Bivel Privacy Policy

This policy explains what data the Bivel application (the "app") and its website bivelapp.com process, for what purpose, and what rights you have. By using the app or leaving your email on the website you accept what is described here.

1 · Data controller

• Controller: Daniel Pernas
• Contact: soporte@bivelapp.com

2 · What data we process

We only process the data you enter so that the app can work:

• Account: email address and password (the password is stored encrypted by our authentication provider; we never see it), or your Apple or Google account if you choose "Sign in with Apple" or "Continue with Google" (we receive the identifier the provider gives us and the associated email — in Apple's case, your real one or a private relay address, depending on what you decide to share).

• Profile: name, sex, age, height, weight, activity level and goals.

• Allergies and dietary preferences (optional): if you enter them, we treat them as health data, as we do anything else you write in that field (a pregnancy, for example). We use them so the AI coach takes them into account when it suggests food; so your own phone can warn you if you scan a product that declares one of the main allergens you listed; and, if Bivel recognises a pregnancy, breastfeeding or an eating disorder in that text, so the app does not suggest weight loss and your weight and calorie plan are not sent to Bivel AI's chat or analyses (the calorie estimate for a workout does use your weight, because it cannot work them out without it; and with an eating disorder, Bivel AI does not analyse your day or rate the products you scan, and tells you where to get help instead).

• Usage records: meals and macros, workouts, hydration, weight, your own recipes and your library of saved products and sports.

• Device health data (optional): if you connect Bivel to Apple Health (iOS) or Health Connect (Android), we read — with your permission and in read-only mode — your workouts (type, duration, calories and distance), your steps (those of your walks and each day's total), your weight and, for the previous night, your sleep (the hours and, if your watch records them, the stages, when you went to bed and got up, and the times you woke) and the overnight readings your watch took (resting heart rate, heart rate variability and respiratory rate), as recorded by your watch, band or scale. Workouts, the steps of your walks and weight are stored in your diary and synced with your account like any entry of yours; the day's total steps, sleep and the overnight readings stay only on your device. With your permission, Bivel also reads this data in the background to let you know about a new workout without you opening the app. They are used only to show them to you in the app (your steps, resting heart rate and sleep, in Training) and so that Bivel AI adapts its suggestions for the day (for example, easier meals after a bad night), never to change your targets or to make medical assessments. The day's total steps are not sent to Bivel AI. Bivel never writes anything to Apple Health or Health Connect, and this data is never used for marketing or advertising. You can stop syncing at any time in Settings → Connect apps, withdraw the permission in the Health app (iOS) or in Health Connect (Android), and delete imported entries like any workout.

• How you are (optional): in Bivel AI you can say how you slept and how you feel (on a 1 to 5 scale) and, if you turn on cycle tracking in Settings, mark the day your period starts. This is stored only on your device and used only so that Bivel AI adapts its suggestions; it never changes your targets.

• Profile photo (optional): if you choose one, it is stored on your device and also synced with your account, so you don't lose it when you reinstall the app or change phones. It is kept in a private Supabase space (section 4): it is not reachable from any public address and only your own session can read it. You can remove it at any time from your profile — doing so also deletes the synced copy — and it is deleted along with the rest of your data if you delete your account. If you choose to show it in Friends ("Show my photo"), we also keep a separate copy that anyone with a Friends profile can see, even if your profile is private. That copy stops being visible as soon as you remove or change the photo in your profile, and it is deleted when you turn off "Show my photo", leave Friends or delete your account.

• Friends (optional, from age 16): if you create a profile in Friends, the social part of Bivel, we process:

  • your Friends profile: your @username, the name you choose to show, your bio, whether the profile is public or private, what you choose to show on it (your streak and your best streak, the ring on your photo and your food badges), who you follow and who follows you, who you block, your language (to write your notifications in it) and when you accepted the Friends rules and which version;
  • what you post: the text and the details you choose to show of a meal, a recipe, a workout, your day, an achievement, a streak or a goal, and the photo if you add one. So that you can edit a post, we also keep which meal, recipe, workout, day or achievement in your diary it came from and what you chose to show: nobody else sees this, and it is deleted with the post. Your weight and your weight goal are never posted, and neither are the calories of a workout (your weight could be worked out from them);
  • your likes and comments, and the notifications about what happens with your things (who follows you, who wants to follow you, who likes or comments on a post of yours);
  • if you report something or someone reports something of yours, the report (what is reported, the reason and what the reporter writes) and the moderation decision taken (section 3);
  • and, if you turn on notifications, your phone's notification identifier (the code Apple or Google provide so that a notification can be sent to it), which we store on our server with your account.

  Who sees it. What you post in Friends is seen by other people because you choose so. Anyone with a Friends profile sees your @, your name, your bio, your photo if you show it and how many followers, following and posts you have. If your profile is public (it starts that way, and you can change it at any time), they also see your posts, what you show on your profile, who you follow and who follows you; if it is private, only the people you accept as followers see that. Your likes and comments are seen by whoever can see the post you leave them on, so even if your profile is private, if you follow a public profile or like something of theirs, you appear on that profile. If you block someone, or someone blocks you, neither of you sees anything of the other. Nothing in Friends can be seen outside the app or without a Friends profile.

  Health data in Friends. If you want to post data that may come from Apple Health or Health Connect (an imported workout, your steps or a badge earned by training), we ask for your explicit consent before the first time, and we keep when you gave it. You can withdraw it in the Friends settings: doing so deletes what you posted with that data.

  The filter. Before it is saved, what you write in Friends (your @, the name you show, your bio, your posts and your comments) and the photos (a post's photo and, if you show it, your profile photo) go through an automatic moderation filter by OpenAI (section 4). If it stops something, it is not posted.

• Subscription (if you subscribe): the status of your subscription (trial, active or expired) and the purchase identifier that the store you bought from provides to us (Apple on iPhone and iPad, Google Play on Android), for the sole purpose of giving you access to the paid features. We do not process any card or payment details: billing is processed entirely by Apple or Google (see section 4). If you redeem a promo code (for example, one shared by a content creator), we also keep which code it was and when, in which store and for which plan, and whether you went on to pay for the subscription or were refunded (see section 3). We keep it with the identifier RevenueCat gives your subscriber profile, which is what links it to your account, even if you redeem the code before creating one.

• Minimal technical data needed to provide the service (e.g. session identifier).

We do not collect your location or contacts: to invite someone to Friends you use your phone's share sheet, and Bivel does not read your address book. Nor do we process your card or payment details: if you subscribe, payment is handled by Apple or Google Play, depending on your device's store, and we only receive the status of your subscription (see section 4). The camera is used for two things: scanning barcodes (processed on your device; that image never leaves it) and, if you choose, analysing with AI a photo of your meal or of a restaurant menu (in "What do I order?"). In that case, the copy sent to OpenAI to estimate the foods and their macros is not used to train its models, and OpenAI only keeps it for the limited time its policy allows to detect abuse (see section 4). The photo is stored on your own device as a thumbnail for that entry; we do not upload the photo file to our servers — only a reference to that image is synced with your account, so the thumbnail is not lost when you change sessions. The exception is what you post in Friends: if you post a meal with its photo, or choose a photo from your gallery for a workout (with your phone's picker, which only gives us that photo and not the rest of your gallery), we upload a reduced copy to a private Supabase space, which only those who can see that post can see, and which is deleted when the post is deleted.

• Waiting list (bivelapp.com): if you leave your email on the website before having the app installed, we store that email and, if your browser indicates it, your system (iOS/Android) — solely to let you know when Bivel is available in your app store. We do not create any account with that data or use it for anything else. That email is stored in Supabase and, when the time comes, the notice is sent through Resend (section 4).

3 · Purpose and legal basis

We process your data to provide you with the service (calculating goals, logging your day and offering AI analysis). The general legal basis is the performance of the service you request and your consent, which you can withdraw at any time by deleting your account. The waiting list email is processed on the basis of your consent, given when you submit the form.

Some data (weight, allergies, dietary preferences and anything else you write in that field, how you feel, your menstrual cycle and whatever you import from Apple Health or Health Connect) may qualify as special category data — health data — under Article 9 of the GDPR. We process it exclusively on the basis of your explicit consent, which you give voluntarily by entering it in the app or by granting the Apple Health / Health Connect read permission, and can withdraw at any time by deleting that data, disconnecting the sync or deleting your account. In addition, before sending any data to the artificial intelligence, the app expressly asks for your permission, saying what data is sent and to whom (section 4).

Communications about Bivel: we will occasionally send you emails with product news (for example, a newsletter with improvements and tips) in only two cases: if you ask for them in the app (when we ask you on the Home screen, or with the "News by email" switch in Settings), based on your consent; or if you have a Bivel subscription and did not tick the box "I don't want to receive Bivel news by email" when you created your account, because we are your provider and we only write to you about our own product (article 21.2 of the Spanish Information Society Services Act, LSSI; the legal basis is our legitimate interest). You can stop receiving them at any time using the link included in each email or that switch in Settings, without affecting your account: you will keep receiving only service messages (confirmations, notices about your account or changes to this policy). We keep when you give us your permission and when you withdraw it, and through which channel (the app, the box when you created your account, or the link in an email), so that we can prove it; that record is deleted with your account.

Promo codes: if you redeem one, we keep which code you used and when, and whether you went on to pay or were refunded, so we can tell which campaigns work and pay the content creators who run them what was agreed. The legal basis is our legitimate interest in measuring and paying for our advertising. We only use it to count (how many people arrive with each code and how many pay): we never tell the creator who you are, and that data is deleted with your account or, at the latest, one year after you redeem the code (section 5).

Friends: we process your Friends profile and what you post to provide the service you ask for when you create that profile (the legal basis is the performance of that service), and we show it to other people according to what you choose on it (section 2). Posting health data is based on your explicit consent (Article 9(2)(a) GDPR), which we ask for before the first time. Phone notifications are based on your consent: your phone's notification permission and the "Friends notifications" switch, which you can turn off at any time. Filtering what is about to be posted, handling reports, removing what breaks the rules and suspending Friends profiles is done to comply with the law (the EU Digital Services Act) and on the basis of our legitimate interest in Friends being a safe place for those who use it. When we remove something of yours or suspend your Friends profile, we tell you why and how to appeal. If someone notifies us of content without having an account, we process their name, their email and what they tell us solely to handle the notice and reply to them. And if a piece of content makes us suspect that someone's life or safety is in danger, we may report it to the police or the competent authorities, as that same Regulation requires.

4 · Providers that process data on our behalf

Apart from what you post in Friends for other people to see (section 2), we only share your data with the providers on this list and for what each entry states, and all of them provide the same or equal protection of your data as described in this policy.

• Supabase (hosting, database and authentication). Your data is stored here securely, with per-user isolation (Row Level Security). Friends data too, with rules that decide who can see each thing (section 2); Friends photos can only be opened through temporary links and only if you can see that post or that profile.
• Resend (delivery of our emails): this is who delivers the emails we send you — the sign-up confirmation, password recovery, notices about your account and, if you are on the news list (section 3), product communications. It receives your email address and the content of those emails, plus the record of whether one was delivered and whether you have unsubscribed. In Friends it also delivers to our mailbox the notice of each report, with what was reported (its text, its details, a temporary link to its photo and the @ of whoever posted it), the reason, what was written when reporting and the reporter's email; the emails that explain a moderation measure to whoever it affects, and the ones that tell the reporter what was decided. Apart from that, it does not receive your diary, your photos or your health data. Servers in the EU (Ireland). The provider is established in the US, so this processing may involve an international data transfer, covered by the safeguards provided by the provider (e.g. standard contractual clauses).
• Cloudflare (the website and the contact mailbox): hosts bivelapp.com — including the images carried by our emails, which your mail program downloads when you open them — and routes the messages you write to soporte@bivelapp.com or hola@bivelapp.com to our mailbox. When serving you a page or an image it receives technical data about your connection (IP address, browser). On the waitlist form, its Turnstile service also checks that whoever submits it is a person and not an automated program, using technical data from the browser and the connection. We use it only to stop automated sign-ups, based on our legitimate interest in keeping the form secure. The provider is established in the US, so this may involve an international data transfer, covered by the safeguards provided by the provider (e.g. standard contractual clauses).
• OpenAI (artificial intelligence features): when you use meal analysis (by text or photo), a recipe estimate, the coach, the analysis of a workout described in text or the verdict on a product you scan, what is needed to generate the answer is sent to OpenAI: the text you write, the photo of your plate or of a restaurant menu (only if you use those features), a summary of your data for the day (goals, intake, workouts and trend) and your saved products, your allergies/intolerances or dietary preferences (if you have entered them, so the coach takes them into account when it suggests food), your basic physical data (sex, age, height and weight), what you told us about yourself when you signed up (your goal, your situation, your usual training and how you want the coach to talk to you), the scanned product together with your goal and, if you use them, your sleep from the previous night, your watch's overnight readings, how you feel and the day of your cycle, plus your language and your country or time zone, solely to answer in your language and adjust the typical portion sizes of your region. And in Friends, to stop what breaks the rules before anyone sees it, what is sent to its automatic moderation filter is: what you write in your Friends profile (your @, the name you show and your bio), your posts (the text, the names of what you show, such as foods, a recipe's ingredients and method, or exercises, and the photo, whether it is a meal's or the one you choose from your gallery for a workout), your comments and, if you choose to show it in Friends, your profile photo, which may show your face (when you turn on "Show my photo" and, afterwards, whenever you change it in your profile). Your email is never sent, and your name only as the name you choose to show in Friends. Before the first time, the app expressly asks for your permission; you can withdraw it at any time in Settings → Legal and, without it, nothing is sent to OpenAI (nor can you create a profile, post or comment in Friends). OpenAI acts as a data processor and, as it is used through its API, does not use this data to train its models; what is sent, photos included, is used to give you the result, and OpenAI may keep it for up to 30 days to detect abuse, under its API data policy, and then deletes it, unless the law requires it to keep it longer. This processing may involve an international data transfer (OpenAI servers in the US), covered by the safeguards provided by the provider (e.g. standard contractual clauses).
• Expo (delivery of Friends notifications): if you turn on notifications, our server sends it your phone's notification identifier, the text of the notification (who and what, for example "@ana liked your post", without the content of the post or the comment) and the internal address of what opens when you tap it (the identifier of that post or that profile), and Expo delivers it through Apple's notification service (on iPhone) or Google's (on Android). It does not receive your email, your diary or your health data. The provider is established in the US, so this may involve an international data transfer, covered by the safeguards provided by the provider (e.g. standard contractual clauses).
• Open Food Facts (public food database): when you search for or scan a product, its service is queried. No personal data of yours is sent.
• Sentry (error monitoring): if the app crashes, a technical report is sent (error type, line of code) so it can be fixed. Configured to include no personal data (name, email, etc.) — the report is not linked to your identity. Servers in the EU.
• PostHog (product analytics): we record usage events (e.g. whether you complete onboarding or log a meal) to understand how the app is used and improve it. These events are linked to your account (to measure, for example, how many users keep using the app over time), but they are not used for advertising purposes or to track you outside the app. Servers in the EU.
• Google (if you use "Continue with Google"): acts as an identity provider to create or access your account. We receive from it an identifier for your Google account and your email; we do not receive your password. Google's processing of that data is governed by its own privacy policy and may involve an international data transfer (servers outside the EU), covered by the safeguards provided by the provider. In addition, if you subscribe from an Android device, Google Play processes the payment as the party responsible for the transaction (we do not take part in billing or see your card). And our contact mailbox is hosted on Gmail: if you write to soporte@bivelapp.com or hola@bivelapp.com, your message is stored there so that we can read it and reply to you, and Friends reports arrive there too. And, on Android, Friends notifications reach your phone through Firebase Cloud Messaging, Google's notification service, which receives your phone's notification identifier and the text of the notification.
• Apple (if you use "Sign in with Apple"): acts as an identity provider to create or access your account; its processing of that data is governed by Apple's own privacy policy. In addition, if you subscribe from an iPhone or iPad, Apple processes the payment as the party responsible for the transaction (we do not take part in billing or see your card). And, on iPhone, Friends notifications arrive through Apple's notification service, which receives your phone's notification identifier and the text of the notification.
• RevenueCat (subscription management): if you subscribe, we use RevenueCat to validate the purchase with the store (Apple or Google Play) and check whether your subscription is still active. It receives an internal identifier for your account (not your email), the purchase receipt data that the store provides to it, and basic technical data (country, platform). It does not receive your card or payment details (Apple or Google handles those). This processing may involve an international data transfer (servers in the US), covered by the safeguards provided by the provider (e.g. standard contractual clauses).

5 · Retention

We keep your data while your account is active. If you delete your account, it is permanently erased (see section 7). Waiting list emails are kept until we notify you of the launch or you ask us to delete them. The count of how many times you use the AI each day, which applies the daily limit, is kept for one week and then deleted automatically. If you redeemed a promo code, the record of that code is deleted automatically one year after you redeemed it (sooner, if you delete your account).

Friends data is kept while you have your Friends profile. You can delete any post or comment of yours at any time, and leave Friends from its settings without deleting your account: your profile, your posts with their photos, your likes and comments, who you follow and who follows you, your notifications and the notification identifier are then deleted. So that leaving and coming back does not undo them, blocks (the ones you made and the ones made on you), a suspension if there is one, the moderation explanations we have given you, the reports you filed or that your profile received, and the record of the notifications you triggered in other people's activity stay linked to your account; they are deleted with your account. Activity notifications (who follows you, who likes your things…) are deleted automatically after 90 days, except moderation explanations, which go with your account. And for each notification we send to your phone, we keep for a few minutes the receipt Expo gives us, only so we stop writing to a phone that no longer has the app. Reports are kept as a record of moderation for as long as needed to handle an appeal or a request from an authority: if what was reported or the reporter's account is deleted, the report is no longer linked to them and keeps only the reason, what was written when reporting and the decision. The report notice we receive by email, with a copy of the text of what was reported, is kept in our mailbox on the same basis (the link to its photo expires after 7 days).

6 · Your rights

You have the right to access, rectify, delete and port your data, to restrict or object to its processing and to withdraw your consent at any time. You can exercise most of these from within the app (by editing your profile or deleting your account) or by writing to soporte@bivelapp.com.

If you believe we have not handled your rights properly, you have the right to lodge a complaint with the competent supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

7 · Deleting your account and data

You can delete your account and all your data at any time from Settings → My account → Delete my account. Deletion is immediate and permanent, and it also removes your profile photo, your Friends profile with everything you posted and its photos, your contact at our email provider (Resend), your record at our subscription manager (RevenueCat) and, if your email was on the waiting list, that entry. Deleting your account does not cancel a subscription: the store (Apple or Google Play) manages it, and it is cancelled there. If you only left your email on the waiting list, write to soporte@bivelapp.com and we will delete it.

8 · Children

The app is not directed at children under 14. If you are under the age of digital consent in your country, you need your legal guardian's permission. Friends is only from age 16: below that, a profile cannot be created, and someone under 16 sees nobody in Friends and nobody sees them.

9 · Changes to this policy

We may update this policy. We will publish the current version at this same address with its update date.

10 · Contact

For any privacy questions: soporte@bivelapp.com.