Privacy Policy

Local-First Architecture & Data Collection

Log-It! stores your logs, customized daily goals, reminders, preferences, and consent records locally on your device using Room SQLite and DataStore. Log-It! operates with zero central proprietary servers; MIYLabs does not host an external user database.

Third-Party Google Services & Cloud Integrations

To provide seamless functionality, Log-It! offers optional integrations with Google services. When you opt into these features: Google Sign-In & Firebase Authentication processes your account credentials and security tokens; Google Drive Backups uses strictly the restricted drive.appdata scope to store encrypted database backups in your personal, hidden appDataFolder; Android Health Connect reads and writes strictly HydrationRecord entries to synchronize water intake across fitness platforms. You can manage connected apps anytime in your Google Account Third-Party Connections.

Health Connect Data Protection & Statutory Affirmations

Hydration and fluid consumption records constitute sensitive health and wellness data. In strict compliance with Google Play's Health Apps Policy and Health Connect guidelines:

• Health Connect data is accessed solely to record fluid intake and synchronize daily hydration history across compatible platforms under your direction.
• Health data is NEVER sold, rented, or transferred to data brokers, advertising platforms, or information resellers.
• Health data is NEVER used to train artificial intelligence (AI) or machine learning (ML) models.
• Health data is NEVER used for advertising, marketing, or interest-based profiling.
• You can inspect, manage, or revoke Health Connect access at any time through your Android device settings.

Data Security & Technical Protections

We implement rigorous technical safeguards to protect your personal information:

• Encryption in Transit: All data transmitted between the app and external Google services (Firebase Authentication, Google Drive API) is encrypted using industry-standard Transport Layer Security (TLS/HTTPS).
• Encryption at Rest: Local SQLite database records reside strictly within Android's private, sandboxed application directory (inaccessible to other applications). Cloud backups stored in Google Drive are protected by Google Cloud's native AES-256 server-side encryption.

Advertising Disclosures & Future Roadmap

Current Status: Zero Advertising SDKs
The current release of Log-It! contains no advertising SDKs, serves no advertisements, and does not collect or track your Google Advertising ID (GAID).

Future Planned Integration
In upcoming releases, Log-It! plans to introduce privacy-compliant advertisements (via Google Mobile Ads / AdMob) to support ongoing software development. When advertising is implemented:

• Advertising providers may process pseudonymized device identifiers (such as the Google Advertising ID) and approximate location to serve contextual, non-personalized, or personalized ads based on your explicit consent where required by law (GDPR/ePrivacy, CCPA/CPRA, Google Play Families Policy).
• Health and hydration records will remain strictly firewalled and will NEVER be shared with or accessible to advertising SDKs.
• You can manage, reset, or delete your Android Advertising ID at any time in your phone's Settings > Google > All services > Ads (see the official Google Advertising ID Guide), or control ad preferences via Google My Ad Center.

Children's Privacy (COPPA & GDPR-K Compliance)

Log-It! is intended for a general audience and is not directed at children under the age of 13 (or under 16 in the European Economic Area and United Kingdom). We do not knowingly collect, store, or solicit personal information from children under these ages. If you believe that a child has provided personal information or used the app, you may delete all data immediately using our self-service in-app controls or contact [email protected] for prompt assistance.

Data Retention & Immediate Zero-Day Purge

Because MIYLabs operates no central server or user database, we retain zero personal records after you delete them. On-device data remains until you clear app storage, uninstall, or initiate in-app deletion. Google Drive and Health Connect records persist in your personal Google account until you remove them using the self-service steps described on our Account Deletion page. All deletion operations execute immediately with a 0-day retention period.

Self-Service Rights & Technical Support

You possess complete control over your data. All deletion and export actions can be executed independently through the in-app settings or via Google's official management portals. For general technical questions regarding this policy, contact [email protected]. Immediate (0-Day) Deletion Timeline: All deletion operations execute synchronously with immediate effect and a 0-day retention period. MIYLabs does not retain, queue, or archive any user records.