Privacy policy
LAYTH / LAYTH Fitness PRIVACY POLICY
Updated 28 September 2026. Android application: com.layth.app, version 1.2.0.
Contact: layth.sport.dz@gmail.com. This policy covers LAYTH, its fitness features, layth-sport.online and api.layth-sport.online.
Account and data use
An account uses your email, first name, language and a hashed password. Authentication sessions secure access. With an account, supported profile details, goals, birth year and height when provided, workouts and sets, meals and foods, recipes, water, weight, measurements, favourites, custom workouts and preferences are synced to the server. These may include health or fitness information and are used to provide your personal tracking service. Local features can be used without an account; online content and barcode lookups still require network requests.
Health Connect and permissions
Health Connect is optional. With Android permissions, LAYTH reads steps, heart rate, exercise sessions, active calories and sleep, and can write exercise sessions. Raw Health Connect readings are not uploaded by this version’s sync system. Progress photos, the cart and the current workout are not synced. Health Connect data is not used for ads, sale or AI model training. Revoke access in Health Connect or Android settings; manage records already in Health Connect separately. Notifications are optional. This version does not request contacts, microphone or precise location access. The Google Play barcode scanner handles camera access; barcode queries go to Open Food Facts, which also receives normal network information including IP address. The integrated Ciqual food database supports local searches. Meal photo processing is not included.
Hosting and security
The public server uses HTTPS and runs on LAYTH’s Hostinger VPS. Authorised administrators and necessary technical providers handle data to operate and support the service. Processing may occur in providers’ operating countries. Application logs exclude request bodies and authentication headers. Website cookies support administration sessions and form protection, not advertising. This version has no advertising or data-selling system. Security measures cannot guarantee zero risk.
Payments and email
Payments and automated email are not enabled on this installation as of this policy date. Before activation, this policy must identify the relevant providers. The server code supports addresses, orders and payment references, but does not store full card numbers. Future order records may remain after account deletion for accounting purposes; the retention period must be defined before sales begin.
Retention, deletion and rights
Account and sync data remain until the account is deleted. Delete it in Profile → My account → Delete my account, or at https://api.layth-sport.online/compte/suppression. The web form verifies your credentials. Deletion removes the account, sessions, synced records and addresses from the active database. Routine database backups expire within 14 days; deletion requests must be reapplied after a restore. Clear app data or uninstall to remove local data; manage Health Connect records separately. If you lose account access, contact us without sending your password. You may request access, a copy, correction or deletion of your data. Proportionate identity verification may be required. Other rights and complaints to a competent authority depend on applicable law.
LAYTH is a fitness and wellbeing tool, not a medical device, diagnosis or treatment service. Minors must use it in accordance with applicable rules and legal guardian supervision; it is not specifically intended for young children. Material changes and new sensitive-data uses will be explained and consent obtained where required.