Privacy Policy

Data Controller and Contact

FitNeko (the “Service”) is operated by Jeffery Huang, who determines the purposes and means of processing personal data for the Service. For questions about this Policy, our data practices, or your data rights, email support@fitneko.app.

Data We Collect

• LINE identity and message metadata: your LINE user ID, display name when available, and message or event identifiers, types, and Service receipt times from interactions with the Service.
• Content you submit and processing results: text or commands about meals, exercise, strength training, or weight; photos and audio; and resulting transcripts, recognition results, structured records, summaries, and AI responses.
• Health, fitness, and service records: body and goal information you provide, food and nutrition records, weight trends, activity and training records, reminders, suggestions, and your personal food data.
• Plan and usage records: free or Coach PASS status and term, feature and model usage, quotas, and your cans balance and earning or use history.
• Transaction data: order details, amounts, payment status, order and payment-provider transaction IDs, and webhook notices from the payment provider. FitNeko does not directly store your full card number or security code.
• Operational, security, and model-use logs: request times and status, the AI provider or model used, usage, errors, transmission events, and records needed to prevent abuse or investigate security events.

Purposes of Processing

We use this data to authenticate and maintain your LINE identity; receive and parse records; provide recognition, statistics, reminders, general suggestions, and personalized Service features; manage plans, quotas, and cans; create, confirm, and handle orders, payments, refunds, and support; perform payment reconciliation, capacity planning, and cost control; maintain, troubleshoot, and improve Service quality; detect abuse, fraud, and security threats; comply with legal, accounting, and tax obligations; and handle complaints, transactions, or other disputes. We do not use the data for advertising.

Processors, Processing Regions, and Cross-Border Transfers

We use the following processors to provide the Service: LINE for accounts, messages, and media transfer; OpenAI or Anthropic, depending on the provider enabled in the Service configuration, for AI recognition and text processing; AWS in Singapore for application and cloud computing services, and in Japan for daily database backups and website files; Neon in Singapore for database services; ECPay in Taiwan for payments, transaction confirmations, and refunds; and Google in the United States for aggregate website statistics (see “Cookies and Tracking” below). These processors receive only the data necessary to provide their services and process it under their respective contracts, security measures, and privacy terms.

Data may therefore be processed or transferred across borders in Taiwan, Japan, Singapore, the United States, and other locations where these providers lawfully provide their services. Data-protection rules may differ between regions. We use reasonable contractual, access-control, and transmission safeguards. We do not sell your personal data or user content, but share it with these processors where necessary or disclose it when legally required or needed to protect rights and safety.

Retention, Raw Media, and Deletion

The Service downloads raw photo and audio bytes submitted through LINE, processes them in memory to complete your request, and may send them to the AI provider configured at that time. These raw files are not stored long-term by FitNeko. The AI provider may temporarily retain processing data under its applicable terms and retention rules. Text, audio transcripts, recognition results, AI responses, and other structured service records are stored to provide history, statistics, personalization, and support.

We retain data while your account or Service relationship continues and for as long as reasonably necessary for the purposes in this Policy. You can delete your account yourself in the app, as described in “Your Data Rights” below; deletion happens in a single transaction and takes effect immediately. Transaction, accounting, and tax data that law requires us to keep, or records necessary for fraud prevention, security, legal claims, and dispute handling, may remain restricted, retained for the required period, and unlinked from your identity. Data already in backups may remain until normal backup rotation or overwrite is complete and may not be immediately deletable while those backups remain. If an account has been inactive for 12 consecutive months, we may delete the account and all its data; we will send one LINE push notice before doing so.

Your Data Rights

Subject to applicable law, you may request access or review, a copy, supplementation or correction, cessation of collection, processing, or use, and deletion of your personal data. Deletion and export work through the channels below. For other requests, such as access, correction, or restriction, email support@fitneko.app with enough information to identify your account and describe your request. We may take reasonable steps to verify your identity before responding, and if the law provides otherwise, a request is complex, or particular records must be retained, we will explain the status and applicable limitation.

• Deletion: Open FitNeko in LINE and go to Settings → Data → Delete account data, then type the confirmation phrase to delete all your personal data yourself. Deletion happens in a single transaction, takes effect immediately, and cannot be undone. Payment transaction records are retained as required by law but are unlinked from your identity.
• Export: Email support@fitneko.app to request one. After we verify your identity, we aim to provide a machine-readable (JSON) copy of your data within 30 days. The copy includes content you provided or that we generated for you: your profile and goals, food and exercise logs, body weight, your conversation with FitNeko, coach memories and recommendation history, achievements, your cans balance and transaction ledger, your personal food library, training plans, weekly reports, and an order summary. It excludes purely internal operational records, such as job queues, feature-usage counters, and model-usage billing, which are meaningless to you and say nothing about you.

We do not use your content to train a FitNeko-owned general-purpose model. Before any future training that is materially different in nature, we will update this Policy, provide clear notice, and obtain separate consent where required by law. A third-party AI provider's handling of submitted data remains subject to its contract and policies.

Minors

A minor may use the free Service only after their legal representative has read and agreed to this Policy and our Terms. Purchasers of a Coach PASS must be at least 18 years old. If a legal representative believes a minor provided data without appropriate consent, they may contact us at the email above. After verifying the circumstances, we will restrict processing or delete the data as applicable law requires.

Security and Incident Notices

We use reasonable technical and organizational measures proportionate to the data and risk, including access restrictions, transmission safeguards, Service monitoring, backups, and incident-response procedures. No internet transmission or storage method can guarantee absolute security. If a personal-data or security incident is likely to materially affect you, we will investigate, mitigate its effects, and notify affected people and authorities as applicable law requires. Where appropriate, we will also recommend protective steps.

Cookies and Tracking

The FitNeko website uses no advertising cookies, analytics cookies, or cross-site tracking cookies, and does not create cross-service advertising profiles. We use Google Analytics in a mode that runs without storing cookies to collect aggregate statistics that carry no account identifier (page views, button clicks, referral channel); your browser sends your IP address, browser information, page URL, and referrer to Google in the United States for processing. We do not enable Google signals or ad personalization, and we do not link this data to your LINE account. See Google’s Privacy Policy for how Google processes this data. LINE, payment pages, or other third-party services may use technologies or cookies necessary for login, transactions, security, or their own service operations under their policies. If we later switch to cookies or add technology that materially changes our tracking practices, we will first update this Policy and provide notice or choice as required by law.

Changes to This Policy

We may update this Policy to reflect changes in features, providers, data flows, law, or security, and will revise the date above. Before a change that materially affects data uses or user rights takes effect, we will provide reasonable notice through the website, LINE, or an appropriate in-Service message. Where applicable law requires separate consent, we will obtain it before the change takes effect.