隐私政策 · Dasar Privasi

Privacy Policy

VicFit does one thing: it takes the calories you ate and the energy Apple Health recorded you burning, and turns them into a single number — how much more you need to move today. Doing that means touching your health data, which is sensitive. So this policy spells out every part of it: what we collect, who sees it, where it lives, how long it stays, and how to delete it.

1. What we collect

1.1 Account data (Sign in with Apple)

Sign in with Apple is the only way to sign in to VicFit. From Apple we receive and store:

• your Apple user identifier — a code that is meaningful only inside VicFit, used to recognise you;
• your email address, if you choose to share it. If you choose Apple's "Hide My Email", we receive Apple's private relay address instead and never see your real one.

We never receive your Apple password, and we receive nothing else from your Apple account. VicFit has no password of its own.

1.2 The profile you fill in

To work out your daily calorie budget and target deficit, setup asks for: height, weight, date of birth or age, biological sex, everyday activity level, goal (lose fat or maintain), goal weight and goal date. If Apple Health already has your height and weight, we pre-fill those; you can change them.

1.3 Meal photos and meal records

• The photos you take of each meal (up to 3 per meal).
• The food name and description you type (optional).
• The estimate that comes back: each food item, portion, calories, a confidence level (high / medium / low), and any figures you correct by hand.
• The date and time of the meal.

1.4 Apple Health (HealthKit) data — read only

With your permission, VicFit reads the following from Apple Health: step count, active energy burned, basal energy burned, workout time, body weight, resting heart rate and height.

VicFit never writes anything to Apple Health. We request read-only access from the system.

What reaches our server is not your individual health samples. It is one summary row per day: that day's steps, active kcal, basal kcal, workout minutes, weight and resting heart rate.

1.5 Your favourites list

The meals you save for reuse: title, the foods in it, the unit (bowl, slice, spoon, "seven-tenths", and so on), calories per unit, and how many times you have used it.

1.6 Technical data

The VicFit app contains no third-party analytics, advertising or tracking SDKs. We do no behavioural tracking, build no advertising profiles, and set no tracking cookies. Our backend runs on Cloudflare, which produces standard server request logs (timestamps, paths, status codes) used for troubleshooting and abuse prevention.

2. What we use it for

We explicitly do not:

• use your health data or meal photos for advertising, marketing or retargeting;
• sell any of your personal data;
• provide your data to data brokers;
• use data obtained from Apple Health (HealthKit) for anything other than working out how much more you need to move, or share it with third parties;
• carry out direct marketing. We contact you only where the service or its security requires it.

3. Meal photos and calorie estimation (transfer to the United States)

Estimating calories needs a model that can read a photograph. Here is exactly how it works:

1. Your meal photo is uploaded to our own Cloudflare R2 bucket (not a public album — reading it goes through our server).
2. That meal's photos, together with the food name and description you typed, are transmitted to the Claude API operated by Anthropic PBC, located in the United States, which estimates the food items and calories. This is a transfer of personal data outside Malaysia (to the United States).
3. The estimate comes back to our server and is written into your meal record.

By using photo estimation you consent to this cross-border transfer. If you would rather your data did not leave our servers, do not use the photo feature — type the meal in by hand, or log it from your favourites list. Neither of those paths calls Anthropic.

4. Apple Health data

Apple imposes extra rules on apps that use HealthKit. We follow them, and restate them here:

• Data obtained from Apple Health is used only for VicFit's health and fitness features (calculating burn, deficit and suggested exercise, and drawing the Review charts).
• It is never used for advertising, marketing or similar purposes.
• It is never sold to anyone, nor provided to data brokers or information resellers.
• It is not shared with third parties without your separate explicit consent. The transfer described in section 3 contains no health data.
• It is not used for medical diagnosis or treatment. VicFit produces estimates, not medical advice.

You can change or revoke these permissions at any time in Settings → Privacy & Security → Health → VicFit on your iPhone. Once revoked, VicFit stops reading new data.

5. Where your data is stored

• On your iPhone — the app keeps a local cache (favourites, recent meals) so it works offline. Deleting the app removes it.
• In our own Cloudflare account — meal records, daily health summaries, profile and favourites live in a Cloudflare D1 database; meal photos live in a Cloudflare R2 bucket. Both are reachable only through our own Cloudflare Worker.
• Anthropic PBC (United States) — processes meal photos and your typed text at the moment of estimation (see section 3).

Cloudflare, Inc. is a United States company operating a global network, so your data may be stored or processed outside Malaysia, including in the United States. By using VicFit you consent to these transfers.

6. How long we keep it

When you delete a meal or your account, the data is removed from our production database and storage bucket immediately; any copy held in system backups is overwritten within 30 days at the latest. (Basis: Cloudflare D1's Time Travel point-in-time restore retains 30 days; Cloudflare R2 keeps no automatic backup, so a deleted object is not recoverable.)

7. Deleting your account, and your rights

In the app (recommended)

Open VicFit → Settings → Delete account. This will:

1. revoke VicFit's Sign in with Apple authorisation with Apple first;
2. delete every meal photo of yours from R2 (including every image of a multi-photo meal);
3. delete all your meal records, daily health summaries, favourites and account data.

This cannot be undone.

By email

You can also write to support@victech.my to request deletion. We will act on it once we have verified your identity.

Your rights under the PDPA

Under Malaysia's Personal Data Protection Act 2010 (as amended in 2024) you have the right to: access the personal data we hold about you; correct data that is inaccurate; withdraw consent you previously gave; request that processing be limited; and require us to stop using your data for direct marketing (we do none). To exercise any of these, write to the address above.

8. Who we share with

Beyond the above we do not provide your personal data to anyone, except where required by law or a court order, or where necessary to protect someone's safety. We do not sell personal data.

9. Security

• All traffic between the app and our server is encrypted with TLS.
• Your session credential is stored in the iPhone Keychain.
• Every backend read and write requires a session token that we issue and verify ourselves; the credential Apple sends at sign-in is cryptographically verified, not taken at face value.
• Data is isolated per user: every query is bound to your user identifier, so accounts cannot read each other.
• Meal photos sit in a non-public bucket, readable only through our server.

No system can be guaranteed perfectly secure, but the above is what we actually do.

10. Data breach notification

If a breach involving your personal data occurs, we will notify the Personal Data Protection Commissioner in accordance with Malaysia's Personal Data Protection Act 2010 (as amended in 2024) and its related regulations, and we will notify affected users where the breach is likely to cause them significant harm. The notice will state what happened, which data was involved, and what we have done about it.

11. Explicit consent and withdrawal (PDPA)

Health data is sensitive personal data under Malaysia's Personal Data Protection Act 2010, and processing it requires explicit consent.

• The first time you turn on health syncing, iOS shows Apple's Health authorisation screen and you decide item by item. You can decline and still use manual logging.
• Before profile setup and photo estimation, the app explains what the data is for; continuing is your consent.
• To withdraw consent: turn off access at any time in Settings → Privacy & Security → Health → VicFit, or delete your account in the app to remove data already stored. After withdrawal we stop reading new health data.

12. Children

VicFit is not directed at children under 13 and we do not knowingly collect their personal data. If we learn that an account belongs to a child under 13, we will delete the account and its data. If you are a parent or guardian and believe your child has given us data, please write to support@victech.my.

13. Changes to this policy

If this policy changes materially we will update the effective date at the top of this page and notify you in the app. You will have reasonable time to read the change before it takes effect, and where a change introduces a new purpose for your data we will ask for your consent again.

14. Contact us