Privacy Policy
Last updated: 25 September 2026
This policy explains what we do with your personal data when you use the Belfer.Fit app or this website. Belfer.Fit is a fitness and nutrition app, so most of what it holds is information about your body and your health. We have tried to write this plainly rather than defensively.
1. Who we are
BELFER&CO LTD
Registered in England and Wales, company number 13659687
Registered office: 31 Princess Street, Coventry, CV6 5BT, United Kingdom
VAT registration: GB 497530062
ICO registration: ZC255234
Contact: hello@belfer.co.uk
Belfer.Fit is a trading name of BELFER&CO LTD, which also trades as Belfer® (belfer.store) and Belfer Agency (belfer.agency). This policy covers Belfer.Fit only.
We are the data controller for everything described here. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who can use Belfer.Fit
Belfer.Fit is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we discover that an account belongs to someone under 18, we will delete it and the data attached to it. If you believe a child has given us their data, email us and we will remove it.
3. What we collect
When you create an account
- Email address and a password. The password is stored only as a cryptographic hash by our authentication provider — we never see it and cannot recover it.
When you set up your plan
- Profile and onboarding answers — your goal, training experience, the equipment you have, how many days a week you can train
- Body details — height, weight, age, sex, and any measurements you choose to record over time
As you use the app
- Training — workouts, exercises, sets, reps, weights and dates
- Nutrition — the food and drink you log, portion sizes, and the targets you set
- Photographs — meal photos you submit for an estimate, and progress photos you choose to save
- Subscription status — whether your subscription is active and which tier. Payment is taken by Apple or Google. We never see or hold your card details.
- Consent records — whether you granted consent for AI processing, when, and which version of this policy was in force
- Technical data — app version, device type and error reports; on this website, IP address and pages visited
4. Health data and explicit consent
Most of what Belfer.Fit holds — your weight, your measurements, what you eat, how you train — is special category data under Article 9 of the UK GDPR, because it concerns your health. That carries a higher bar than ordinary personal data.
We rely on your explicit consent, given when you create your account, and on a second, separate consent before anything is sent to an AI provider. You can withdraw either at any time. Withdrawing does not make what we did beforehand unlawful, but it stops us going further.
5. Why we use your data, and on what legal basis
| What for | Legal basis |
|---|---|
| Running your account and delivering the app you signed up for | Performance of a contract |
| Storing and showing your health, training and nutrition data | Your explicit consent (Article 9(2)(a)) |
| Sending data to an AI provider to build a plan, adapt it, or estimate a meal | Your separate explicit consent |
| Keeping the service secure, preventing abuse, and controlling our costs | Our legitimate interests |
| Accounting and meeting legal duties | Legal obligation |
6. Meal photographs
A meal photo is read once and then deleted. When you submit a photograph for an estimate it is uploaded to private storage, read to produce the estimate, and removed from our storage immediately afterwards.
It is not kept, not used to train any model, and not seen by anyone. If an upload is interrupted and never processed, it is deleted automatically within 30 days at the latest.
The food entry the photo produced — the calories and macros you confirmed — stays in your log, because that is your record, not ours.
Progress photos are different: you save those deliberately, so we keep them until you delete them or delete your account.
7. AI processing, and what leaves our systems
If you give AI consent, we send the relevant data — your profile answers, your training history, or a meal photograph — to Anthropic, PBC, who process it on our instructions to generate your plan, adapt it, or estimate a meal. Anthropic act as our processor under a contract that restricts what they may do with it.
If you do not consent, those features simply do not run. Everything else in the app — logging your training, logging your food, the exercise library, your history and charts — works without it.
8. Where your data is held
Your data is hosted by Supabase in their London (eu-west-2) region. Some of our processors operate outside the UK. Where data leaves the UK, the transfer is covered by a UK adequacy decision or by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
9. Who we share it with
- Supabase — database, authentication and file storage
- Anthropic — AI processing, only if you have consented
- RevenueCat — subscription status
- Formspree — delivers the waitlist form on this website to us. It handles only the email address you type into that form, and no app data.
- Apple and Google — app distribution and payment
- Open Food Facts — only when you choose to report a missing or incorrect product. That report is published in their open database under the Open Database License
We do not sell your data. We never have and we will not.
We do not use your health, fitness or nutrition data for advertising, and we do not share it with advertisers or data brokers.
10. How long we keep it
- Account and app data — until you delete your account
- Meal photographs — deleted as soon as the estimate is produced, and in every case within 30 days (section 6)
- A record that a deletion was requested — kept as an audit trail, because we have to be able to show that we acted on it
- Accounting records — six years, as UK law requires
11. Deleting your account
You can delete your account from inside the app, under Profile → Delete account. It removes your files and your records, and it cannot be undone. You do not need to email us or wait for us to action it.
12. Your rights
Under UK data protection law you have the right to:
- Ask what we hold about you, and get a copy
- Have inaccurate data corrected
- Have your data erased
- Restrict or object to how we use it
- Receive your data in a portable format
- Withdraw consent at any time
Email hello@belfer.co.uk and we will respond within one month. Exercising any of these rights is free.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113. We would rather you came to us first, but it is your right either way.
13. Where our food figures come from, and their limits
Nutrition figures in Belfer.Fit come from three public sources:
- Open Food Facts — packaged products and barcodes, published under the Open Database License (ODbL)
- USDA FoodData Central — everyday foods, public domain
- CoFID 2021 (McCance and Widdowson's The Composition of Foods) — contains public sector information licensed under the Open Government Licence v3.0
These figures are not guaranteed to be accurate. Open Food Facts is contributed by members of the public, so an entry may be wrong, incomplete, out of date, or missing altogether. Manufacturers also change recipes without changing the barcode.
An estimate produced from a photograph is an estimate, not a measurement. It can be wrong about the food, the portion, or both.
Treat every number in the app as a guide. Do not rely on it for any medical, clinical or diagnostic purpose. If a figure matters to your health, check the label.
Belfer.Fit is not a medical device and does not provide medical advice. See the Terms of Service.
14. Cookies
This website uses cookies. The app does not. See our Cookie Policy.
15. Changes to this policy
If we change this policy we will update the date at the top and tell you in the app. If a change affects what you consented to, we will ask you again rather than assume.
16. Contact us
BELFER&CO LTD, 31 Princess Street, Coventry, CV6 5BT, United Kingdom
hello@belfer.co.uk