Effective Date: November 5, 2026. This version replaces our previous Privacy Policy.
1. Who We Are and What This Policy Covers
MyNetDiary Inc. ("MyNetDiary," "we," "us," or "our"), 621 NW 53rd St., Suite 240, Boca Raton, FL 33487, USA, provides nutrition, weight, activity, and health-tracking services through www.mynetdiary.com (the "Website") and our mobile applications, including Calorie Counter, PlateAI, Carb Genius, Diabetes Tracker, and Calorie Counter Pro (the "Mobile Apps"; together with the Website, the "Service").
This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and your choices and rights. When you begin using the Service, we ask you to confirm that you have read, understand, and consent to our Terms of Use, shown in the Mobile Apps as the Terms and Conditions, including this Privacy Policy. That confirmation records your agreement to the Terms of Use and your consent to the collection and use of information as described in this Privacy Policy, to the extent permitted by applicable law. You choose which health-tracking information to enter or import, and we collect and use it to provide the features you request.
Separate health data notices. If you live in Washington, please also read our Washington Consumer Health Data Privacy Policy. If you live in Nevada, please also read our Nevada Consumer Health Data Privacy Policy. Both are linked from our homepage.
The Service is a general wellness service. MyNetDiary does not provide medical care and is not a "covered entity" under HIPAA, so the information you log is generally not "protected health information" under HIPAA. We still treat it as sensitive and protect it as described here.
2. Information We Collect
Your health information. You choose which health information to enter or import, and we use it to provide the features you request. You may contact us at support@mynetdiary.com at any time to ask us to stop processing your health information or to delete it, subject to applicable law; logging then stops. Because almost everything in a MyNetDiary account is health information, we cannot delete health information while keeping the account. If you are in the EEA, the UK, or Switzerland and withdraw your consent, we will delete your account and its information within 30 days, unless you tell us that you want to keep the account and simply stop logging.
You provide: an email address and password, or sign-in details if you sign in with Apple or Google. An email address is optional: most users do not provide one, and you need it only if you want to sign in on another device. You may also provide your name, date of birth or age, sex, height, weight, activity level, goals, and dietary preferences; your diary entries; foods, meals, recipes, water, exercise, fasting, notes; health information you choose to log, including body measurements, blood glucose, A1C, blood pressure, carbohydrate and insulin entries, medications, including GLP-1 and similar medications, and sleep; meal photos, menu photos, progress photos, and voice entries; community posts and comments, which are visible to other users and may become public; purchase records; messages to support; and, if you refer a friend, that person's email address, used only to send the invitation and credit your account. Purchases in the Mobile Apps are processed by Apple or Google. Purchases on the Website are sold and processed by Paddle, our merchant of record, or by PayPal; they collect your payment details under their own privacy notices, and we do not receive or store your full card number.
From connected devices and services: if you connect Apple Health, Google Health Connect, Google Health, Oura, WHOOP, Fitbit, Garmin, Withings, or a device such as a glucose meter, we receive the data types you authorize, such as activity, sleep, heart rate, weight, and blood glucose. When you send data to a connected service, that service's own privacy policy governs what it receives. We use that data only to provide and improve the features you use, never for advertising, and we do not sell it or share it with advertising platforms or data brokers. The use of information received from Google Health APIs and Google Fit will adhere to the Google Health API and Google Fit Developer and User Data Policies, including the Limited Use requirements. MyNetDiary's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Automatically: device type, operating system, app version, language, IP address and the approximate location derived from it, pages and screens viewed, features used, dates and times of use, crash and performance data, and cookies as described in Section 6. We do not collect precise geolocation.
From app stores: purchase and subscription status.
3. How We Use Information
We use personal information to provide and personalize the Service; provide AI Features you choose to use, as described in Section 4; process purchases and subscriptions; send service messages and, where permitted, information about our features and offers; keep the Service secure and enforce our Terms of Use; understand how the Service is used and fix problems; and comply with law.
We do not use your diary or health information to choose or personalize marketing. We do not use the personal information you submit through the Service to train the models behind our AI Features, and our agreement with OpenAI prohibits OpenAI from using the information we send for our AI Features to train its models. We may create de-identified or aggregated information that cannot reasonably identify you, and we do not attempt to re-identify it.
4. AI Features
AI Features. Our optional AI Features, such as Meal Scan, AI Coach, AI Voice Logging, AI Suggest Meals, AI Restaurant Menu Scan, and AI Exercise Logging, are provided with OpenAI under our business agreement with OpenAI. You use them only if you choose to open them. When you use an AI Feature, we send OpenAI the content you submit, such as a meal photo, voice recording, or the question you type, and the diary information needed to personalize the response, such as your weight and logged foods. We do not transmit your name, email address, or MyNetDiary account identifier as separate identifying account fields, although content you submit may itself contain personal information. The content remains personal information, and we protect it as described in this Privacy Policy. OpenAI processes it only to provide the AI Features to us, may not use it to train its models, and keeps it only for a limited period for abuse monitoring, after which it is deleted by OpenAI in accordance with our agreement. Because the content is not linked to your account at OpenAI, we cannot ask OpenAI to find and delete the content of a particular user; it is deleted when that period ends. If you have questions or requests about information used by our AI Features, contact support@mynetdiary.com. AI Coach is an automated system, not a person, and its output is not medical advice. Where applicable law requires a separate consent for this processing, we must obtain that consent before sending the information. You can stop using AI Features at any time simply by not opening them, and you may ask us at support@mynetdiary.com not to process your information for AI Features; the rest of the Service is unaffected.
5. How We Share Information
We share personal information only with:
- Service providers that work on our behalf under contracts that limit their use of the data to providing services to us: our hosting provider, which operates the servers that run the Service and store your information in the United States; Google for crash diagnostics; Mixpanel for usage statistics; Zendesk for customer support; and OpenAI for AI Features. Paddle and PayPal process Website payments as independent businesses under their own privacy notices.
- Services you connect, at your direction: Apple Health, Google Health Connect, Google Health, Oura, WHOOP, Fitbit, Garmin, Withings, and devices.
- People you choose. The Service lets you share, export, or print your diary, reports, and progress and send them to anyone you choose, such as a physician, dietitian, coach, or family member. You decide what to share and with whom, and what you share is then in that person's hands, not ours. Community posts and comments are visible to other users.
- App stores, Apple and Google, for purchase processing.
- Professional advisers, under duties of confidentiality.
- Authorities and others, when required by law or to protect the rights, property, or safety of MyNetDiary, our users, or others.
- A buyer or successor. If MyNetDiary is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its business or assets, your information may be transferred to the buyer or successor as part of that transaction, which will be bound by this Privacy Policy with respect to information already collected unless you consent otherwise. A transfer of the business in this way is not a sale of your personal information.
We do not sell personal information for money, and we never sell health or diary information or share it with advertisers.
6. Cookies, Analytics, and Advertising
MyNetDiary shows no advertisements. We show no third-party advertisements in the Mobile Apps or on the Website, and we do not share your information with advertising networks. We have removed the measurement tools we previously used; see "Tools we no longer use" below.
Our Website uses only the cookies needed to sign you in, keep your session secure, and keep the site working. We do not use advertising cookies, and we do not use third-party analytics cookies on the Website. You can block or delete cookies in your browser settings, but the member section may not work without the necessary ones. We do not respond to browser "Do Not Track" signals.
In the Mobile Apps, we use Google for crash diagnostics and Mixpanel for usage statistics. Both receive a random identifier that is not your name, email address, or account identifier, together with technical information about crashes or the features used. They do not receive your health values.
Tools we no longer use. In the past we used third-party tools to measure our own advertising campaigns and to support the Website: mobile measurement software in some of our apps and measurement and other third-party scripts on the Website. Depending on the tool, the information processed included device and cookie identifiers, IP address, and app install and subscription events. These tools did not receive your recorded health measurements or diary entries, and they were never used in Diabetes Tracker. They have been discontinued and removed, and there is nothing to opt out of. Some state privacy laws treat the use of such tools as a "sale" or "sharing" of personal information even though no money changes hands; Section 9 describes this for California residents.
7. How Long We Keep Information
We keep your account, diary, and health information for as long as your account exists, so that you can return to the Service at any time. When you delete your account or ask us to delete your information, we delete it from our active systems within 30 days, and usually within 7 days when you delete the account yourself, and from backups within a reasonable period afterwards, except for records we must keep by law, such as transaction records. Usage and log information is kept for a limited period. Community content you posted may remain visible after account deletion unless you delete it beforehand.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls. No method of storage is completely secure. If an incident triggers notification requirements under applicable law, we will notify affected individuals and the appropriate authorities as required, including under the FTC Health Breach Notification Rule where it applies.
9. Your Choices and Rights
You can view and correct most of your information in the Mobile Apps or on the Website, export your diary data from the Service, delete your account in the Mobile Apps or on the Website, disconnect any connected service, unsubscribe from marketing emails using the link in each email or by emailing opt-out@mynetdiary.com, and manage cookies as described in Section 6.
U.S. state rights. Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with privacy laws may have the right to know and access their personal information, correct it, delete it, obtain a portable copy, opt out of its sale or sharing, targeted advertising, and profiling, limit the use of sensitive personal information, obtain a list of third parties it was disclosed to, and not be discriminated against for exercising these rights. We extend these rights to all U.S. users. To make a request, email support@mynetdiary.com; we will verify your identity by asking you to confirm the request from inside your account or, if you have an email address on file, through that address; we may ask for additional information if needed. We will respond within 45 days. You may use an authorized agent, and we may ask for proof of authorization. If we deny a request, you may appeal by emailing support@mynetdiary.com with the subject "Privacy Request Appeal"; if we deny the appeal, you may contact your state attorney general.
California. In the past 12 months we collected these categories of personal information: identifiers; customer records; characteristics of protected classifications, age and sex; commercial information; internet and other network activity; audio and visual information; approximate geolocation; inferences; and sensitive personal information, meaning health information and sign-in credentials. We disclosed these categories to the service providers in Section 5 for business purposes. We do not sell personal information for money. Some state laws may treat our past use of the measurement and other third-party tools described in Section 6 as a "sale" or "sharing" of personal information. To the extent they do, in the 12 months before the effective date of this Privacy Policy the categories involved were identifiers, internet or other electronic network activity information, and commercial information, and the categories of recipients were advertising networks, mobile measurement providers, and other providers of website tools. The purposes of these disclosures were measuring the effectiveness of our own advertising campaigns and supporting Website functionality. We have stopped using these tools, and we do not sell or share the personal information of consumers we know are under 16. We use and disclose sensitive personal information only for the purposes permitted under California law, such as providing the Service you request and keeping it secure, and we do not use it to infer characteristics about you; for that reason we do not provide a separate "Limit the Use of My Sensitive Personal Information" link. California residents may ask once a year about personal information shared for third parties' direct marketing; we do not share information for that purpose. You may request access to personal information we collected on or after January 1, 2022, subject to applicable legal exceptions and limitations.
10. Children and Teens
The Service is not directed to children under 13, and children under 13 may not use it. We do not knowingly collect their personal information; if we learn we have, we delete it and close the account. Users aged 13 through 17 may use the Service only with the prior consent and under the supervision of a parent or legal guardian, as described in our Terms of Use. We do not sell or share their personal information or use it for targeted advertising. A parent or legal guardian may review or delete a teen's information, or withdraw permission, by emailing support@mynetdiary.com. If you believe a child under 13 has given us personal information, please contact us.
11. Users in the EEA, the UK, and Switzerland
MyNetDiary Inc. is the controller of your personal data. We process it on these legal bases: performance of our contract with you, meaning providing the Service, subscriptions, and support; for health information, a condition applicable to special-category data under the relevant law; your consent for AI Features and marketing where required; our legitimate interests in security, fraud prevention, fixing problems, and improving the Service with de-identified data, where your rights do not outweigh them; and legal obligations. We do not make decisions about you based solely on automated processing with legal or similarly significant effects. You are not required to provide personal data, but the Service cannot work without an account and the entries you choose to log.
Your personal data is processed in the United States and in the countries where our service providers operate. For transfers from the EEA, the UK, and Switzerland, we rely on the safeguards in our agreements with our service providers, including the European Commission's standard contractual clauses and the UK International Data Transfer Addendum, and you can ask us for information about them. We keep your personal data for the periods described in Section 7.
You have the right to access, correct, erase, restrict, and port your personal data. You may withdraw any consent you have given at any time by contacting support@mynetdiary.com; withdrawal does not affect processing lawfully carried out before it. We will stop processing based on the withdrawn consent and handle requests for erasure in accordance with applicable law. If you withdraw consent to the processing of your health information, we will delete your account and its information within 30 days, unless you tell us that you want to keep the account and simply stop logging.
Your right to object. You may object at any time to processing based on our legitimate interests, and to the processing of your personal data for direct marketing, including related profiling. Email support@mynetdiary.com; we respond within one month. If you have a complaint, contact us first; we will acknowledge it within 30 days. You may also complain to your data protection authority: in the EEA, the authority listed at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en; in the UK, the Information Commissioner's Office, https://ico.org.uk/make-a-complaint/; in Switzerland, the Federal Data Protection and Information Commissioner, https://www.edoeb.admin.ch.
12. Users in Other Countries
Your information is transferred to and processed in the United States, where privacy laws may differ from your country's. You may have rights under your local law to access, correct, and delete your information and to withdraw consent; email support@mynetdiary.com to exercise them.
13. Changes
We will post updates to this Privacy Policy with a new effective date. If a change is material, we will notify you before it takes effect by a notice in the Mobile Apps or on the Website when you next sign in. Where the law requires, we will ask for your consent before applying a material change to information we already hold. Your continued use of the Service after a change takes effect means the updated Privacy Policy applies to you, except where consent is required.
14. Contact Us
Email: support@mynetdiary.com
Mail: MyNetDiary Inc., Attn: Privacy, 621 NW 53rd St., Suite 240, Boca Raton, FL 33487, USA