Privacy Policy
Last updated: February 2026
Legal Framework
This privacy policy informs you about the processing of your personal data when using the BesaFit App. We comply with the Swiss Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR), where applicable.
Data Controller
BesaFit Team
Kreuzlingen, Switzerland
Email: [email protected]
Data We Collect
Account Data
• Email address
• Name (optional)
• Profile picture (optional)
Body Data
• Weight
• Height
• Date of birth
• Gender
HealthKit Data (only with your permission)
• Steps
• Calories burned
• Workouts
• Heart rate
Usage Data
• Training progress
• Nutrition logs
• App settings
Technical Data
• Device type
• Operating system version
• App version
• Anonymized usage statistics
Purpose of Processing
We process your data for the following purposes:
• Providing app functionality
• Personalizing your training and nutrition plan
• Synchronizing your progress
• Improving the app
• Technical support
Legal Basis
Processing is based on:
• **Contract**: Fulfillment of the user agreement (Art. 6(1)(b) GDPR)
• **Consent**: For HealthKit data and optional features (Art. 6(1)(a) GDPR)
• **Legitimate Interest**: For app improvement and security (Art. 6(1)(f) GDPR)
Recipients and Third-Party Providers
Supabase
• Hosting and database
• Server location: EU (Frankfurt)
• Privacy: GDPR compliant
Apple
• HealthKit integration
• Data remains on your device
• No transmission to Apple servers by us
Data Transfer to Third Countries
Your data is primarily stored in the EU (Frankfurt). Should a transfer to third countries be necessary, we ensure an adequate level of data protection through appropriate safeguards (e.g., Standard Contractual Clauses).
Retention Period
• **Account data**: Until deletion of your account
• **Training and nutrition data**: Until deletion of your account
• **HealthKit data**: Not permanently stored, only retrieved when needed
• **Technical logs**: Maximum 90 days
Your Rights
You have the following rights regarding your data:
1. **Right of Access** - Learn what data we store about you
2. **Right to Rectification** - Have incorrect data corrected
3. **Right to Erasure** - Request deletion of your data
4. **Right to Restriction** - Restrict the processing
5. **Right to Data Portability** - Receive your data in a portable format
6. **Right to Object** - Object to the processing
To exercise your rights, contact us at: [email protected]
HealthKit-Specific Rules
Additional rules apply to HealthKit data according to Apple guidelines:
1. **No Sharing**: HealthKit data is never sold to third parties or used for advertising purposes
2. **No Cloud Storage**: HealthKit data is not stored on our servers
3. **Revocable at Any Time**: You can revoke access in iPhone Settings under Health > Data Access at any time
Changes
We may update this privacy policy as needed. Significant changes will be communicated to you via in-app notification or email. The current version is always available in the app and on our website.
Contact
For privacy questions, you can reach us at:
BesaFit Team
Email: [email protected]
For complaints, you can also contact the relevant data protection authority:
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• EU: Supervisory authority of your country