Privacy Policy

The controller of your personal data is Becomr ("we", "us").

Contact for anything in this policy: becomrapp@gmail.com

Becomr is for people 16 or older. We don't knowingly collect data from anyone younger. If you believe someone under 16 has given us data, email us and we'll delete it.

When you first open Becomr, it creates an anonymous account automatically so your data can be backed up from the start. During setup you secure that same account with an email and password, Sign in with Apple, or Google. This attaches a sign-in method to the account that already exists; it doesn't start a separate collection.

• With email, we store your email address. Passwords are handled by our authentication provider (Supabase) and stored hashed; we never see them in plain text.
• With Apple or Google, we receive an account identifier and, if you allow it, your email address. We never see your Apple or Google password.
• With Sign in with Apple, we also store an Apple-issued token on our server so we can revoke Becomr's access with Apple when you delete your account.

Everything below is linked to your account. None of it is used for advertising or to track you across other apps or websites, and we don't sell it.

We don't collect your location, contacts, photos, browsing history, device advertising ID, or crash reports.

Notifications. Reminders you turn on (a daily reminder and a trial-ending reminder) are scheduled locally on your device. We don't use push notification tokens.

Connecting Apple Health is optional. Becomr only asks for access when you tap "Connect Apple Health" (during setup or in Profile), never at launch, and the app works fully without it.

If you connect it, Becomr:

• reads menstrual flow, sleep, resting heart rate, heart rate variability (HRV) and steps;
• writes menstrual flow only (the period days you log in Becomr), and nothing else.

Menstrual flow you import becomes cycle entries in Becomr and is stored as described above. Sleep, resting heart rate, HRV and steps are not stored on our servers. They're summarised on your device (last 7 days compared with the 4 weeks before) and that summary is included in Coach requests only if you've allowed AI data sharing (section 6).

Data from Apple Health is never used for advertising or marketing, never sold, never shared with data brokers, and never stored in iCloud by Becomr. You can revoke access at any time in the iOS Settings app → Health → Data Access & Devices → Becomr.

The Coach and the workout builder use OpenAI to generate responses. The first time you send a Coach message or open the workout builder, Becomr shows a system alert asking whether to share data with AI. Nothing is sent to OpenAI unless you tap Allow. Our server also checks your recorded consent before every AI request and refuses the request if it's missing.

If you allow it, requests go from the app to our own server (a Supabase Edge Function) and from there to OpenAI. The OpenAI API key never leaves our server.

What a Coach request contains: your name (if given), weight unit, split, training mode, equipment, experience and goals; your cycle tracking mode, estimated cycle phase, cycle day and predicted cycle length, and recent cycle entries (flow, symptoms and the first part of any note); your Apple Health summary if connected (section 5); today's recommendation and session; your recent training history, personal records and effort trends; your personal phase pattern if unlocked; the Coach's notes about you; earlier messages in the conversation; and your new message.

What a workout-builder request contains: what you typed describing the workout you want, your chosen goal, time, focus and equipment, your experience level, areas you asked to avoid, the list of candidate exercises (including which ones you've done before), set and rep targets, and any change you ask for afterwards. The builder doesn't send your cycle entries or Apple Health data.

OpenAI processes this data on our behalf to produce the response. Under OpenAI's API terms, it may keep API data for a limited period to monitor for abuse before deleting it.

You can withdraw AI consent at any time in Profile → Turn Off AI Data Sharing. The Coach and workout builder then stop sending anything; the rest of the app keeps working.

• Account, profile and workout data: necessary to provide the app you signed up for (contract, Art. 6(1)(b)).
• Cycle and Apple Health data are health data, a special category under Art. 9. We process them on the basis of your explicit consent (Art. 6(1)(a) and 9(2)(a)), which you give by choosing to enter cycle information during setup and in the app, and by granting Apple Health access in the iOS permission sheet. You decide what cycle information to log, and you can edit or delete entries, revoke Apple Health access, or delete your account at any time.
• Sharing data with OpenAI for the Coach and workout builder: your separate explicit consent (Art. 6(1)(a) and 9(2)(a)), given through the "Share data with AI?" alert and withdrawable in Profile → Turn Off AI Data Sharing.
• Subscription status and usage counters: contract (Art. 6(1)(b)), to provide what you paid for and apply fair-use limits.

Withdrawing consent doesn't affect processing that happened before you withdrew it.

We use these service providers. Each processes data only to provide its service to us, under a data processing agreement.

• Supabase — database, authentication and server functions. Stores the data marked "our database" above. Hosted in the EU (Ireland).
• OpenAI (US) — generates Coach replies and workout suggestions, only after your AI consent, with the data listed in section 6.
• RevenueCat (US) — manages subscription status. Receives your Becomr user ID and your App Store purchase and subscription records.
• Apple — Sign in with Apple, App Store payments, and Apple Health on your device. We never see your card details.
• Google — Google sign-in, if you choose it.

Our database is hosted in the EU. OpenAI and RevenueCat process data in the United States, and our other providers may access data from outside the European Economic Area to provide their services. These transfers rely on the providers' data processing agreements, which include the European Commission's Standard Contractual Clauses, and, where a provider is certified, the EU-U.S. Data Privacy Framework.

We keep your data for as long as your account exists.

• Deleting a single entry (a cycle entry, workout or message) removes it from your device immediately. Because of a current limitation, a copy may remain on our servers until you delete your account.
• Deleting your account (Profile → Delete Account) permanently deletes your account and all associated data on our servers: profile, cycle entries, workouts, Coach messages, telemetry, usage counters, consent and subscription records. We also revoke Sign in with Apple and delete your RevenueCat customer record. Deleted data may persist in our provider's rolling backups for a short period until they're overwritten. This can't be undone. Deleting your account doesn't cancel an App Store subscription; manage that in your Apple ID settings.

You can:

• Access and export your data in the app: Profile → Download My Data gives you a JSON file with your profile, cycle entries, workouts and Coach messages.
• Correct your data by editing it in the app, or by emailing us.
• Delete your data: Profile → Delete Account.
• Withdraw AI consent: Profile → Turn Off AI Data Sharing.
• Revoke Apple Health access in the iOS Settings app.
• Object to or restrict processing, and ask for anything above by email at becomrapp@gmail.com. We'll reply within one month.
• Complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the data protection authority where you live.

Data is encrypted in transit. Row-level security means each account can only read its own rows, and server-only secrets (like the OpenAI key) never ship in the app. No system is perfectly secure, but we work to protect your data.

Becomr is a training app. It isn't a medical device and doesn't diagnose, treat, cure or prevent any condition. Cycle estimates, recommendations and anything the Coach says aren't medical advice, and Becomr must not be used for contraception, fertility planning or pregnancy detection. Talk to a qualified clinician about your health.

If we change this policy, we'll update the date at the top. If a change materially affects how we use your data, we'll tell you in the app before it takes effect and, where the law requires it, ask for your consent again.

Email: becomrapp@gmail.com