Privacy Policy

This Privacy Policy explains how Miyos Technologies Inc. (“Miyos,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you use the Miyos mobile application, related account features, our website, and support channels that link to this Policy.

Person in charge of the protection of personal information / Privacy Officer: Miyos Technologies Inc.: support@miyos.ca.

Miyos does not need precise GPS location for its core meal-planning features. Google Sign-In’s SDK privacy declaration includes approximate (coarse) location; our infrastructure and service providers may also process an IP address and infer an approximate region for security, localization, or analytics. The categories listed by an SDK describe data it may process; they do not mean every item is collected from every Miyos user.

We collect information:

• directly from you, when you create content, choose preferences, upload an image, or contact us;
• automatically from the App or website, through necessary logs, diagnostics, security technologies, and analytics that we enable;
• from authentication providers, such as Google Sign-In and, if offered in the App, Sign in with Apple, when you choose that sign-in method; and
• from Apple and RevenueCat, for subscription, purchase-history, and entitlement information.

We do not buy data brokers’ profiles about you.

We use personal information only for purposes that are identified and permitted by law, including to:

• create, authenticate, maintain, and secure your account;
• provide recipes, custom recipes, meal plans, batch-prep workflows, grocery lists, label scanning, and other requested features;
• process AI requests and return results;
• save and sync user content and preferences;
• verify subscription entitlements and restore purchases;
• provide support and respond to privacy requests;
• detect abuse, fraud, security incidents, and technical problems;
• understand aggregate feature usage and improve performance; and
• comply with legal obligations and enforce valid legal rights.

If we want to use personal information for a materially different purpose that requires consent, we will ask for that consent separately as required by law.

Depending on what you choose to enter, nutrition targets, dietary restrictions, allergy information, or similar content may be considered sensitive personal information in some jurisdictions. Miyos does not require you to provide medical diagnoses and you should avoid entering unnecessary medical or other highly sensitive information.

Where applicable law requires express consent for sensitive information or for a particular use or disclosure, we will seek that consent. You may withdraw consent where the law gives you that right, subject to legal or contractual limits and the fact that some features cannot work without the information needed to provide them.

We disclose personal information only as reasonably necessary for the purposes described in this Policy, including to service providers that help us operate Miyos. Current categories include:

• Google Sign-In, Firebase, and Google Cloud: sign-in and authentication, cloud infrastructure and storage, app-installation services, and crash and other diagnostics. Google Sign-In may process the name, email address, phone number (if available), approximate location, user and device identifiers, usage information, and other technical data described in its SDK privacy declaration, depending on the sign-in flow and configuration. We receive the account information you authorize for sign-in;
• Anthropic: AI processing for features such as content generation and nutrition-label/image processing;
• Apple: App Store distribution, In-App Purchase, subscription status, and Sign in with Apple if that sign-in method is offered;
• RevenueCat: helps us verify and manage subscription entitlements alongside Apple’s In-App Purchase system. It processes purchase history and subscription status and may receive your internal user ID, and your name or email address if you have provided them;
• analytics and diagnostics providers: where enabled, to measure usage, crashes, and performance.

If you open Walmart Canada’s website through Miyos’s in-app webview, information you choose to enter on Walmart’s website is provided directly to Walmart and is governed by Walmart’s privacy policy. Miyos does not receive or process your Walmart account credentials or payment-card information merely because the website is displayed inside the App.

We may also disclose information where required by law, to protect users or the Service, or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable legal safeguards.

As of this Policy’s last-updated date, Miyos does not sell personal information and does not share personal information for third-party cross-context behavioural advertising.

When you use an AI-powered feature, the text, recipe information, nutrition-label image, or other input needed for that request may be sent to Anthropic for processing, and the resulting output is returned to Miyos. Do not include unnecessary personal information in AI prompts or uploaded label images.

Miyos uses AI to provide meal-planning and content features. We do not use these AI features to make decisions about you that produce legal or similarly significant effects.

Our website may use cookies or similar technologies that are necessary for security, preferences, and site operation. The App or website may also use analytics or diagnostics technologies to understand usage, crashes, and performance.

Firebase Crashlytics and related Firebase services may process crash reports, app-installation information, and other diagnostic data to help us detect failures and improve reliability. Crash reports may be associated with your internal user ID when needed to investigate an issue tied to your account.

The SDK privacy declarations shown in our current iOS privacy report mark the listed data types as not used for tracking across other companies’ apps or websites. Where consent is required for any non-essential tracking, we will request it. You can use device, browser, and in-app settings to control permissions available to you. If our tracking practices materially change, we will update this Policy and any consent controls that applicable law requires.

Some of our service providers operate infrastructure outside Quebec and outside Canada, including in the United States. Personal information may therefore be processed in another jurisdiction and may be subject to that jurisdiction’s laws.

Where Quebec law requires a privacy impact assessment or contractual safeguards before communicating personal information outside Quebec, Miyos will apply those requirements. We seek to limit transfers to information reasonably necessary for the relevant service.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, subject to legal, accounting, fraud-prevention, security, and dispute-resolution requirements.

• Account information and saved user content are generally retained while your account remains active.
• When you delete content or your account, we delete or de-identify associated personal information from active systems unless we are required or permitted to retain specific information.
• Backups and technical logs may remain for a limited period before they are overwritten or securely deleted.
• Transaction and compliance records may be retained for the period required by law or reasonably necessary to establish or defend legal rights.

You can initiate account deletion from the Profile or account settings in Miyos. Account deletion removes the Miyos account and associated personal data that we are not legally required to keep. It does not itself cancel an Apple subscription.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or loss. No system is completely secure, so we cannot guarantee absolute security.

We maintain processes for responding to privacy and security incidents. Where the law requires notification of a confidentiality incident that presents a risk of serious injury, we will notify affected individuals and the appropriate authority.

Depending on where you live, you may have rights to access personal information we hold about you, obtain information about how it is used or disclosed, correct inaccurate information, withdraw consent, request deletion, object to or restrict certain processing, or receive a copy in a portable format where applicable.

Quebec residents may also contact the person in charge of the protection of personal information regarding access, rectification, complaints, consent, retention, and other rights under Quebec privacy law. If you are not satisfied with our response, you may file a complaint with Quebec's Commission d'accès à l'information, the independent authority responsible for overseeing compliance with Quebec's private-sector privacy law.

European Economic Area and United Kingdom residents

If you are located in the European Economic Area or the United Kingdom, Miyos Technologies Inc. is the controller of your personal information for the purposes described in this Policy. We process personal information on the following legal bases: performance of our contract with you (providing the Service you request), our legitimate interests (such as securing, troubleshooting, and improving Miyos), your consent (where required, such as for certain sensitive information), and compliance with our legal obligations. You have the rights described above, and you also have the right to lodge a complaint with your local data protection supervisory authority.

California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know the categories and specific pieces of personal information we have collected about you, to request deletion of personal information, to correct inaccurate personal information, and to know whether we sell or share personal information. As stated in Section 6 above, Miyos does not sell personal information and does not share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising any of these rights. You may submit a request yourself, or through an authorized agent, using the contact method below.

To make a request, email support@miyos.ca. We may need to verify your identity before completing a request. You may also update or delete certain information directly in the App.

Miyos is intended only for people who are at least 18 years old. We do not knowingly collect personal information from children or anyone under 18, and people under 18 may not create an account or use the Service.

If we learn that we collected personal information from a person under 18, we will take reasonable steps to delete the information and close the account, subject to applicable law. If you believe a person under 18 has provided personal information to Miyos, contact us at support@miyos.ca.

We may update this Privacy Policy to reflect changes in Miyos, our service providers, or legal requirements. We will update the date at the top of the Policy and provide any additional notice required by applicable law. Material changes will not retroactively reduce your rights without a lawful basis.

You may contact us with privacy questions, requests, or complaints. We will handle complaints in accordance with our privacy-governance procedures and applicable law.