Accounts and sign-in
This policy covers Fried Chicken for Android, operated by MEYER PRIME PTE. LTD. For questions about your information, contact hello@getfriedchicken.com.
The Android app uses Google Sign-In. Google confirms your identity, and Fried Chicken uses that verified Google identity to create or access your account. Fried Chicken then issues its own access and refresh sessions so you can stay signed in. The app does not store your Google password.
Google and Apple sign-ins create separate Fried Chicken accounts. Using the same email address does not automatically link them. Your Android account, progress and deletion request are separate from an Apple/iOS account.
Profile and onboarding information
Account information includes your Fried Chicken username and tag, daily goal, manually selected region, language and timezone. Private onboarding information includes date of birth, sex or “prefer not to say”, height, weight, workout frequency, whether you have tried other step apps, how you discovered Fried Chicken and an optional referral code. We also record onboarding completion and the version of the onboarding flow.
This information supports account setup, age checks, goal suggestions and app operation. Private onboarding answers are not displayed as public league profile information. Fried Chicken for Android requires users to be at least 13; advertising has a separate 18-and-over eligibility rule.
Fried Chicken also records first-party onboarding diagnostics, such as the screen reached, permission or completion result, elapsed time, installation/session identifiers, language and app version. These help identify setup problems. The app does not use Firebase Analytics.
Steps and Health Connect
With your permission, Fried Chicken reads step records from Health Connect. It may request additional access to older step history where your device supports it. Access is read-only: Fried Chicken does not write health records to Health Connect.
Raw health records are processed on your device. Eligible daily totals, their dates, timezone, app and source-policy information, and the verification information needed to synchronise them are sent to the Fried Chicken backend on Cloudflare. Raw step records and their detailed timestamp/source history are not uploaded to that backend.
Only supported native-phone Health Connect records with an eligible recording method and phone source can count. Manual entries, unknown recording methods, unsupported sources and non-phone records are excluded. Fried Chicken does not directly connect to Samsung Health, Fitbit, Garmin or watches.
Google Play Integrity helps verify the app and request context for submitted totals. It does not prove that every step is legitimate. Records, permissions and synchronisation can affect totals and available history.
Fried Chicken does not collect GPS movement history or upload your contacts. It does not provide health records, step totals or private onboarding information to advertising services for targeting.
Leagues, friends, Groups and sharing
Android accounts participate in Global League automatically. Your Fried Chicken username and eligible step totals can appear worldwide. The Android app does not provide a Global League opt-out.
You can separately control “Appear in Local League” and choose your region in Profile. The region is selected manually; Local League does not require GPS access. Turning off Local visibility does not remove Global participation.
We store friend requests and connections, invitations, Group membership and participation, and reporting/blocking information to provide those features. People in the relevant social or league views can see your displayed identity and progress. When you choose to share a card or invitation through another service, that service and its recipients handle the shared content under their own practices.
Android notifications
Android messaging uses Firebase Installations and Firebase Cloud Messaging (FCM), separate from Google sign-in and Fried Chicken sessions. Android push registration and delivery are currently disabled in production.
The implementation supports notification preferences and previews. If messaging is enabled, it uses installation identifiers, registration information, language, timezone and app/package version to route notifications. It can record delivery status and attempts, provider responses and timestamps, and an opened notification’s event, destination, opening time and app version. A provider accepting a message does not establish that you saw it.
Firebase is used for Android messaging, not Firebase Authentication, Firestore or Firebase Analytics.
Advertising and privacy choices
The Android app includes Google AdMob banner, native and interstitial advertising. Ad requests are limited to signed-in users whose private profile establishes that they are 18 or older. Ads are not admitted for under-18 users, unknown ages or signed-out users. Your date of birth is used locally to determine eligibility and is not passed to the advertising layer.
Google’s User Messaging Platform (UMP) presents consent messages where required and provides “Ad privacy choices” in Profile when a privacy-options entry point is required. The app waits until Google’s consent system permits ad requests and configures the ads SDK to request non-personalised advertising before it starts.
Google’s advertising SDK may process IP addresses, device, app and, where applicable, account-related identifiers, diagnostics, and app and ad interactions to deliver and measure ads and prevent fraud. An IP address may indicate an approximate location. Removing the Android advertising-ID permission does not make this processing identifier-free.
Fried Chicken does not add health data, private profile answers or step totals to ad requests. Read Google’s Privacy Policy, its advertising information and the Mobile Ads SDK data disclosure for more about Google’s processing.
Service providers and security
Cloudflare hosts the application backend and its database. Google provides Google Sign-In, Health Connect, Play Integrity, Firebase messaging and the AdMob/UMP services described above. Information processed independently by those providers is also subject to their policies, including Cloudflare’s Privacy Policy and Firebase’s privacy information.
The Android app uses encrypted connections to the backend. Stored Fried Chicken sessions are encrypted using Android Keystore, and app backups are disabled. The backend checks authenticated requests and stores session-token hashes. These measures reduce risk; no system can guarantee absolute security.
This website
This website does not use analytics cookies or load Google Analytics or advertising trackers. The hosting provider processes requests and security logs to deliver and protect the website.
Retention and account deletion
Account data is retained to provide your account, progress and social features until you delete the account or the relevant data is otherwise removed. We do not promise automatic deletion after a fixed period of inactivity. There is no single automatic expiry period for all notification delivery records.
Deleting your Android account removes its profile and sign-in sessions, stored step totals and progress, friend connections and requests, Group participation, preferences, and account-linked messaging records from the active application database.
Limited records are handled separately. Where needed to recognise repeated deletion requests, we keep a hashed retry receipt. It expires after 30 days and is removed by scheduled cleanup. Administrative audit records may remain after the deleted account’s references and related details are removed. Some temporary authentication/security records are tied to an installation and follow separate cleanup processes.
Support emails, infrastructure logs and provider recovery copies are separate from active account records. Contact us for information about their handling; this policy does not promise a fixed deletion deadline for those records.
Deleting your Fried Chicken account does not delete Health Connect records, your Google account, information held independently by service providers, or a separate Apple/iOS Fried Chicken account. Shared copies held by other people or services are not removed from those services by account deletion.
Your choices and requests
You can manage Health Connect permissions in Android settings, update available profile/preferences in Fried Chicken, change Local League visibility, and revisit ad privacy choices when available. Revoking health access stops further reads but does not itself delete previously synchronised totals.
To delete your Android account, use Profile → Account actions → Delete account → Continue → Delete permanently. See account deletion for the steps and an alternative request route if you cannot access the app.
For access or correction requests, email hello@getfriedchicken.com. We verify ownership securely before disclosing account data or handling an external deletion request. Do not email passwords, Google tokens or raw health records.