法务 · LEGAL

Privacy Policy

隐私政策

Last updated: 2026-09-14

Mylus is operated by Xu Zhenyang (徐振洋), an individual developer based in China, who is the controller of your personal data ("Mylus", "we", "us"). Contact: [email protected].

1. Introduction

This Privacy Policy explains how Mylus collects, uses, shares, and protects your personal information when you use the Service. We are committed to handling your data responsibly and transparently.

Because Mylus is a training tool that works with body and health-related information, parts of the data we process may be considered sensitive. We treat that data with corresponding care.

2. Information we collect

Account information: your email address, the sign-in method and identifier you use (email, Apple, or Google), and your account ID. If you sign in with Apple and choose to hide your email, we receive an Apple private-relay address instead of your real email.

If you join the launch-notification list on https://mylus.app, we collect your email address and language preference only to tell you when Mylus becomes available. We keep that record until we send the notification or you ask us to remove it.

Body and demographic data: height, weight, birth year (used to derive your age), and gender.

Training profile: your training goal (sport performance or general fitness) and chosen sport or objective, training experience, weekly training frequency, training venue/environment, and available equipment.

Health and injury data: the injuries, pain history, and physical limitations you choose to tell us about. This is sensitive data, used to make your training plans safer; we process it only with your separate explicit consent.

Plans and activity: the training plans we generate for you, your workout check-ins (including completion, effort metrics, any pain you report, and optional short pain notes the coach can read), and your feedback on plans.

Coach messages: messages you send to the in-app AI coach and the coach's replies are stored so the conversation can continue. You can review recent conversation history in the app.

Derived coaching preferences: we may infer a small number of communication and training-habit preferences from your conversations. Two items are chosen from a fixed list: how detailed you want replies to be, and the time of day you usually train. Further items are short notes: how you want the coach to address you (at most 20 characters), the custom reply tone you want (at most 80 characters; both can also be set by you in the app), plus notes (at most 60 characters) about equipment quirks, schedule constraints, or what currently motivates you; notes that look like a web address or email, or that contain a long run of digits, are discarded. These are not health or injury information, and they are not used to generate your training plans. The coach uses them only to adjust how it words its replies. In the app you can see the full list, set how the coach addresses you and the reply tone, delete any entry, and turn the feature off (Profile → What the coach remembers).

Technical and usage data: app interactions, log data, device type, app language, and basic technical information needed to operate and secure the Service.

We do not collect payment-card details (any purchases are handled by the app store), medical records, or precise location.

3. How we use your information

We use your information to: create, generate, and adjust your personalized training plans; apply safety filtering based on your injury and health information; operate, maintain, secure, and support the Service; and comply with our legal obligations.

We do not use your data to train or improve machine-learning models — Mylus generates your plans from the information you provide together with general scientific references, and your data is not fed back into any model training. We also do not sell your personal information.

4. Legal bases for processing

Where data-protection laws such as the GDPR apply, we process your information on the basis of: performance of our contract with you (to provide the Service); your explicit consent (for processing your health and injury data, which is special-category data, and for launch-notification emails if you opt in on our website); our legitimate interests (such as securing and maintaining the Service); and compliance with legal obligations.

You may withdraw consent at any time, without affecting processing already carried out.

5. How we share information

We share information with service providers who process data on our behalf, such as cloud-hosting and authentication providers, under contracts that require them to protect it. We may also disclose information where required by law or to protect rights, safety, and the integrity of the Service.

We use a third-party product-analytics service (Amplitude) to understand how features are used so we can improve the Service. For this we share usage events labelled with a random identifier (such as screens opened and actions completed) and basic device information; this data does not include your name, email, or health and injury details, and we have disabled the storage of IP addresses.

We do not sell your personal information, and we do not share it for third-party advertising.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and thereafter only as required for legitimate business or legal purposes. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required.

7. Security

We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights under local law to access, correct, delete, or restrict the use of your personal information, and to object to certain processing. Residents of the EEA/UK (GDPR), California (CCPA/CPRA), and China (PIPL), among others, have specific rights under local law.

What you can do in the app today: view and update your training profile; review recent AI-coach conversation history; see the derived coaching preferences the coach has inferred, set how the coach addresses you and the reply tone, delete them one by one, or turn that feature off entirely; and delete your account. Deleting your account removes or anonymizes your personal data, including stored conversations and derived coaching preferences, within a reasonable period except where retention is legally required.

There is no in-app data-export download. To request a copy of your data, or a correction beyond what the app allows, email [email protected]. We will respond within the period required by applicable law. You may also have the right to lodge a complaint with your local data-protection authority.

9. International data transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect information transferred across borders.

10. Children's privacy

The Service is intended only for adults aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact us so we can delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will provide notice of material changes, for example within the app, and update the "last updated" date above.

12. Contact

For privacy questions or requests, contact us at [email protected].