Privacy notice

Status and controller

This is a draft notice for the current private preview, reviewed on 11 September 2026. Myfittys Group is the supplied operator name. Privacy enquiries can be sent to our contact form. The controller’s full legal identity and business address remain to be confirmed. The hosting provider is not automatically the controller for all MyFittys activity. The notice must be completed, including provider arrangements and retention, before a public launch.

Data in this preview

When you access account features, the site receives your Supabase account identifier, email address and name details provided through email signup or Google sign-in. It stores an account creation timestamp, favourites, messages you send, AI replies, character names and message timestamps. Separate request identifiers and timestamps enforce the daily allowance even when a conversation is cleared. Subscription status and model entitlements are stored with your account. Stripe collects payment-card details through its hosted checkout; card numbers are not included in AI chat requests.

If you upload an optional profile photo, we store a resized copy privately in your account and display it beside your chat messages. It is not sent to the AI provider. You can replace or remove it in Account.

Contact form submissions store your name, reply email, topic, message, submission reference and time so we can handle your request. A daily hashed network identifier helps limit spam. One-off tips store the selected fictional model, amount, currency, payment status and Stripe payment references. Confirmed tips add a thank-you to your conversation. Payment records are stored separately from chat messages.

Why data is used

Account identifiers and saved conversations support the account and chat features you request. Favourites remember your choices. Usage records enforce allowances and help protect service integrity. Subject to confirmation of the operator and processing arrangements, the intended ordinary-data bases are performance of the user agreement for requested account/chat functions, legitimate interests for proportionate security and abuse prevention, and legal obligation where a specific law requires retention or disclosure. Optional marketing or non-essential tracking would require a separate appropriate basis and choice. Agreement to terms is not blanket consent to data processing.

Sensitive information

Do not send medical records, information about your sex life, financial credentials, identity documents, or private information about other people. Chat text is stored, not an ephemeral confidential conversation. The preview does not need special-category information and has no separate mechanism to obtain explicit consent for processing it. A public AI service must establish a valid special-category condition and appropriate safeguards where needed; ordinary contract wording alone is insufficient.

Providers and sharing

To generate AI replies, MyFittys sends your message, recent messages from the same conversation, your chosen first name and chat preferences to OpenAI through our Supabase backend. Payment card details, passwords and other users’ conversations are not included. We request that generated responses are not stored as API response objects by OpenAI; this does not eliminate any provider security or abuse monitoring retention. MyFittys stores your conversation and a server-side reply record for reliable retries, together with token usage and estimated AI cost. Clearing a conversation removes its saved messages and cached reply text, while operational usage records remain for accounting and abuse prevention.

The application uses Supabase authentication and Sites hosting, with Cloudflare-backed database and hosting infrastructure. The home page also loads Google Fonts, which sends browser connection information such as your IP address to Google. Chat replies are generated through the OpenAI API. There is no application advertising or analytics integration. This is not a promise about the independent practices of sign-in or hosting providers. We may need to disclose relevant information to service providers, professional advisers or authorities where necessary and lawful. The specific processor arrangements, subprocessors and access permissions must be confirmed before launch.

International processing

Provider infrastructure may process data outside the UK. The actual processing locations and applicable transfer arrangements have not been verified for this preview. Before public use, the operator must confirm whether adequacy arrangements or contractual safeguards apply, describe them here and provide a way to request details. We do not claim UK-only storage or a verified transfer mechanism.

Retention and deletion

Messages remain in the application database until cleared or otherwise deleted. “Clear this conversation” deletes that character’s saved messages in your current account mode; it does not delete your account, favourites or separate allowance records. There is currently no automated expiry for account or usage records, and no self-service full-account deletion. Provider logs and backup retention have not been verified. A defined retention schedule and full deletion process are still required before launch; we do not promise immediate deletion from every backup.

Your choices and rights

You can clear individual conversations, remove favourites and sign out. Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing, and withdraw any consent you have given without affecting earlier lawful processing. Requests normally receive a response within one month, subject to lawful extensions and proportionate identity checks. Send requests to our contact form. You may complain to the UK Information Commissioner at ico.org.uk/make-a-complaint/ without first exhausting an internal complaint process.

Automation and security

The service generates AI replies through OpenAI and automatically enforces message allowances. It does not implement automated decisions about credit, employment or similar legally significant matters. Saved conversations are associated with your sign-in identifier and access is checked by the server. They are not represented as end-to-end encrypted or inaccessible to authorised service administrators. No service can promise absolute security.

Children and updates

The service is intended for adults aged 18 and over. If information from a child is identified, it should be reported through the contact route for restriction and appropriate deletion. Any change to providers, live AI processing, payments, retention or tracking requires this notice to be reviewed before the new processing starts, with additional information or consent where required.

Conversations after a model change

If you confirm a plan or model change that removes a model, we remove that model’s conversations from your account after the relevant renewal payment succeeds. The stored reply cache is invalidated at the same time. Website transcript deletion is enforced before your next authenticated account or chat request is served. Chats with retained models are kept. Billing records and the change acknowledgement are retained separately; choosing All Fittys later does not restore deleted conversations.

Creator identity verification

Creator applications store your account ID and email, full name, private mobile number, country, declared social usernames and follower counts, age declaration, terms version and acceptance date. We use declared social information for initial automatic eligibility screening, followed by owner review for qualifying applications. Declared counts are not verified merely because they pass screening. You can contact us to ask for a decision to be reviewed.

Only authorised MyFittys admins can inspect applications and private contact details. Your mobile number is not displayed publicly or used in AI conversations. We keep application history, screening settings applicable at submission, review decisions and account-bound invitation generation/redemption records for administration and security. Historical manual social-review records remain private audit records. Contact us for privacy requests.

Creator identity verification uses Stripe’s hosted ID and selfie flow. Provide identity documents only through that flow, never in a chat or gallery. Stripe processes the submitted documents and selfie according to the notices shown during verification. MyFittys checks the verified date of birth on its backend to confirm adult eligibility, without saving the date of birth from that verification response or copies of identity documents or selfies.

We store verification references, status, adult-eligibility result, confirmation and verification timestamps, and an audit of status changes. Creator access requires an accepted invitation and successful adult identity verification. Creators never receive access to customer conversations.

Affiliate payout details

We collect the account holder name and bank details you submit to pay affiliate commissions, plus your address for international IBAN payments. Bank details are encrypted and masked in your dashboard. Authorised MyFittys staff can view the saved payout destination for payment review; access and changes are logged. We retain payment records for accounting, fraud prevention and dispute handling. Contact adminmyfittys@gmail.com about your data or account.

Optional TikTok advertising measurement

Updated 26 September 2026. With your consent, MyFittys loads the TikTok Pixel to measure page visits and confirmed initial subscription purchases, attribute advertising and improve campaigns. TikTok receives browser and device information (including IP address), page URL and referrer, advertising identifiers and, for a purchase, its amount, currency and a pseudonymous event reference. We do not deliberately include chat messages, selected character names, account emails, photographs or payment-card details in advertising events. Advanced matching is not implemented by MyFittys.

Reject optional cookies to use MyFittys without this advertising pixel. Change or withdraw your choice using Cookie settings in the footer. Withdrawal stops future pixel loading; it does not undo information previously received by TikTok. Our consent preference is stored for up to six months. TikTok may use first-party cookies such as _ttp and ttcsid, alongside its own advertising cookies. Their use and processing outside your country are described in TikTok’s privacy policy and TikTok’s cookie information. Local purchase-event references prevent duplicate reporting, and a pending checkout reference in session storage expires after 48 hours.

Fitty games and saved progress

Games save your results, XP, streaks, daily challenge completions and unlocked media against your MyFittys account. A random browser identifier supports safe game requests. Games require a paid plan. Game activity records help measure replay and returning use; they contain no chat message text. A daily keyed connection hash limits automated abuse. Your game progress and game activity records are removed when the associated account is deleted; existing media and account deletion rules still apply.

First-party usage measurement

MyFittys uses a random browser visitor identifier and a session identifier renewed after 30 minutes of inactivity to measure public page visits, Fitty views, chat starts, first messages, registration and checkout steps. Campaign tags, referring site and landing path help us understand traffic sources. After sign-in, events may be linked to your account while keeping the original anonymous attribution. Only the owner can view aggregated funnel reports. We do not record chat text, passwords, payment details or personal contact information in these events. Clearing browser storage resets the browser identifier.

Optional ChatGPT Ads measurement

With advertising consent, MyFittys loads OpenAI’s Measurement Pixel to measure page visits, completed registrations, checkout starts and Stripe-verified initial paid subscriptions. OpenAI receives browser and connection information, advertising identifiers and subscription amount, currency and a pseudonymous event reference. We do not send chat text, model selections, account emails or payment-card details in these events. OpenAI’s automatic advanced matching can detect supported customer information on the page and hash it in the browser before sending it for ad attribution; raw matching information is not sent.

Reject optional advertising or withdraw consent in Cookie settings. Tracking waits for a new advertising choice covering OpenAI and TikTok. OpenAI’s first-party __oppref attribution cookie lasts up to 30 days and __obref browser-reference cookie up to 365 days; withdrawal removes these cookies. A pending checkout reference expires after 48 hours. Completed-event references prevent duplicates. See OpenAI’s privacy policy.