FastPure is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data, including health-related data associated with intermittent fasting, in accordance with Thailand's Personal Data Protection Act (PDPA) and Google Play's Data Safety requirements.

1. Information We Collect

1.1 Information You Provide Directly

• Name and email (when signing up or contacting us)
• Comments and feedback

1.2 Health Data Related to Fasting

1.3 Automatically Collected Information

• Usage data: Features used, time spent in app
• Device data: Operating system, device model

2. How We Use Your Health Data

Your health data (fasting data) is used only for the following purposes:

• Recording and displaying your fasting history within the app
• Calculating and showing real-time Fasting Stage status
• Syncing your data across your devices via cloud (for logged-in users only)
• Displaying fasting statistics and summaries to you
• Sending notifications (reminders) at times you configure

3. What We Do NOT Do with Your Health Data

We explicitly commit that your health data will never be used to:

• Sell, trade, or rent your health data to any third party
• Serve advertisements, marketing, or build user profiles for commercial purposes
• Analyze health data for insurance, employment, or medical purposes
• Share with employers, insurance companies, or government agencies without your explicit consent

4. How We Store Your Health Data

4.1 Local Storage (On-Device)

Fasting data is stored directly on your device using a local database. No data is transmitted to external servers for users who are not logged in.

4.2 Cloud Sync (For Logged-In Users)

If you create an account and log in, your health data is encrypted and transmitted to Supabase (our database and authentication provider) to sync your data across devices. Supabase is SOC 2 Type II certified and maintains its own privacy policy.

5. Sharing Data with Third Parties

We do not sell your personal or health data. We work with the following service providers solely to operate the app:

• Supabase: Stores user accounts and syncs fasting data (logged-in users only)
• Google Play / Apple App Store: Processes Premium subscription payments via In-App Purchase

These third parties are not permitted to use your health data for any purpose beyond providing services to us.

6. Data Retention

Your health data is retained for as long as your account is active. You may delete all your data at any time through the app settings or by contacting us to request account deletion.

7. Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access: Request to view your personal and health data we hold
• Rectify: Request correction of inaccurate data
• Erase: Request deletion of all your health data and account
• Object: Object to data processing
• Withdraw consent: Withdraw consent at any time
• Data portability: Request a copy of your health data in a readable format

8. Health Data Security

We protect your health data using the following measures:

• Encryption in transit (HTTPS/TLS)
• Data stored on SOC 2 certified infrastructure
• Strict access controls limiting who can access health data
• Health data is never stored in identifiable form beyond what is necessary

9. Policy Changes

We may update this policy from time to time. Material changes will be communicated via an in-app notice before taking effect.