Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy enumerates privacy rights available to users depending on jurisdiction, including access, portability, deletion, correction, opt-out of profiling and targeted advertising, sensitive information opt-in, non-discrimination, and appeal of privacy request decisions, with appeals submitted to privacy@myfitnesspal.com.
This analysis describes what MyFitnessPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the procedural framework through which users may exercise privacy rights, including an explicit appeal mechanism, with exercise directed through the MyFitnessPal Privacy Request Center or by email to privacy@myfitnesspal.com; the availability of specific rights is jurisdiction-dependent.
The agreement establishes that users may submit access, deletion, correction, and opt-out requests through the Privacy Request Center or privacy@myfitnesspal.com, and may appeal denied requests by emailing privacy@myfitnesspal.com with 'APPEAL' in the subject line; the document states that MyFitnessPal will not discriminate against users who exercise these rights.
Cross-platform context
See how other platforms handle User Privacy Rights and Appeal Mechanism and similar clauses.
Compare across platforms →Monitoring
MyFitnessPal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Right to Access and Data Portability . The right to confirm whether we are processing your personal information, who we share it with, and to access or obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format. Right to Deletion . The right to request that we delete your personal information (subject to certain exceptions prescribed by applicable law). Right to Correction . The right to request that we correct inaccuracies in your personal information. Right to limit or opt-out of certain types of processing . Right to opt-in to processing of sensitive information . Right against discrimination . We will not discriminate against you if you decide to exercise your legal rights. Right to appeal decisions . You may have a right to appeal a decision on a privacy rights request. To appeal such a decision, please submit your request to privacy@myfitnesspal.com with 'APPEAL' included in the subject line.Excerpt from MyFitnessPal's Privacy Policy
1) REGULATORY LANDSCAPE: The enumerated rights map to CCPA/CPRA (California), GDPR and UK GDPR (EEA/UK), Washington Consumer Health Data rights, and equivalent frameworks in Canada (PIPEDA), Brazil (LGPD), and South Korea (PIPA). The appeal right reflects CPRA and other state law requirements for an internal appeal process prior to regulatory complaint. Enforcement authorities include the California Privacy Protection Agency, EU supervisory authorities, the UK ICO, and equivalent bodies. 2) GOVERNANCE EXPOSURE: Medium. The appeal mechanism is an operationally required provision under CPRA and several other state privacy statutes. Failure to honor timely appeal responses or to operationalize the Privacy Request Center in accordance with statutory timeframes creates enforcement exposure. The jurisdiction-dependent framing of rights means the company must maintain a differentiated rights fulfillment workflow. 3) JURISDICTION FLAGS: California, Colorado, Connecticut, Virginia, Texas, and other state residents have specific statutory rights and response timeline requirements. EEA and UK users have GDPR-mandated response timelines (generally one month, extendable). The policy does not specify response timelines, which may require evaluation against applicable statutory requirements. 4) CONTRACT AND VENDOR IMPLICATIONS: Service providers processing personal information on MyFitnessPal's behalf must support data subject request fulfillment, including deletion and portability, within applicable statutory timeframes. Vendor agreements should address the mechanics of rights request fulfillment across the data processing ecosystem. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate: (a) whether the Privacy Request Center is operationally capable of processing and responding to requests within all applicable statutory timeframes; (b) whether the appeal process includes a documented internal review procedure with a defined response window; (c) whether authorized agent verification procedures are consistent with CPRA and equivalent requirements; and (d) whether the non-discrimination commitment is operationally implemented across all account and service features.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the procedural framework through which users may exercise privacy rights, including an explicit appeal mechanism, with exercise directed through the MyFitnessPal Privacy Request Center or by email to privacy@myfitnesspal.com; the availability of specific rights is jurisdiction-dependent.
The agreement establishes that users may submit access, deletion, correction, and opt-out requests through the Privacy Request Center or privacy@myfitnesspal.com, and may appeal denied requests by emailing privacy@myfitnesspal.com with 'APPEAL' in the subject line; the document states that MyFitnessPal will not discriminate against users who exercise these rights.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by MyFitnessPal.