Privacy policy

Plain words about what FitBest keeps, why, and who else handles it. Last updated November 4, 2026.

Who we are

FitBest is run by Star Seed Enterprises, in Brazil, which decides how your data is used (the controller, under Brazil's LGPD and Europe's GDPR). For anything on this page, write to support@fitbest.app.

What we collect

• Your account: your name and email. You sign in with a link we email you, so there is no password.
• The details you give for your targets: sex, birth date, height, weight, activity, goal and time zone.
• What you log: meals with their photos, descriptions and estimates, workouts, weights, and progress photos with their date and weight.
• Your plan, if you buy one: which plan, its dates, and the store's or Stripe's identifier for it.
• The waitlist: your email and the date you joined, if you join it.
• Error reports: when something breaks, what failed and where in the code, with your account's ID but not your name, email, photos or what you logged.
• Visits to this website, counted with Rybbit, which sets no cookies and keeps no personal data. The apps have no analytics.

Some things never leave your phone. When you speak a meal, your voice is turned into text on the phone: the audio is never sent or saved, and only the text reaches FitBest, like a typed description. Meal and streak reminders are scheduled on the phone. When you log photos from your gallery, the app reads the time each was taken, on the phone, and uploads the photo without its other details, such as where it was taken. Meal photos taken with the camera in FitBest are also saved to your phone's gallery; progress photos are not.

How we use it

Only to run FitBest for you: to estimate your meals, work out your targets, show your progress and the date you could reach your goal, email you sign-in links, know which plan you have, and find and fix errors. Your data is never sold and never used for advertising.

We handle your account and logs because you asked us to provide FitBest (a contract). Weight, food and photos can say something about your health, so we keep them only because you choose to log them, and you can delete them at any time. Error reports and abuse limits rest on our legitimate interest in keeping FitBest working and safe.

Who else handles it

These companies handle data for us, only to run FitBest, and only what each needs:

• Anthropic receives meal photos and descriptions only to estimate the meal.
• OpenAI receives the name of a dish, with nothing about you, to draw a picture of it. Drawings are shared by everyone who logs that dish.
• Backblaze stores meal and progress photos, privately, in the United States.
• Hetzner runs our server and database, in Germany.
• Vercel hosts this website and the web app.
• Open Food Facts receives the barcode number when you scan one, and nothing else.
• Stripe, Google Play and the App Store handle payments (see Payments, below).

Sign-in emails come from our own mail server, and error reports and visit counts stay on our own servers (Sentry and Rybbit). Some of these companies are outside Brazil, so your data may be handled in the United States or Europe, under the same protections. We give data to the authorities only when the law requires it.

How we protect it

• Everything travels over encrypted connections (HTTPS).
• Photos are private: the app shows them through links that expire after a short time, and only your account can get those links.
• Sign-in links work once and expire after 15 minutes, so there are no passwords to leak.
• Only the people who run FitBest can reach the servers, and every error report is stripped of personal details before it is sent.

How long we keep it

Your account and what you log are kept until you delete them or the account. A deleted photo is removed from storage within a day. Error reports are deleted after 30 days. Waitlist emails are kept until you are invited or ask to be removed. Stripe and the stores keep their own payment records as tax law requires.

Your rights

You can see and correct what you logged in the app, and delete any of it, or the whole account, at any time. You can also ask us, at support@fitbest.app, for a copy of your data, to correct or delete it, or to stop using it, and we answer within 15 days. If you think we got something wrong, you can complain to Brazil's ANPD or to the data protection authority where you live.

Payments

Google Play, the App Store and Stripe handle your card when you buy a plan; FitBest never sees it. We keep the plan, its dates and the store's or Stripe's identifier for it, to know what you bought. On the web, Stripe's seller is Star Seed Enterprises. See the Terms of service.

Deleting your account cancels a plan bought on the web. A plan bought in Google Play or the App Store is cancelled there.

Deleting your account

Deleting your account removes all of this at once. Delete your account explains how.

Children

FitBest is for adults. It is not meant for anyone under 18, and we delete any account we learn belongs to a child.

Changes

If this policy changes, we update the date at the top, and we tell you in the app or by email before a change that affects what we do with your data.

Contact

To be removed from the waitlist, or for anything else, write to support@fitbest.app.