Privacy Policy

This policy explains how SiamUtils ("we") collects, uses, and discloses your personal data when you use siamutils.com and our associated apps, including SiamUtils Workout (our fitness-tracking mobile app).

1. Who controls your data

SiamUtils (an individual service operator) is the data controller for the purposes of this policy. Contact us about privacy or to exercise your rights at [email protected]

2. What we collect

Category	Examples	Source
Account data	Email, password (hashed), name	You / Google / Apple Sign In
Health data (Workout app only)	Weight, height, body fat %, workout history, sleep, heart rate, step count, calories	Entered by you / synced from Apple Health or Health Connect
Food photos	Meal photos for AI calorie analysis	Taken/selected by you
Device data	Push notification token, error logs	Automatic from your device

3. How we use it

• Providing core features — workout plans, progress tracking, AI food analysis
• Sending notifications (e.g. workout reminders, meal-logging reminders)
• Improving service quality and fixing technical issues

We do not sell your personal data, and we do not use Apple Health / Health Connect data for advertising or share it with third parties for marketing purposes.

4. Third-party processors

Provider	Purpose
AI provider (LLM/Vision API)	Analyzing food photos to estimate calories — only images you choose to upload are sent
Firebase Cloud Messaging (Google)	Push notifications
Apple / Google	Identity verification (Sign in with Apple/Google) and HealthKit/Health Connect (reading/writing health data you authorize)
Hosting/database providers	Storing your data on servers

5. Data retention

We retain your data for as long as your account is active. If you delete your account, your data is deleted within 30 days, except where the law requires longer retention.

6. Your rights

Under PDPA (Thailand), GDPR (EU/UK), and CCPA/CPRA (California), you have the right to:

• Access or request a copy of your personal data
• Request correction of inaccurate data
• Request deletion ("right to be forgotten") — delete your account from the in-app settings, or email [email protected]
• Withdraw consent previously given (e.g. revoke Apple Health access in your device settings)
• Object to or restrict certain processing
• (California residents) Opt out of the "sale or sharing" of personal information — we do not sell your data

7. Health data — explicit consent

Health data is treated as sensitive data under applicable law. We request separate, explicit consent before reading from or writing to Apple Health or Health Connect. You may withdraw this consent at any time via your device's system settings, without affecting other app features.

8. Minimum age

This service is not intended for children under 16. If you are younger than this, please do not use the service without parental consent.

9. Data security

We use password hashing, HTTPS connections, and restrict data access to personnel who need it. No system is 100% secure, however.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via the app or email.

11. Contact us

Questions about this policy or exercising your rights: [email protected]