Privacy Policy

1. Who we are

BMi is a service of Better Me For You Oy, a Finnish company registered in Seinäjoki, Finland. Better Me For You Oy ("we", "our", "us") is the data controller for the personal data described here. This policy covers data processed by the BMi apps (iOS, Android), the watch companions (Apple Watch, Wear OS) and this website. We operate under EU law (GDPR). We do not sell your personal data and we do not use advertising or cross-app ad-tracking SDKs.

2. What we process — and who processes it

We use a small set of trusted processors to run the service:

• Account & data storage — Google (Firebase): sign-in via Firebase Authentication (we never store raw passwords); your workouts, meals, journal entries, mood, weight and settings are stored in Firebase Firestore and Cloud Storage, hosted in the EU (europe-north1).
• Health integrations (Apple HealthKit & Health Connect): optional read/write access to heart rate, energy, sleep, steps and workouts — only with your explicit permission, revocable at any time in your device settings.
• AI coaching — Google (Gemini): see section 3.
• Subscriptions — RevenueCat: manages your purchase and trial status (no card numbers ever reach us; payments are handled by Apple and Google).
• Product analytics & crash reporting — Google (Firebase Analytics & Crashlytics): aggregate usage events and crash/performance diagnostics, used only to keep the app working and improve it. We do not use this for advertising.
• Email — Resend: sends beta and waitlist emails (e.g. your invite). Used only for the emails you'd expect; no marketing lists.
• This website — our own visit counter: when you open a page or tap an App Store or Google Play button, your browser sends us the page, its language, whether you are on iPhone, Android or a computer, and which site linked you here (just the site, never the full address). We add these to daily totals in Firestore. No cookies, nothing stored on your device, no IP address or identifier kept with the counts, and no third party involved. Like any web service, our hosting keeps short-lived technical request logs (including IP addresses) for security, deleted after 30 days.
• On your device only: the Personal Rhythm Engine (which learns your daily times) runs on your phone and is never uploaded.

3. AI coaching and voice

When you chat with the coach (Auri), send a voice note, or photograph a meal, that content — your message text, images and audio, together with the relevant context needed to answer (for example recent training, and health signals such as heart rate, sleep or weight where you've enabled them) — is sent to Google's Gemini API to generate your coaching response. Voice notes you send to the coach are uploaded as audio and processed by that service.

Journal voice dictation is transcribed on your device where your device supports it (in Finnish, Swedish and English); where on-device recognition isn't available, your device's standard speech service may be used. AI guidance is for fitness and wellness, not medical advice.

4. Legal basis (GDPR)

• Performance of our contract with you (Art. 6(1)(b)) — to provide the coaching service you signed up for.
• Your explicit consent (Art. 9(2)(a)) — for health and fitness data, which is special-category data; and for the Apple Health / Health Connect integrations. You can withdraw consent at any time.
• Our legitimate interests (Art. 6(1)(f)) — to keep the service secure and to diagnose crashes, balanced against your rights.

5. Sharing and international transfers

We share data only with the processors above, who act on our instructions. Some of them (e.g. Google, RevenueCat, Resend) may process data outside the EEA; where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses. We do not sell your data or share it for advertising.

6. How long we keep it

We keep your data for as long as your account is active. When you delete your account, your data is permanently deleted — deleted means deleted, not hidden — and removed from backups within 30 days.

7. Your rights

You can export all of your data as one file and delete everything with one action in the app. Under the GDPR you also have the right to access, correct, restrict or object to processing, to data portability, and to withdraw consent. To exercise any right, use the in-app controls or contact privacy@bettermi.fi. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

8. Age

BMi is not intended for children under 16. By using it you confirm you are at least 16 years old.

9. Contact

Privacy inquiries: privacy@bettermi.fi. Everything else: hello@bettermi.fi.