Privacy Policy

Who we are

MyHealth360 is published by Wanderlust Innovations, LLC. Questions or requests about your data go to founder@wanderlustinnovations.com.

What we collect

MyHealth360 is built so that your health and fitness data stays yours. Most of what you log in the app never touches our servers at all. Here is what does leave your phone, and why:

• Your Apple Sign In user identifier. This is a stable, anonymous string Apple gives us when you sign in. We use it to recognize you across sessions and to associate your subscription with your account. We do not receive your Apple ID email unless you choose to share it.
• Your subscription state. When you subscribe to MyHealth360 Pro, Apple sends us the transaction signature (StoreKit 2). We store which plan you're on, when it started, and when it renews. We do not see or store your payment method, credit card, or Apple ID password.
• Crash and diagnostic reports. If you opt in when iOS asks, Apple may share anonymized crash logs with us so we can fix bugs. These do not contain your workout, health, or personal data.

What stays on your device (and in your iCloud)

Your actual health and fitness data lives in two places, both of which belong to you — not to us:

• On your iPhone and Apple Watch, in Apple's on-device CoreData framework.
• In your private iCloud account, via Apple's CloudKit sync. This is what lets your data move between your iPhone, your Apple Watch, and any future devices you sign in on. It is stored in your personal iCloud container, which we cannot access or read.

The data that lives only on your device and in your iCloud includes:

• Your workout logs: exercises, sets, reps, weights, duration.
• Your personal records (PRs) and progress history.
• Your body measurements, if you track them.
• Your muscle-map recovery state and training history.
• Any meal plans, recipes, or nutrition data you enter.
• Your app preferences and settings.

We cannot see any of this. It is not sent to our servers. It is not sent to any third party.

HealthKit

If you grant permission, MyHealth360 reads from and writes to Apple Health (HealthKit). This includes things like workouts, heart rate, active energy, steps, and body measurements. HealthKit data is governed by Apple's strict privacy rules:

• Your HealthKit data stays on your device and in your iCloud (if you have Health app iCloud sync on). It is not sent to our servers.
• We will never use HealthKit data for advertising, marketing, or resale, and we will never share it with third parties for any of those purposes. Apple's HealthKit terms prohibit this, and we agree with them.
• You can revoke HealthKit permissions at any time in iOS Settings > Health > Data Access & Devices > MyHealth360.

Who sees your data

We use two services that may process limited data on our behalf:

• Apple. Apple processes Sign in with Apple, all in-app purchases (StoreKit), iCloud/CloudKit sync, and HealthKit. Apple's privacy policies apply to those interactions. Your health data in iCloud is stored in your private container, not ours.
• Cloudflare. Our subscription-verification backend runs on Cloudflare Workers. Cloudflare sees standard request metadata (IP address, request headers) at the network edge. No workout or health content is sent through this path.

We do not sell or share your data with advertisers. There are no ads in MyHealth360. We do not use third-party analytics SDKs that track you across apps.

How long we keep data

• Subscription records: for the life of your subscription, plus a short audit window after cancellation.
• Apple notification history (StoreKit renewal / refund notices): retained for operational audit of the subscription lifecycle.
• Your workout, health, and fitness data: we don't keep it at all — it's in your device and your iCloud. If you want to delete it, delete it in the app or remove the app's iCloud data in iOS Settings.

Your rights

You can:

• Ask us what data we have about you. Email founder@wanderlustinnovations.com and we'll respond within 14 days.
• Ask us to delete your account and all server-side data (your Apple Sign In identifier and subscription records). We will delete everything within 30 days of your request. Data in the App Store (your purchase history with Apple) is not ours to delete. Data in your iCloud is yours to delete.
• Correct any data we have. Email with the correction.

If you're in the European Union, the United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or the CCPA. The rights listed above apply to you regardless.

Children's privacy

MyHealth360 is intended for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has used the app, email founder@wanderlustinnovations.com and we'll delete any related server-side records.

Changes to this policy

If we change this policy in a material way, we will post the updated version here and note the change. We won't change the substance of what we collect without telling you first.

Governing law

Wanderlust Innovations, LLC is registered in the State of Georgia, USA. Any dispute about this privacy policy will be governed by the laws of Georgia.

Contact

For any privacy question, comment, or request: