Privacy Policy

Last updated: 9 October 2026  ·  Effective: 9 October 2026

This Privacy Policy explains how The Brandwick ("we", "us", "our") collects, uses, stores, shares and deletes information when you use the BellyFat mobile application (the "App") and the website at thebrandwick.github.io/belly-fat-website (together, the "Services").

1. Who is responsible for your data

The data controller is The Brandwick. For any privacy question, request or complaint, contact us at privacy@thebrandwick.com. We aim to respond within 30 days.

2. Information we collect

a. Account information

When you create an account we collect your email address, and — depending on the sign-in method you choose — your display name and a unique identifier provided by Apple or Google. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address. We never receive or store your Apple or Google password. If you sign up with email and password, Firebase sends a verification link to your address; your password is handled by Firebase Authentication and is never visible to us.

b. Health, fitness and lifestyle information you provide

The App exists to build a personalised plan, so this is the core of what we hold. It is collected only because you enter it, and it is used to generate your targets, score and recommendations:

• Body data: height, current weight, target weight, waist measurement, year of birth, and the weight history you record over time.
• Goal and pace: what you want to achieve and how quickly.
• Diet and food: diet type, ingredients and foods you wish to avoid (including any you add yourself), meals per day, first and last meal times, and the food and drink entries you log.
• Lifestyle and wellbeing answers: activity level, sleep hours, stress level, late-night hunger, hormonal-journey answers, past tracking experience and similar onboarding responses.
• Daily activity in the App: tasks completed, streaks, water intake, and your daily score.

Some of this is treated as health-related data and, where the GDPR applies, as a special category of personal data. We process it only on the basis of your explicit consent, which you give by entering it, and you can withdraw that consent at any time by deleting the data or your account.

c. Device and technical information

To operate, secure and debug the Services we process a device identifier, device model and operating-system version, app version, language and region, approximate time-zone, crash and error diagnostics, and — if you enable notifications — a push notification token.

d. Purchase information

If you buy a subscription, the payment itself is handled entirely by Apple or Google. We never see or store your card number or billing address. We receive, through our subscription provider RevenueCat, a pseudonymous purchase record: which product you bought, the store transaction identifier, start and renewal dates, trial and entitlement status, and country of the store account.

e. Camera

The App asks for camera access only so you can scan a food barcode. Images from the camera are processed on your device to read the barcode and are not uploaded, stored or shared by us. You can refuse or revoke camera access in your device settings and continue to use the rest of the App.

f. Step count (Motion & Fitness)

If you allow Motion & Fitness access, the App reads your step count from your device's built-in motion sensor so it can show today's activity and estimate the calories you have burned. Only daily step totals are used; we do not read location or individual movement data, and we do not read Apple Health. You can refuse or revoke this permission in your device settings and enter activity manually instead.

g. Food searches and barcode lookups

When you search for a food or scan a barcode, the search text or barcode number is sent to the public food databases Open Food Facts and the USDA FoodData Central API to retrieve nutrition information. These requests do not include your name, email, account identifier or health data.

h. Data kept only on your device

Your food and drink log, saved custom foods and some daily activity totals are stored locally on your device and are not uploaded to our servers. They are removed when you delete your account or uninstall the App.

i. Information we do not collect

We do not collect precise location, contacts, photos, microphone audio, or your browsing activity on other apps and websites. We do not use advertising identifiers and we do not run third-party advertising SDKs in the App.

3. How we use your information

We do not use your data to make decisions producing legal or similarly significant effects about you, and we do not use it to train third-party advertising or profiling systems.

4. How your information is shared

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share data only with the service providers needed to run the App, each bound to process it on our instructions:

• Google Firebase (Authentication, Cloud Firestore, Cloud Messaging) — account creation, sign-in, storage of your profile and logged data, and delivery of notifications. Firebase privacy
• RevenueCat — subscription and entitlement management. RevenueCat privacy
• Apple and Google — app distribution, sign-in, and payment processing under their own privacy policies.
• Open Food Facts and USDA FoodData Central — receive only the food search text or barcode number you look up, to return nutrition data. Open Food Facts privacy
• Expo — delivery of over-the-air app updates and crash diagnostics. Expo privacy

We may also disclose information where we are legally required to (for example a valid court order), to establish or defend legal claims, or to protect the safety of our users. If our business is ever sold or merged, your data may transfer to the new owner; we will notify you in the App or by email before it does, and this Policy will continue to apply until you are told otherwise.

5. International transfers

Our providers operate data centres in the United States and other countries, so your information may be processed outside the country where you live. Where data leaves the UK/EEA we rely on the European Commission's Standard Contractual Clauses or an adequacy decision to protect it.

6. How long we keep it

• Account and health data: kept while your account is active, so your history and trends stay intact.
• After you delete your account: removed from our live systems within 30 days, and purged from encrypted backups within a further 90 days.
• Purchase and tax records: retained up to 7 years where law requires, in a form separated from your health data.
• Diagnostic logs: typically retained for up to 90 days.

7. Your rights and choices

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. You may also withdraw consent at any time, without affecting processing already carried out.

If you are in the EEA or UK, you have these rights under the GDPR and may complain to your local supervisory authority (in the UK, the ICO). If you are in California, you have the rights to know, delete, correct and opt out under the CCPA/CPRA — and, as stated above, we do not sell or share personal information as those terms are defined. We will never discriminate against you for exercising a privacy right.

To exercise any right, email privacy@thebrandwick.com from the address on your account.

Deleting your account and data

You can delete your account and everything in it directly in the App: open the Profile tab, tap your account card, then tap Delete account and confirm. This permanently removes your profile, measurements, food logs, history and preferences on the timeline in section 6. If you cannot access the App, email privacy@thebrandwick.com with the subject "Delete my account" and we will verify and complete the deletion for you. Deleting the App from your phone alone does not delete your account.

You can also turn off notifications, revoke camera or Motion & Fitness access, or manage or cancel your subscription at any time in your device's system settings or in the App Store / Google Play account settings.

8. Security

Data is encrypted in transit with TLS and encrypted at rest by our infrastructure providers. Access to production data is limited to the people who need it and protected by multi-factor authentication, and each account's records are readable only by that account under our database security rules. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as the law requires.

9. Children

The Services are not directed to children and are intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal information, email privacy@thebrandwick.com and we will delete it promptly.

10. Not medical advice

BellyFat is a general wellness and habit-tracking tool. It is not a medical device, it does not diagnose, treat or prevent any condition, and nothing in it is a substitute for advice from a qualified healthcare professional. Talk to your doctor before starting any weight-loss or dietary programme, particularly if you are pregnant, breastfeeding, or living with a medical condition or eating disorder.

11. Changes to this Policy

We may update this Policy as the App changes. The "Last updated" date at the top always reflects the current version. If a change materially affects how we use your data, we will tell you in the App or by email before it takes effect, and where the law requires it we will ask for your consent again.

12. Contact

The Brandwick — BellyFat
Privacy: privacy@thebrandwick.com
Support: support@thebrandwick.com
Web: thebrandwick.github.io/belly-fat-website