Erafasting privacy policy
This policy describes how BoosterDigital (“we”, “us”) handles personal information in the Erafasting Android app (package com.erafasting.app) and on erafasting.com. Erafasting is an intermittent-fasting timer. It is not a medical device and it does not provide medical advice.
The operator and data controller is DevKonnect IT Consulting LLC, doing business as BoosterDigital. Contact[email protected].
1. Summary
| What the App is for | A fasting timer, fasting plans, water tracking and weight tracking. |
| Who it is for | Adults 18 and older. We do not knowingly collect information from anyone younger. |
| Account | The App creates an anonymous account and a user ID through Supabase so your data can be saved. A display name and an email are optional, and an email is collected only if you choose to sign in. |
| Health information | Sex, birth year, weight, height, activity level, health-screening answers, fasting sessions and water. We ask for your consent in the App before we collect health information. |
| Subscriptions | Purchase history for Premium, processed by Google Play and RevenueCat. We never receive your card number. |
| Analytics and crashes | PostHog, only if you consent. Sentry, for crash and diagnostic reports. |
| Shared with a third party | The advertising ID, shared with Google AdMob so free accounts can be shown ads. That is the only information shared with a third party for that party’s own purposes. Health information is not used for advertising. |
| Security | Information is encrypted in transit. |
| Deletion | You can delete your account and data in the App, or from the account deletion page. |
2. Information we collect
2.1 Account
- A user ID for an anonymous Supabase account, created so the App can store your fasts without requiring an email.
- An email address, only if you choose to sign in. If you do not sign in, we do not have your email.
- A display name, only if you choose to add one.
We do not receive a password from you for the anonymous account.
2.2 Profile
Sex, birth year, height, weight, activity level, and the answers you give to the health screening in the App. Birth year is how we limit the App to adults. Together with the logs below, this is health information. The App asks for your consent before collecting it, and we keep a record of that consent while your account exists.
2.3 Fasting sessions
The plan you chose, when a fast started and ended, and whether you completed it.
2.4 Water
The water intake you log.
2.5 Weight
The weight entries you log.
2.6 Subscription purchase history
Premium is sold by Google Play. RevenueCat tells us whether a subscription is active. We store the purchase history needed to know your entitlement: that a purchase exists, its status, and the period it covers. We do not receive your payment card number, and Google Play’s payment screens are operated by Google.
2.7 Push token
If you allow notifications, we store a push token for your device so we can send fasting reminders you have turned on. You can turn notifications off in Android settings, and you can delete the token by deleting your account.
2.8 Analytics
If you consent, we use PostHog to understand how the App is used: for example screens viewed, feature use, and a user ID. If you do not consent, we do not send your use of the App to PostHog. You can withdraw consent in the App, and deleting your account includes a request to delete or detach PostHog records tied to your user ID.
2.9 Crashes and diagnostics
We use Sentry to receive crash reports and diagnostic data, such as the error, device and OS version, app version, and a user ID, so we can fix failures. These reports are not used for advertising.
2.10 Advertising ID
Free accounts see ads from Google AdMob. AdMob receives your Android advertising ID for that purpose. Premium accounts do not see these ads. See section 5.
3. How we use information
- To run the App: save your account, time your fast, keep your plan, and show your water and weight.
- To apply the health screening and the 18+ limit.
- To send reminders you have enabled.
- To manage your Premium entitlement.
- To measure App use, if you consent to analytics.
- To diagnose crashes and keep the service reliable.
- To show ads to free accounts.
- To answer a request you send to [email protected], including a deletion request.
We do not use your health information, fasting sessions, water, weight, name or email for advertising. We do not sell personal information for money.
4. This website
erafasting.com is a static marketing site. It does not create an App account, and the pages here do not ask you to type an email into a form. If you email [email protected], we use that message to respond, including to delete an account.
The site is hosted on Cloudflare. Cloudflare processes IP addresses and ordinary request data to deliver the pages and to protect the network. We do not run advertising or product analytics on this website.
5. Who we share information with
Service providers process information for us, on our instructions, only to run Erafasting. Separately, the only information shared with a third party for that third party’s own purposes is the advertising ID, shared with Google AdMob for advertising.
| Provider | Role | Information |
|---|---|---|
| Supabase | Account and database, for us | User ID, optional email, optional display name, profile, fasting sessions, water, weight, push token, consent record |
| Google Play | Store billing | Purchase records for Premium. Google also operates the store account you use to download the App. |
| RevenueCat | Subscription status, for us | Purchase history and a user ID, so we know whether Premium is active |
| PostHog | Product analytics, for us, and only with consent | Usage events and a user ID |
| Sentry | Crash and diagnostic reports, for us | Crash data, device and app details, user ID |
| Google AdMob | Advertising on free accounts. This is the third-party use. | Advertising ID. Not your health information, logs, name or email. |
| Cloudflare | Website hosting, for us | IP address and request data for this website |
We may also disclose information if the law requires it, to enforce our Terms, or to protect users.
5.1 Advertising
Free accounts see ads. Premium accounts do not. To choose and measure ads, AdMob uses the device advertising ID, and Google’s own advertising service may also use an IP address and device information under Google’s policies. We do not give AdMob your health information.
- Where Google is required to ask, ads are personalized only if you agree in the consent message Google shows. Otherwise ads are limited or non-personalized.
- You can reset or delete your advertising ID in Android settings. That identifier belongs to the device, and deleting your Erafasting account does not reset it.
- In US states that treat personalized advertising as a “sale” or “sharing” of personal information, you can opt out by refusing personalization in Google’s message, by using Android’s advertising controls, or by subscribing to Premium so ads are not shown.
6. Legal bases and consent
Where a law requires a legal basis, including the GDPR in the EEA, the UK and Switzerland, and the LGPD in Brazil, these are ours:
| What we do | Basis |
|---|---|
| Provide the account, the timer, and the subscription | Contract |
| Process health information: sex, birth year, height, weight, activity level, screening answers, fasting sessions and water | Your explicit consent, asked in the App before we collect it |
| PostHog analytics | Your consent |
| Notifications | Your consent, via the Android permission |
| Personalized ads, where consent is required | Your consent, via Google’s message |
| Security, crash diagnosis, and responding to you | Legitimate interests in a safe, working App |
| Records the law tells us to keep | Legal obligation |
You can withdraw consent. Analytics consent can be withdrawn in the App. Notification permission can be withdrawn in Android settings. Withdrawing consent to health information means deleting the account, because the App cannot keep a fasting record without it. Withdrawal does not undo processing that already happened.
You can use the App without a display name and without an email. Birth year is required so we can apply the 18+ limit. The rest of the health information is what the fasting plan and the logs are built from.
We do not make decisions about you by automated means that produce legal or similarly significant effects. A fasting countdown is arithmetic on the times you choose.
7. International transfers
We are based in the United States. Supabase, PostHog, Sentry, RevenueCat, Google and Cloudflare may store and process information in the United States and in other countries where they operate.
If you are outside the United States, your information is transferred there. We use the safeguards your law recognizes: the EU–US Data Privacy Framework where a provider is certified, otherwise the European Commission’s Standard Contractual Clauses (and the UK addendum); for Brazil, clauses of the kind the ANPD recognizes; and the contracts we have with providers, together with your consent where your law requires it.
8. Security
Information is encrypted in transit. Database access is limited to the account that owns the records. No service is perfectly secure, and we cannot promise absolute security.
9. Retention and deletion
We keep App information for as long as your account exists.
- You can delete the account in the App. Deletion from the App is immediate.
- You can also ask us to delete it, with no need to reinstall, at the account deletion page or by emailing [email protected]. We action an email request within 30 days.
- After deletion, copies may remain in encrypted backups for up to 30 days, then they age out.
- Crash and diagnostic logs that are not tied to your user ID may remain for Sentry’s short retention period.
- Google Play and RevenueCat keep purchase records under their own policies. Deleting your Erafasting account does not cancel Premium. Cancel the subscription in Google Play or you may still be billed.
- The advertising ID is controlled in Android settings. We do not keep a copy of it as part of your account profile.
- We may keep a record where the law requires it or where it is needed to resolve a dispute.
What is deleted, and what is kept, is listed in full on the account deletion page.
10. Your rights
10.1 Everyone
You can ask us what we hold, for a copy, for a correction, for deletion, or for a portable copy, and you can object or withdraw a consent. Profile details can be edited in the App. Account deletion is in the App and at /delete-account.
Write to [email protected]. If the account has an email, write from that address so we can confirm it is you. If the account is anonymous, delete it in the App, or include the user ID shown in the App so we can find the record. Requests are free. We answer within the time your law sets — for example one month in the EEA and the UK, 15 days in Brazil — and we will say if we need longer where the law allows that. We will not treat you differently for asking.
10.2 The EEA, the UK and Switzerland
You can also ask us to restrict processing, and you can complain to the data protection authority where you live or work.
10.3 The United States
If you live in California or another state with a consumer privacy law, you can know, delete and correct personal information, and you can opt out of “sharing” for cross-context advertising as described in section 5.1. We use health information to provide the App, not to infer characteristics for advertising. You may use an authorized agent. If we deny a request, you can appeal by replying to our answer.
Washington residents: consumer health data we collect is the health information in section 2 (sex, birth year, height, weight, activity level, health-screening answers, fasting sessions and water). We collect it from you, in the App, to provide the timer and the logs. We do not sell it and we do not share it with AdMob. To exercise access, deletion or withdrawal, use section 10.1 or delete the account. Appeal a refusal by replying to our email.
10.4 Brazil
Under the LGPD you can ask for confirmation, access, correction, anonymization, blocking or deletion of unnecessary or unlawful data, portability, deletion of data processed on consent, information about sharing, information about refusing consent, and revocation of consent. You can complain to the ANPD. Our channel is [email protected].
10.5 Other countries
If you live somewhere else with a data protection law, you have the rights that law gives you, through the same email address, and you can complain to your local authority.
11. Age
Erafasting is for adults 18 and older. We do not knowingly collect personal information from anyone younger. If you believe we have, email [email protected] and we will delete it.
12. Not a medical device
Erafasting records a fasting window and the logs you enter. It does not diagnose, treat, or prevent any condition. Nothing in the App is medical advice. Health-screening answers are collected so we know what you told us before you used a fasting timer. They are not a medical assessment.
13. Changes
If we change this policy, we will change the date above. If a change is material, we will tell you in the App or by email before it applies. If a change affects something you consented to, we will ask again in the App.
14. Contact
DevKonnect IT Consulting LLC
doing business as BoosterDigital
426 Puma Loop
Groveland, FL 34736-3506
United States
[email protected]