Privacy Policy

We collect only the information needed to deliver a personalized, high quality experience:

(a) Data you provide: name, email, age, weight, height, biological sex, dietary restrictions, nutrition goals and photos of meals sent for analysis.

(b) Operational and usage data: logs of calories eaten, hydration, fasting time, workouts and your interaction history with the smart assistant.

(c) Activity data, with your permission: steps, distance, active calories, heart rate and workouts read from Apple Health or Health Connect (see section 10).

(d) Fit Connections and Messages, if you use them: date of birth (to confirm 18+), who you want to see, likes, matches, messages exchanged and reports. Cards only show name, age, photos, goal, interests and bio; the date of birth is not shown.

We use the data collected for legitimate and transparent purposes:
- Calculate your daily energy goals and macronutrient split.
- Process visual recognition of meals with artificial intelligence.
- Show progress charts and habit consistency reports.
- Provide technical support and improve end to end infrastructure security.

BeFitWay follows a clear and transparent data policy:

(a) Technical and essential cookies: we use local storage (LocalStorage) and session cookies strictly necessary to keep your encrypted login, save your interface preferences (dark mode) and run the app securely.

(b) Install and campaign measurement (Google Analytics for Firebase and the Meta SDK): in the iPhone and Android apps, we use Google Analytics for Firebase and the Meta app events SDK (Instagram and Facebook) to know which campaigns installs came from and to count these events: the first app open, account creation (only the sign up method, such as email, Google or Apple), the start of the free trial and store purchases (product, price and currency). This data is statistical, linked to an app identifier, and is used to measure the results of our ads on Google, Instagram and Facebook. On Android, Google and Meta may use the device advertising ID, which you can reset or turn off in Settings > Google > Ads. On iPhone, the app asks for your permission through the iOS tracking prompt (App Tracking Transparency): only if you tap Allow can Google and Meta use the Apple advertising identifier (IDFA) to measure ads. If you decline, nothing changes in the app, and you can change your choice at any time in Settings > Privacy & Security > Tracking. Health data, weight, goals and meal photos are never sent for these measurements. We do not use third party cookies inside the app.

(c) Legal bases: processing of the data essential to your account, nutrition and goals is based on your consent, collected in the sign up form. Install and campaign measurement is based on BeFitWay's legitimate interest in evaluating its ads, always without health data, and you can object to it by writing to our Data Protection Officer (section 12).

Full protection of health data: no medical information, body weight, nutrition goal, meal photo or sensitive health data is shared with ad platforms or social networks.

You can clear local storage at any time in your device or browser settings.

We do not sell, rent or trade our users' personal data under any circumstances. Data is shared only with technical infrastructure providers essential to running the service (cloud hosting, payment processors and natural language processing models) and with Google and Meta, for the install and campaign measurement described in section 3, all bound by strict confidentiality and security agreements in line with the LGPD (Brazilian General Data Protection Law) and the GDPR.

Your data is protected by encryption in transit (HTTPS and modern TLS) and at rest on the database servers. We apply Row Level Security (RLS) policies so that each user can only access their own confidential information.

Direct messages are encrypted (AES-256) before reaching the database, with a key stored separately from it. Only you and the person you are talking to can read them in the app. The team only sees a message that has been reported, and only to review the report. Message text does not appear in notifications.

We keep your personal data only for as long as needed to provide the service and meet legal obligations:
- Account, profile, food diary, meal photos, weight, workouts, goals and community content: kept while your account is active. When you delete the account, they are erased from the live servers right away.
- Backups: deleted data may remain in the automatic database backups for up to 30 days, until overwritten. These copies are not used for any other purpose.
- Payment and subscription records: kept for up to 5 years to meet tax and accounting obligations and for legal defense. After the account is deleted, they are unlinked from your profile.
- App access logs (date, time and IP): kept for 6 months, as required by article 15 of the Brazilian Internet Civil Framework (Law 12.965/2014).
- Fit Connections messages and matches: kept while the match exists. Unmatching or deleting the account erases the conversation for both people. A copy of a reported message is kept for as long as needed to review it and to meet legal obligations.
- Usage statistics: after the account is deleted, they are no longer linked to you and are used only for aggregate metrics.

After these periods, the data is irreversibly deleted or anonymized.

Under article 18 of the Brazilian General Data Protection Law (LGPD), you have the right to obtain, at any time and through a simple request:
- Confirmation that your data is processed and access to it.
- Correction of incomplete, inaccurate or outdated data.
- Portability and export of your information.
- Complete and permanent deletion of personal data processed with your consent.

BeFitWay offers a self service account deletion option in Settings > Delete Account. Deletion irreversibly removes your history and credentials from our live servers, in line with the app store guidelines.

BeFitWay is not intended for children under 13. Users between 13 and 18 must use the platform under the supervision and with the consent of their parents or legal guardians. Fit Connections and Messages are only for people aged 18 or over.

Meal photo analysis, nutrition suggestions and body composition estimates are generated by probabilistic artificial intelligence models and should be understood as healthy lifestyle references. The app does not provide medical diagnosis or drug prescriptions and does not replace specialized clinical care.

With your permission, BeFitWay reads steps, distance, active calories, heart rate and workouts from Apple Health (iPhone) or Health Connect (Android). The app does not write data to these apps. Steps, distance, calories and imported workouts are saved to your account so they appear in your diary, as is the average heart rate of runs recorded in the app.

Location is used only while you record a run or walk, to measure distance and pace; the route is not saved or sent to our servers. Bluetooth is used only to read heart rate from your watch or chest strap.

This data is not sold, not used for advertising, marketing or data mining and not shared with third parties, except the hosting provider that stores your account. You can revoke access at any time in your device settings and erase everything by deleting your account.

We may update this document from time to time to reflect product improvements or legal changes. Notices about substantial revisions will be shown prominently in the app.

Data controller:
MARKETING AFFILIATES LTDA
Trade name: BeFitWay
CNPJ (Brazilian tax ID): 33.681.244/0001-36
Headquarters: Maringá (PR), Brazil
Data Protection Officer (DPO): suporte@befitway.com
Privacy and support channel: suporte@befitway.com