Legal
Privacy Policy
Last updated: 22 October 2026
BECOME (“the app”, “we”) helps you stay motivated to train by creating a daily AI-generated image of your future self and delivering it with a short message. This policy explains what we collect, why, where it goes, how long we keep it and how you delete it. We keep it short on purpose; if anything is unclear, contact us at tuna.ozerdem@yahoo.com.
Who is responsible
The app is operated by Mert Tuna Ozerdem (“the operator”). The operator is the data controller for the personal data described here.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Apple account identifier (from Sign in with Apple) and, if you share it, your name and email | To create your account and let you sign back in | Our servers (Google Cloud, EU region) |
| Profile: first name, age, gender, activities, chosen body reference, current and target weight, height, your reason and what gets in the way, motivation intensity, training days, hype times, time zone | To personalise your daily image and message and to schedule its creation | Our servers and your device |
| Face photo | To create your daily image | Your device and private storage on our servers; sent to the image provider only during generation |
| Generated images and messages | To show them to you in the app and in the notification | Our servers for 14 days; your device for 14 days |
| Weekly weigh-ins (weight, how the week went, how you felt) and your chosen weigh-in day | To build and adjust your weekly nutrition plan, and to tell when you’ve reached your goal weight (which also sets your training goal) | Our servers and your device, until you delete your account |
| Check-ins (trained / recovery, per day) | To show your journey | Our servers and your device, until you delete your account |
| Meal preferences (diet, allergies, cuisines, cooking time, dislikes), approved daily calorie and macro targets, saved weekly-plan requests, weekly meal plans and meal ideas | To build meal plans and ideas that fit your targets and preferences | Our servers and your device, until you delete your account; meal requests are sent to the AI text provider to suggest dishes |
| Food log: meals you mark as eaten or log in the food calculator (name, foods and grams, calories and macros, time) | To show how today’s eating compares with your daily targets | Our servers and your device; kept until you delete your account, the device keeps the last 14 days |
| Training setup (experience, gym or home and the equipment you have, training days and session length, equipment you’ve removed), the training notes you write, your workout plans, workouts you build and My workouts | To build your weekly workout plan and change it when you ask | Our servers and your device, until you delete your account; to build a plan, your setup, notes, age, gender, activities and motivation intensity are sent to the AI text provider (never your name, email or photo) |
| Workout logs: workouts you finish, with the sets, reps, weights and times you record, how a workout felt (if you rate it) and exercises you mark with “This hurt” | To show your progress, suggest your next weights and suggest changes to your plan (which you accept or decline) | Our servers and your device, until you delete your account; when your workout plan is rebuilt or you ask for a plan review, a summary of them (sessions done, how your lifts progressed, effort ratings, what hurt) is sent to the AI text provider |
| Plan review answers: how your last weeks felt, anything that hurt, what you want more of, and an optional note or change request | To build your next workout plan when you tap to review it | Our servers, until you delete your account; sent with your training setup and the workout summary to the AI text provider (never your name, email or photo) |
| Subscription status (which plan, purchase and expiry dates, whether it is a trial, sandbox or production) | To unlock BECOME Pro and to create your first image as soon as you subscribe | Our servers and RevenueCat; we never see your payment details |
| App usage events: which screens and features you use (for example finishing onboarding, checking in, logging a meal), the app version, device model and your phone’s region setting | To understand where people get stuck and which features help, so we can improve the app | PostHog (United States), linked to your account ID only; you can turn it off in Settings → Share usage analytics |
| Push notification token | To deliver your hype call and the reminders you keep on (training and fuel streaks, weigh-in, plan review) | Our servers; passed to Expo’s push service and Apple |
The camera is used only when you take your selfie or scan a food barcode; barcode scanning happens on your device and no photo is taken or kept. We do not collect location, contacts, Apple Health data or advertising identifiers. Your weight, weigh-ins and workouts are fitness data you enter yourself; they are used only for your plans. Training notes, “This hurt” marks and the plan review question about pain can include health information, such as an injury or pain; giving them is optional, and they are used only to plan and adjust your workouts. The app contains no ad networks. Usage analytics (PostHog) never include your name, email, photos, weight, calories or food, and are not used for advertising or shared with data brokers.
How your face photo is used
Your face photo has one job: to create your daily image. Each generation sends your photo, the body reference you chose from our catalogue, and a text description of the scene to an AI image provider, which returns the image. We do not use your photo to train models, to build face recognition or biometric templates, for advertising, or for any other purpose. You must be 18 or older and the photo must be of you.
Processors we rely on
- Google Cloud (Cloud Run, Firestore, Cloud Storage; region europe-west1, Belgium): hosts our servers and stores your account data, photo and generated images.
- Google Gemini API and OpenAI API: create the daily image (one provider is used per image; the other is a fallback) and write the daily message from your profile context. OpenAI also builds your workout plan from your training setup, your notes and a training goal (lose fat, build muscle or tone) worked out from your weights; when your plan is rebuilt it also gets a summary of your workout logs, and when you ask for a plan review, your review answers too. Your photo and profile text are transmitted for that request and are not used by us for anything else. Their processing is governed by their API data-use terms.
- Expo push service and Apple Push Notification service: deliver notifications to your device. A hype call contains the day’s message and a reference to the image; reminders contain only a short reminder text.
- Apple: Sign in with Apple authenticates you, and the App Store processes subscription payments. We never receive your Apple password or payment details.
- Open Food Facts and USDA FoodData Central: when you scan a food barcode, our server looks up that barcode number in these public food databases. Only the number is sent, never anything about you, and results are cached on our servers.
- PostHog (United States): receives app usage events tied to your account ID, to measure how the app is used. Location lookup from your IP address is turned off. You can opt out in Settings. Transfers from the EU/UK rely on PostHog’s EU–US Data Privacy Framework certification and Standard Contractual Clauses.
- RevenueCat: manages subscriptions. It receives your account identifier and your App Store purchase receipts, and tells our servers whether your subscription is active.
Retention
- Generated images and their messages are deleted from our servers 14 days after creation.
- Your face photo, profile, check-ins, weigh-ins, food log, training setup, workout plans, plan reviews and workout logs are kept until you delete your account.
- Push tokens are replaced whenever your device registers a new one and deleted with your account.
Deleting your data
Your rights
Depending on where you live (for example under the GDPR or the UK GDPR), you have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Most of this you can do directly in the app; for anything else, email us.
Legal basis
We process your data to provide the service you signed up for (performance of a contract). Processing your face photo to create images is based on your explicit consent, which you give in the app and can withdraw at any time by removing the photo or deleting your account. Health details you choose to give (in your training notes, a “This hurt” mark or a plan review answer) are processed on the basis of your explicit consent, given by entering them; you can edit or clear your notes at any time in Settings → Training, and clear a “This hurt” mark during the workout.
Children
BECOME is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
Security
Data is encrypted in transit. Server storage is private and not publicly accessible; images are delivered only to your signed-in session through our authenticated API, never through public links. API keys for the AI providers never leave our servers.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app.
Contact
Mert Tuna Ozerdem · tuna.ozerdem@yahoo.com