Effective October 9, 2026
MyFoodDiary respects your privacy and shares your concern about the security of information you submit to our websites and related applications ("services"). Our privacy policy explains the information we collect, how we use it, when we share it, and your rights in connection with the storing and processing of your data.
Questions or concerns about how we handle your data can be mailed to the address below or via https://www.myfooddiary.com/support.
As is true of most websites, we gather certain information automatically and store the data in server log files. This data includes the visitor's browser type, language preference, referring site, file requested, IP address, and the date and time of each file request. This information is used to analyze trends, administer and secure our services, track user movement in the aggregate, and gather broad demographic information for aggregate use.
We collect personal data required to fulfill our obligations under our Terms of Service. This data is used to provide a personalized user experience and offer fitness recommendations based on your particular needs. For example:
If you store any sensitive personal information on our servers, you are responsible for complying with any regulatory controls regarding that data.
In order to join our Affiliate Program, you will need to provide your contact information and website address. We use this information to aid in the tracking of referrals and to pay you. Your information will not be distributed to any third parties, and you will not have access to any of our members' personal data.
We do not collect social security numbers, genetic data, or religious affiliation. We do collect health-related information that you log or import, such as food and nutrition, exercise, heart rate, sleep, weight, blood sugar, blood pressure, and pregnancy or nursing status. This is sensitive information. We collect it only to provide the features you request, and we never sell it or use it for advertising.
Children under 16 years of age are not permitted to create or use a MyFoodDiary account. We do not knowingly collect information or direct any of our content specifically to children under 16. If you live in a country with a different minimum age limit and you are below the minimum age for providing consent for data collection, you may not use our services without obtaining your legal guardians' consent.
MyFoodDiary processes personal information on the following legal bases:
We share your personal data with your consent or as necessary to complete transactions, communicate with you, or provide services you have requested. For example, we share your credit card information with our credit card processor in order to complete the transaction. We do not sell personally identifiable information to 3rd parties.
When you choose to share your MyFoodDiary data with another online service (e.g., Facebook and X), we will send the data you have agreed to share. Information collected by these third parties is subject to their terms of service and privacy policies. We are not responsible for the practices of third parties.
We reserve the right to disclose your personally identifiable information as required by law, including complying with court orders and other legal or regulatory processes. Additionally, we may share personal data with law enforcement, our legal counsel, or other consultants as needed to protect our business interests, employees, members, and the general public from fraud, abuse, and other harmful acts.
We may share aggregated demographic information and analyses about our user base with our partners. This data does not contain personally identifiable information. For example, we may share the gender distribution of our membership with our affiliates.
Google Analytics provides us with statistics about our site traffic. We also use Remarketing with Google Analytics for advertising purposes. Third-party vendors, including Google, show our ads on sites across the Internet. We and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimize, and serve ads based on someone's past visits to our website.
We will not facilitate the merging of personally identifiable information with non-personally identifiable information unless we have robust notice of and the user's affirmative consent (i.e., opt-in) to that merger.
Visitors can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings or by installing the Google Analytics opt-out browser add-on.
If you connect your Google Health account, we ask for permission to read your exercise sessions (activity and fitness data). We request this only when you choose to import exercise, and we use it only to add your workouts to your MyFoodDiary exercise log, including activity name, start and end time, duration, calories, distance, average heart rate and steps. We do not write to or change your Google Health data.
We do not sell data received from Google Health, use it for advertising or remarketing, or share it with advertising networks or data brokers. It is not included in the aggregated information we share with partners. Our staff do not view it except with your permission, when needed for security, or to comply with the law.
The tokens that let us retrieve your data are encrypted and used only to provide this feature. You can revoke MyFoodDiary's access at any time in your Google Account. Exercise you have imported stays in your exercise log until you delete it under Settings > My Data.
MyFoodDiary's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use web beacons (typically invisible images) to track advertising performance on various ad networks, including Bing, Google, and Facebook. These networks may also show you targeted ads based on your browsing activity. You can opt out of these behavioral ads at https://preferences-mgr.truste.com/
We may share your information with third parties when we forward copyright complaints, which will be forwarded as submitted to us.
We may retain, preserve or disclose your information if we determine that disclosure is reasonably necessary or appropriate to prevent death or serious bodily injury.
In the event MyFoodDiary, Inc. goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personally identifiable information will likely be among the assets transferred. You will be notified via prominent notice on our website for 30 days of any such change in ownership or control of your personal information.
We use cookies (and similar technologies) to keep you logged in, remember your preferences, and provide a customized user experience. By using our services, you agree that we may store these small bits of text on your computer or device. We do not recognize or respond to browser-initiated Do Not Track signals, as the internet industry has not fully developed Do Not Track standards, implementations and solutions. If you configure your browser to reject cookies, you will not be able to log in or use our member services.
We take data security seriously. We have implemented a variety of technical and procedural controls to meet the Payment Card Industry Data Security Standards (PCI DSS) for handling your sensitive data, including the use of security scanning services, firewalls, security patches, web application firewalls, data encryption, and intrusion detection systems.
In order to secure your information during transmission, we offer data encryption using Transport Layer Security (TLS) technology. Secure URLs begin with https:// rather than http://. Our security certificate is supplied and certified by Comodo.
We submit to daily security scans that check our servers for vulnerabilities. If a security vulnerability is found, the scanning service will notify us immediately.
While we work hard to protect your personal information, data transmission over the Internet and data storage cannot be guaranteed to be absolutely secure, and we cannot warrant the security of the information you transmit. Transmitting personal information is done at your own risk.
Our services are operated in the United States. If you are located outside of the United States and you choose to use our services or provide information to us, you acknowledge and understand that your information will be transferred, processed and stored in the United States, as it is necessary to provide our services and perform the Terms of Service. While the United States privacy laws may not be as protective as those in your jurisdiction, we are committed to this Privacy Policy, which is far more restrictive than US legal requirements regarding privacy.
Generally, we retain your personal data for as long as your account is active or as needed to provide you services.
We may retain certain account data indefinitely unless you delete it or request its deletion. For example, we do not automatically delete inactive user accounts, so unless you choose to delete your data, we may retain your account information indefinitely. Doing so allows for the easy reactivation of your account.
Web server logs are retained for a minimum of 1 year.
You may access your personal data by signing into your account and viewing your account details.
If you find your data is incomplete or incorrect, you may correct your information using the forms provided on our website.
You can easily delete food, exercise, body, and personal notes data by logging into your account, clicking the "settings" icon, choosing "My Data," and then selecting the data you wish to remove. If you would like to remove contact and billing information, you will need to cancel your account and submit your request using our contact information provided in this document.
We are under a contractual obligation with Visa, Mastercard, Discover, and American Express to follow the requirements set forth in the Payment Card Industry Data Security Standard (PCI DSS). For example, we are required to store web server logs (including IP addresses) for a minimum of 1 year. As a result of this contractual obligation and our legitimate interest of safeguarding the data stored, some personal data cannot be removed at the time of your request.
You can modify or remove all non-essential data provided to us. Deleted data is permanently removed. Data essential to maintaining your account can be edited but not removed while your account is active.
If you have contacted us about privacy concerns and we have been unable to resolve the issue to your satisfaction, you have the right to bring the complaint to the relevant data protection authority, which has the power to enforce privacy laws in your country.
You may export your food, exercise, and weight data in comma-separated values (CSV) files, which can be viewed using a spreadsheet application (e.g., Microsoft Excel).
You have the right to withdraw your consent to the processing of your information at any time. In certain cases, we may continue to process your information after you have withdrawn consent if we have a legal basis to do so or if your withdrawal of consent was limited to certain processing activities.
You have the right to object to our handling of your personal data at any time. If you object to our use of your personal data for direct marketing purposes, such as an email newsletter, we will honor your request as quickly as reasonably possible. We will review all other objections on the grounds of each situation based on any legal requirements or legitimate interests we may hold processing the data.
Residents of California and several other states, including Colorado, Connecticut, Kentucky, Oregon, Texas, and Virginia, have additional rights regarding their personal information. This section supplements the rest of this policy.
In the past 12 months we have collected the following categories of personal information. We collect it from you, from your device and browser, and from services you connect to MyFoodDiary.
| Category | Examples | Disclosed for business purposes to | Shared for targeted advertising |
|---|---|---|---|
| Identifiers | Name, email address, username, IP address, cookie IDs | Service providers | Yes (IP address and cookie IDs only) |
| Customer and commercial records | Billing address, subscription and purchase history | Payment processor and service providers | No |
| Personal characteristics | Date of birth, gender, pregnancy or nursing status | Service providers | No |
| Internet activity | Pages viewed, browser type, referring site | Service providers | Yes |
| Health information (sensitive) | Food, exercise, sleep, weight, heart rate, blood sugar, blood pressure, and data imported from Google Health | Service providers | No |
| Account login (sensitive) | Username and password | Service providers | No |
| Inferences | Calorie targets and fitness recommendations | Service providers | No |
| Forum content | Posts and profile details | Public, as described above | No |
We use this information for the purposes described in this policy: providing and personalizing our services, processing payments, communicating with you, securing our services, and improving and marketing our services. We keep each category as long as your account is active or as described under "Data Retention Policy."
We do not sell personal information for money. Our advertising partners, including Google, Microsoft (Bing), and Meta (Facebook), receive identifiers and internet activity through cookies and web beacons so they can show you our ads on other sites. California law calls this "sharing," and some other states treat it as a "sale" or "targeted advertising." We do not sell or share health information or Google Health data, and we do not knowingly sell or share the personal information of anyone under 16.
We use sensitive information only to provide the services you request, to secure our services, and as otherwise permitted by law. We process health information only with your consent, as described under "Legal Basis for Collecting Data." Residents of Washington, Nevada, and Connecticut can find more about how we handle consumer health data in our Consumer Health Data Privacy Policy.
Depending on where you live, you have the right to:
To opt out of sale, sharing, and targeted advertising, visit our Your Privacy Choices page, which is also linked at the bottom of our pages. We also honor the Global Privacy Control signal sent by your browser.
For all other requests, use our support form or write to us at the address at the top of this policy. We will verify your identity before acting on a request, usually by confirming details of your account. You may also use an authorized agent. We will respond within the time required by your state's law.
If we deny your request, you may appeal by replying to our decision. If you are not satisfied with the outcome of your appeal, you may contact your state attorney general.
We reserve the right to modify this privacy policy at any time. Please review it occasionally. If we make changes to this privacy policy, the updated policy will be posted in a timely manner and, if we make material changes, we will provide a prominent notice. If you object to any of the changes to this Privacy Policy, you should cancel your account and stop using our services.