MYLO Privacy Policy
Last updated: August 21, 2026
MYLO ("we," "us," "the app") is a fitness social app for logging and verifying personal records. This page explains what information we collect, why, and how it's handled.
Information we collect
- Account info: name, username, email address, and a securely hashed password.
- Profile info: anything you choose to add, such as bio, location, age, gender, height, and bodyweight.
- Content you post: logged PRs (weights, times, reps), captions, and any photos or videos you upload as proof.
- Social activity: who you follow, communities and friend groups you join, comments, likes, and direct messages you send within the app.
- Location: only if you choose to enable it, used to show nearby communities. You can decline this and still use the app.
- Connected services: if you choose to connect a third-party fitness service (such as WHOOP or Strava), we receive the specific data categories you approve during that connection — for example, recovery, sleep, or workout data. We only request what's needed to display that data in your MYLO profile.
How we use it
- To operate the core features of the app — your feed, leaderboards, communities, and messaging.
- To let other users see content you've chosen to make visible (Discover posts, public profile info).
- To review reports and enforce community standards.
- We do not sell your personal information to third parties.
Third-party connections (WHOOP, Strava, etc.)
If you connect a third-party fitness account, you'll be sent to that provider's own login page — MYLO never sees your password for that service. You explicitly approve which categories of data are shared, and you can disconnect the integration at any time from within MYLO or directly from that provider's own app or settings, which immediately revokes MYLO's access.
Data storage and security
Your data is stored using Supabase, a hosted database provider, with access rules enforced at the database level so that only you (and, where you've chosen to share it, the other users or communities you interact with) can read or modify your information. Passwords are never stored in plain text.
Your choices
- You can edit or delete individual posts at any time.
- You can disconnect any third-party service at any time.
- You can request that your account and associated data be deleted by contacting us below.
Children's privacy
MYLO is not directed at children under 13, and we do not knowingly collect information from children under 13.
Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page.
Contact