Legal
Last updated 18 September 2026 · Mirrors the Data Safety section BeastBook declares on Google Play · The iOS App Privacy declaration covers the same data
Steps, heart rate, weight, body fat %, and active calories burned (via Health Connect on Android or Apple Health on iOS); age, height, weight, and fitness goal you enter directly. Your age, gender, height, body weight and goal are also included when the AI workout suggestions run (see the table below); the Health Connect / Apple Health readings themselves are not sent anywhere.
Workouts, exercises, sets, reps, and weights you log. Recent history for the exercises you just did is sent (through BeastBook's AI relay) to Google when the AI workout suggestions run.
Meals logged, calorie entries, and other in-app actions.
An optional profile field, stored locally only. Can end up in a workout you export or share as a QR code / social card — see the Privacy Policy.
A photo you take or choose of a meal, for the AI photo-estimate feature. Sent through BeastBook's AI relay to Google's Gemini API to identify the food and judge portion size; not stored by us afterward.
An anonymous subscriber ID that RevenueCat generates for each install (there is no login), used to keep track of which device holds a subscription. It also carries a referral or promo code if you enter one.
Your subscription status and purchase records, handled through RevenueCat and Google Play or the Apple App Store. We never see or store your payment card details.
| Feature | What's sent | Sent to |
|---|---|---|
| AI food search / estimate | The food text you type | BeastBook's AI relay (Cloudflare), which forwards it to Google (Gemini API). Straight to Google or Anthropic if you've added your own key |
| AI photo estimate | A photo you take or choose of a meal | BeastBook's AI relay, which forwards it to Google (Gemini API) — never Anthropic. Straight to Google if you use your own Gemini key |
| AI workout suggestions | Your age, gender, height, body weight and goal, plus recent history for the exercises you just did (not your name) | BeastBook's AI relay, which forwards it to Google (Gemini API). Straight to Google if you use your own Gemini key. Can be turned off with the “AI Trainer” setting |
| Barcode scan | The scanned barcode number only | Open Food Facts |
| Subscription purchases | Subscriber ID, purchase/subscription status, device identifiers | RevenueCat, and Google Play or the App Store for payment processing |
None of these are advertising or analytics partners — each is triggered only when you use that specific feature (or, for RevenueCat, when the app checks your subscription), and receives only the minimum data it needs. BeastBook's AI relay is a small service we run on Cloudflare: it doesn't store or log what passes through it, and only keeps a per-subscriber daily usage count and a short-lived subscription check — see the Privacy Policy.
In transit: every network request (BeastBook's AI relay, Gemini, Anthropic, Open Food Facts, RevenueCat) uses HTTPS.
Deletion: handled in-app, immediately — there's no account and BeastBook keeps no server-side copy of your data (the AI relay doesn't store what passes through it). Delete an entry and it's gone; uninstall the app and everything goes with it. The one exception is subscription/purchase records, which Google Play or Apple, and RevenueCat, retain separately for billing and legal record-keeping — see the Privacy Policy for how to request deletion of those.