Legal
Last updated 18 September 2026 · Applies to the BeastBook apps for Android and iOS
BeastBook is developed by Corporate Incorporated Ltd. This policy explains what information the BeastBook app collects, how it's used, and your choices. If you have questions, contact privacy@beastbook.org.
Stored in a local database on your device. None of it is uploaded to a BeastBook account or database, but some of it is included in AI requests when you use the AI features — see the table below:
If you choose to connect Health Connect (Android) or Apple Health (iPhone), BeastBook reads (never writes): step count, heart rate, weight, body fat percentage, and active calories burned. This is read-only and only happens if you explicitly grant the permission — you can revoke it at any time in Android's Health Connect settings or the iPhone's Health settings. This data is used only to display it inside the app and is stored locally alongside your other data. It is not used for advertising or marketing, is not shared with data brokers, and the readings themselves are not sent to the AI features or to any other third party.
| Feature | What's sent | Sent to | Why |
|---|---|---|---|
| AI food search / estimate | The food name or description you type (e.g. “grilled chicken breast”) | BeastBook's AI relay (hosted on Cloudflare), which forwards it to Google (Gemini API). If you've added your own key in Settings, it goes straight from your device to Google or Anthropic instead. | To estimate calories and macros |
| AI photo estimate | A photo you take or choose of a meal | BeastBook's AI relay, which forwards it to Google (Gemini API); straight to Google if you use your own Gemini key | To identify the food and judge portion size from the photo |
| AI workout suggestions (the “AI Trainer” setting, on by default) | After you finish a workout: your age, gender, height, body weight and fitness goal, plus recent history for the exercises you just did (exercise names, dates, weights, reps, durations, distances, and the previous suggestion). Not your name. | BeastBook's AI relay, which forwards it to Google (Gemini API); straight to Google if you use your own Gemini key | To suggest what to do next time |
| Barcode scan | The scanned barcode number only | Open Food Facts (a public, open database) | To look up a packaged food's nutrition info |
| Subscription purchases | A generated subscriber ID, your purchase/transaction and subscription status, device and app identifiers, and (if you enter one) a referral or promo code | RevenueCat, and in turn Google Play (Android) or the Apple App Store (iOS), who process the payment itself | To activate, verify, and manage your subscription, and to credit any referral code you enter |
| Subscription events (internal record-keeping) | The same subscriber ID, subscription status/lifecycle events (e.g. renewed, cancelled, expired), and any referral or promo code you entered | A private, internal record we keep (hosted on Google's infrastructure) | To track which referral/promo codes are being used and calculate payouts owed to referring partners |
Apart from the AI features above, no health data, workout data, weight, age, or other profile information is included in any request — only the specific search text, meal photo, or barcode number for that one lookup, or the purchase/subscription data above for billing.
The AI relay. AI requests are sent to BeastBook's AI relay, a small service we run on Cloudflare. The relay checks that you have an active subscription (by asking RevenueCat, using your anonymous subscriber ID), applies a daily allowance to free AI use, and passes your request on to Google. It does not store or log the text, photos or workout data you send. What it keeps is limited to: a count of how many AI requests each anonymous subscriber ID has made today, a short-lived note of whether that ID has an active subscription, and technical counts of how much text was processed (no content). Google then handles the request under its own terms. BeastBook uses Google's paid Gemini API tier, for which Google's Gemini API terms state that your prompts and responses are not used to improve Google's products, and are logged only for a limited period for detecting and preventing abuse. A meal photo you send for an AI estimate is used only to generate that one result and isn't stored by us afterward.
If you add your own personal Gemini or Anthropic API key in Settings, your AI requests go directly from your device to that provider — not through our relay — and that key is stored locally on your device and used only to authenticate your own requests. Google's terms for that key's tier then apply to those requests — for example, Google's terms allow content sent with a free-tier key to be used to improve its products and reviewed by people, so avoid sending anything sensitive that way. You can turn off the AI workout suggestions with the “AI Trainer” switch in Settings. BeastBook never sees or stores your card details — payment is handled entirely by Google Play or Apple.
If you export a workout or programme as a QR code or text code, or generate a shareable social card, that file or image can include your profile name along with the workout content. This isn't sent to us or to any server — it's a file or image you choose to share directly with whoever you send it to (by message, by showing the QR code, or however you distribute it), the same as sharing any other file from your device.
What's kept, and for how long:
To request deletion of subscription/purchase records: email privacy@beastbook.org from the address associated with your purchase (we'll verify and submit a deletion request to RevenueCat on your behalf), or contact RevenueCat directly.
BeastBook is not directed at children under 13 and does not knowingly collect information from them.
Because your data is stored on your device rather than on a server we control, it's protected by your device's own security (lock screen, encryption, etc.). AI requests do pass through our AI relay in transit, but it doesn't keep them. Requests to our AI relay, Google, Anthropic, Open Food Facts, and RevenueCat are made over encrypted HTTPS connections.
When BeastBook sends a request to Google, Anthropic, Open Food Facts, or RevenueCat, or through our AI relay hosted on Cloudflare, that request is also subject to that provider's own privacy policy:
If this policy changes, the "last updated" date at the top of this page will change accordingly. Material changes will be reflected in the app's store listing.
Questions about this policy or your data: privacy@beastbook.org