Last Updated: February 22, 2026
Welcome to Megalife (“Application,” “Service,” “we,” “us,” or “our”). This Privacy Policy explains how Megalife collects, uses, stores, discloses, and protects your personal data when you access or use the Megalife mobile application and its associated website (collectively, the “Service”).
This Policy applies to all users of the Service worldwide. Depending on your location, additional rights and obligations may apply under applicable laws, including but not limited to:
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Service immediately.
The data controller responsible for your personal data is:
Megalife
Contact: via the in-app feedback form or the contact section of our website.
If you are located in the EEA or United Kingdom, Megalife acts as the data controller within the meaning of Article 4(7) GDPR. Where we engage third-party service providers to process data on our behalf, they act as data processors under Article 28 GDPR, bound by data processing agreements.
We collect personal data in three ways:
When you register for or use the Service, you may provide:
When you access or use the Service, we automatically collect:
If you choose to connect or log in via a third-party service (e.g., Google Sign-In, Apple Sign-In, or other social authentication providers), we may receive from such providers:
We do not control what data these third-party platforms collect or process on their end. We encourage you to review their privacy policies before using such sign-in methods.
Where GDPR applies, we process your personal data only where a valid legal basis exists under Article 6 GDPR:
| Purpose of Processing | Legal Basis |
|---|---|
| Providing access to and operating the Service | Performance of a contract (Art. 6(1)(b)) |
| Account registration and authentication | Performance of a contract (Art. 6(1)(b)) |
| Improving the Service and developing new features | Legitimate interests (Art. 6(1)(f)) |
| Sending service notifications | Performance of a contract / Legitimate interests (Art. 6(1)(b)(f)) |
| Sending marketing communications (where opted in) | Consent (Art. 6(1)(a)) |
| Analytics and usage statistics | Legitimate interests (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interests / Legal obligation (Art. 6(1)(c)(f)) |
| Compliance with legal requirements | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, you have the right to object to such processing (see Section 9). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
We use personal data for the following purposes:
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.
| Data Category | Retention Period |
|---|---|
| Account and profile data | Duration of account + up to 90 days after deletion request |
| Usage and analytics data | Up to 24 months (then anonymized or deleted) |
| Communication and support records | Up to 3 years after last interaction |
| Financial / transaction records | Up to 7 years (tax and accounting compliance) |
| Cookie and session data | See Section 8 |
| Legal hold / compliance data | As required by applicable law |
When data is no longer needed, it is securely deleted or anonymized. You may request deletion of your data at any time (see Section 9).
We do not sell your personal data to third parties. We may share your data in the following circumstances:
We engage third-party companies to assist with operating the Service, including cloud hosting, analytics, payment processing, push notifications, email delivery, and customer support. All processors are bound by data processing agreements and may only process data on our documented instructions.
We may disclose personal data to government authorities, regulators, or law enforcement when required by applicable law, court order, or to protect the rights, property, or safety of Megalife, our users, or others.
In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity. We will notify users before their data becomes subject to a different privacy policy.
We may share aggregated, de-identified data (which cannot be used to identify you) for analytical or research purposes.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly necessary | Login sessions, security tokens | Session / up to 1 year |
| Functional | Remembering your preferences | Up to 1 year |
| Analytics | Understanding site navigation (e.g., Google Analytics) | Up to 13 months |
| Marketing (if applicable) | Delivering relevant ads if advertising is enabled | Up to 13 months |
Under Articles 15–22 GDPR, you have the right to:
California residents have the right to:
To exercise any of the above rights, please contact us through the in-app feedback form or via the contact details in Section 12. We will respond within 30 days (or 45 days for complex requests where permitted by law). We may need to verify your identity before processing your request.
Megalife operates internationally and your data may be processed on servers outside your country of residence, including outside the EEA. Where personal data is transferred from the EEA to countries without an adequacy decision from the European Commission, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) (European Commission Decision 2021/914). You may request a copy of the applicable transfer safeguards by contacting us as described in Section 12.
We implement appropriate technical and organizational measures to protect your personal data, including:
No electronic transmission or storage method is 100% secure. While we apply commercially reasonable measures to protect your data, we cannot guarantee absolute security.
The Service is not directed at children under the age of 13 (or under 16 in certain EEA jurisdictions). We do not knowingly collect personal data from children below these age thresholds without verifiable parental consent. If you believe a child has provided personal information without appropriate consent, please contact us immediately so we can delete that information promptly.
The Application may contain links to third-party websites or services (e.g., content partners, payment gateways, social platforms). This Privacy Policy applies only to the Megalife Service. We are not responsible for the privacy practices of third-party services and recommend you review their respective privacy policies.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and notify you via in-app notification, email, or a prominent notice on our website. Your continued use of the Service after the effective date constitutes acknowledgment of the updated Policy. If you disagree with any changes, you should stop using the Service and may request deletion of your account.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We are committed to resolving any privacy concerns promptly and transparently.