Privacy Policy

‍

Last updated: 30 September 2026

This Privacy Policy describes Our policies and procedures regarding the collection, use, and disclosure of Your information when You use the Myles Wellbeing mobile application ("App") and tells You about Your privacy rights and how the law protects You.

We use Your personal data to provide, maintain, and improve the App and its features. By downloading or using the App, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Introduction

his Privacy Policy explains how Myles Fitness Limited, trading as Myles Wellbeing ("we", "our", or "us"), collects, uses, and protects personal data when You use the App, including any associated mobile or web interfaces, and interact with our services.

We are committed to protecting Your personal data and respecting Your privacy in accordance with:

• The UK General Data Protection Regulation (UK GDPR)

• The Data Protection Act 2018

• The Privacy and Electronic Communications Regulations (PECR)

This policy applies to all users of the Myles Wellbeing App, whether accessed on iOS, Android, or other platforms.

‍

2. Who We Are

Data Controller: Myles Fitness Limited, The Energy Centre, 523 Garstang Road, Broughton, Preston, PR3 5DL, United Kingdom

Email: info@myleswellbeing.com

The App provides a digital platform designed to help organisations encourage employee wellbeing through activity tracking, challenges, and rewards.

‍

3. Personal Data We Collect

We may collect and process the following types of personal data:

Information You Provide Directly

• Name, email, and organisation details

• Health, activity, or wellbeing information entered in the App

• Profile data, including profile picture, job title, and preferences

• Messages or communications sent via the App

• Survey responses or feedback submitted

Information Collected Automatically

• Device information (model, operating system, unique device identifiers)

• IP address and location data (if location features are enabled)

• App usage data, including features accessed, activity logs, and engagement metrics

• Crash reports, performance data, and analytics information

Information from Third Parties

We may receive personal data from:

• Employers or organisations using Myles Wellbeing for their employees

• Wearable devices and health apps you choose to connect (such as Garmin, Fitbit, Apple Health and Google Health Connect), received through our integration provider, Terra

• Analytics providers and technology partners supporting the App

• Marketing platforms used for communications (if consented)

‍

4. How We Use Your Personal Data

We process personal data for the following purposes:

• To operate, maintain, and improve the App and its features

• To provide personalised content, challenges, and rewards

• To respond to enquiries and support requests

• To analyse usage trends and App performance

• To maintain security and prevent fraud

• To comply with legal obligations

‍

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Legitimate interests: Improving the App, analysing engagement, and maintaining security

• Consent: Where you opt in to marketing communications, push notifications, or tracking features

• Explicit consent: When you connect a wearable device or health app, we process your activity data only with your explicit consent, which you give when you connect the device. You can withdraw it at any time by disconnecting the device in the App.

• Contract: When processing is necessary to provide the App's services

• Legal obligation: To comply with applicable laws or regulatory requirements

‍

6. Cookies and Tracking Technologies

The App may use cookies, SDKs, or similar technologies for:

• Analytics (to understand feature usage and improve the App)

• Performance and crash reporting

• Personalisation of content

Where legally required, we will request your consent before using non-essential tracking technologies. You can manage your preferences through device settings or App settings.

7. Third-Party Services

We use third-party providers to support App operations, including:

• Terra (tryterra.co), which connects your wearable devices and health apps to the App

• Amazon Web Services (AWS), which hosts our systems and stores your data

• Analytics platforms (e.g., Firebase, Google Analytics for Firebase)

• Communication, marketing, and notification platforms

• Customer support and helpdesk systems

These providers act as data processors. They only process your personal data on our instructions and are contractually required to protect it.

]

‍

8. Data Sharing

We may share personal data with:

• Technology providers supporting the App

• Employers or organisations enrolled in Myles Wellbeing programmes

• Professional advisers (legal, financial, or regulatory)

• Regulatory authorities, where legally required

• Organisations involved in corporate transactions (e.g., mergers or acquisitions)

We do not sell personal data.

‍

‍

9. Garmin and Wearable Data

If you connect a Garmin device or another wearable to the App, we receive your daily steps and activity data (activity type, duration, distance and steps). We use this data only to provide the Myles service to you, including your Smyles, challenges, goals and leaderboard positions.

Garmin data is received through our wearable integration provider, Terra, which securely transfers it to our own systems. It is not shared with anyone else, except that your employer or organisation may see aggregated activity statistics that do not identify you.

Artificial Intelligence: We do not share Garmin data with, or allow it to be processed by, any external AI provider, large language model or third-party AI service. Garmin data is never used to train AI models.

We do not sell your Garmin data. You can disconnect your device at any time from the App settings, and we will stop receiving new data from it.

‍

10. International Data Transfers

Some service providers may process data outside the United Kingdom. We ensure appropriate safeguards are in place, such as:

• Adequacy decisions issued by the UK Government

• Standard contractual clauses approved by the UK Government

• Other legally recognised safeguards

‍

‍

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined above. Retention may depend on:

• Legal obligations

• Contractual requirements

• Legitimate business needs

If you disconnect a wearable, we stop receiving new data from it. Activity data already synced stays in your account so your points and challenge history remain accurate, and is deleted when you delete your account or ask us to remove it.

When data is no longer needed, it will be securely deleted or anonymised.

‍

12. Data Security

We implement technical and organisational measures to protect personal data, including:

• Secure cloud hosting and encrypted storage

• Access controls and role-based permissions

• Encryption of sensitive data in transit and at rest

• Regular security monitoring and testing

While we strive to protect your data, no online system is completely secure.

‍

‍

13. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Restrict processing or object to processing

• Request data portability

• Withdraw consent where processing relies on consent

To exercise these rights, contact us at info@myleswellbeing.com.

‍

‍

14. Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk

‍

15. Links to Other Websites

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those websites or services.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last updated" date.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or our handling of personal data, contact us:

Email: info@myleswellbeing.com

‍