies, ad networks, and cross-device tracking, with opt-outs in cookies and the app.
Do they sell or share your data, and can you opt out?
They say they do not expressly sell data, but cookie and targeted-ad uses may count as sale or sharing, and you can opt out.
What rights do they take over what you type and what the AI makes?
You keep ownership of what you provide, but you give them a perpetual, irrevocable, sublicensable license to use it.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for the policy or law. Deletion is by Privacy Request Center or email, not a stated 30-day in-app wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build inferences and personalize features from your data, but they do not describe a memory you can view, edit, or turn off.
Do they commit to basic security, and have they leaked data?
They say they use reasonable technical, organizational, and administrative safeguards, with no audit or bug-bounty details.
Is there a real age gate, and are teens protected?
You must be 18. They say they use technical measures to block under-18 signups and will delete those accounts if found.
Will they tell you when the rules change, and is the policy specific?
The policy is dated March 18, 2025, lists data types and purposes, and terms say they will notify you in advance of material changes.
Can they close your account without warning, and can you get your data out first?
They may restrict or cut off access to some or all services without notice or liability. You can delete your account anytime.
If something goes wrong, who pays?
The service is “as is,” liability is capped around $500 or a year of fees, and you must indemnify them for claims tied to your use or content.
Do subscriptions renew on their own, and can you get a refund?
Premium auto-renews until you cancel. Purchases are final and non-refundable except at their discretion (EU users may get 14 days).
The privacy policy is 8,394 words at a professional or legal expert level (Flesch reading ease 1); the terms are 8,774 words at a professional or legal expert level.
