MyFitnessPal Privacy Policy

This document is MyFitnessPal's Privacy Policy, governing the collection, use, sharing, and retention of personal data submitted by users of its calorie-tracking and fitness platform, with stated legal bases including consent, legitimate interests, and contractual necessity depending on jurisdiction. The policy states that MyFitnessPal collects a broad range of data categories including health and fitness data (food logs, exercise records, weight, body measurements), precise geolocation, device identifiers, payment information, and data from connected third-party apps and wearables, and the terms authorize sharing this data with advertising partners, analytics providers, and affiliated entities. Notable among the policy's provisions is the collection and use of sensitive health-related dietary and body data for advertising and personalization purposes, which sits at the intersection of general consumer privacy law and emerging sensitive data protections; while the policy asserts broad data use rights, applicable law in certain jurisdictions (including California and EU member states) may constrain how this sensitive data can be processed without explicit consent. The policy engages GDPR for EU/EEA users, CCPA/CPRA for California residents, and potentially FTC Act oversight given the nature of health data collection at scale; the policy provides region-specific rights sections for EU users (including rights to access, erasure, portability, and objection) and California residents (including the right to know, delete, and opt out of sale or sharing). MyFitnessPal's collection of dietary data, which may constitute sensitive health information under some regulatory frameworks, warrants particular attention from compliance teams evaluating whether the policy's consent mechanisms satisfy applicable legal thresholds.