Privacy Policy

BiteBeat is operated by Jan Kosara (trading as BiteBeat), Novackeho 8, Bratislava, Slovak Republic 841 04.

Email: yanchi(at)yanchi.space

For the purposes of applicable data protection law (including the EU General Data Protection Regulation, “GDPR”), Jan Kosara is the data controller responsible for your personal data.

BiteBeat is a web-based application that helps you track meals, eating urges, and patterns between meals. It is not a medical, nutritional, or mental health service.

This Privacy Policy explains how we collect, use, store, and share personal data when you visit or use BiteBeat at bitebeat.app and related pages, create an account, log meals and urges, subscribe to Premium, or contact us for support.

By using BiteBeat, you acknowledge this Privacy Policy. If you do not agree, please do not use the service.

3.1 Account and profile data

When you register and manage your account, we collect your email address (for account creation, sign-in, password reset, and service communications), password (stored in hashed form, not as plain text), an internal user identifier, an optional display name, and your account creation date.

3.2 Data you enter in the app

Meal entries: timestamp of when you ate or logged a meal, and an optional short note (up to 500 characters).

Urge entries: timestamp of when you felt the urge, an optional short note (up to 500 characters), and optional feeling tags from a fixed list: Hunger, Anxious, Bored, Stressed, Lonely, Tired, Sad, Angry, Happy.

Goals and preferences (Premium): optional daily goals you set, such as target longest meal gap, minimum average gap between meals, and maximum meals per day.

We also compute derived statistics from your logs (for example meal counts, urge counts, average gaps between meals, and inferred fasting-related durations based on time between logged meals). These are calculated from your entries, not collected from third parties.

3.3 Subscription and billing data

If you subscribe to Premium, we receive and store billing-related metadata, such as subscription status, current billing period end date, whether cancellation is scheduled at period end, and payment provider customer and subscription identifiers. We do not store your full payment card details. Payment card information is entered and processed on our payment provider's secure pages.

3.4 Support and communications

If you send a bug report or contact us, we may receive your message, your email address, and your user identifier. We may send transactional emails about your account and subscription. We do not use your data for advertising based on what we currently operate.

3.5 Technical data

When you use BiteBeat, limited technical data may be processed automatically, such as authentication session data (via cookies or similar technologies needed to keep you signed in) and basic server and security logs (for example IP address, browser type, timestamps, and error logs) for security, abuse prevention, and troubleshooting.

We also use Google Analytics (Google LLC) to collect aggregated usage metrics such as page views, approximate location derived from IP, device/browser information, and how you navigate the app. This helps us understand product usage and improve BiteBeat.

We do not intentionally collect precise geolocation, photos, contacts, or health records from external sources.

We use personal data to:

• provide the service — store and display your logs, calculate statistics, and show free or Premium features according to your plan;
• manage your account — registration, authentication, password reset, profile updates, and account deletion;
• process subscriptions — billing, renewals, cancellations, and payment-related communications;
• communicate with you — transactional emails and responses to support requests;
• improve and secure the service — debugging, fraud prevention, rate limiting, analytics, and maintaining reliability;
• comply with law where required by applicable legal obligations.

We do not sell your personal data.

If you are in the EU/EEA or UK, we rely on the following legal bases:

• Performance of a contract — providing the service you request;
• Legitimate interests — account security, abuse prevention, analytics, and service improvement;
• Legal obligation and/or contract — billing and tax compliance;
• Contract and/or legitimate interests — optional display name and voluntary log content.

Where consent is required by law, we will ask for it separately.

We share personal data only with service providers that help us run BiteBeat, under contracts that require them to protect your data. Categories include hosting and infrastructure, authentication and database services, payment processing, analytics (Google Analytics), and email delivery providers for transactional emails.

These providers may process data in the EU and/or other countries. Where data is transferred outside the EU/EEA, we use appropriate safeguards (such as Standard Contractual Clauses) where required by law.

We may also disclose data if required by law, court order, or to protect rights, safety, and security.

Your data may be processed in Slovakia and in other countries where our service providers operate. We take steps to ensure an adequate level of protection consistent with applicable law.

BiteBeat uses essential cookies (or similar technologies) needed for keeping you signed in, securing your session, and operating core functionality.

We also use Google Analytics, which sets cookies or similar identifiers to measure how the app is used. Analytics data is processed by Google according to their terms and privacy policy. You can limit analytics cookies through your browser settings or Google's opt-out tools.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using signed-in features.

Account data, logs, and goals are retained until you delete your account or delete individual entries. When you delete your account, personal data tied to the account is deleted or anonymized when deletion succeeds; some copies may remain briefly in backups.

Billing records are retained as required for accounting, tax, and legal obligations. Support messages are retained as needed to handle your request and for a reasonable period afterward. Security logs are retained for a limited period for security and troubleshooting.

If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, object to processing, and receive your data in a structured format where applicable. Where processing is based on consent, you may withdraw consent.

To exercise your rights, email yanchi(at)yanchi.space. We may need to verify your identity.

You may delete your account in the app (Profile → Delete account), which removes your profile and logs and cancels an active subscription.

You have the right to lodge a complaint with a supervisory authority. In Slovakia: Úrad na ochranu osobných údajov Slovenskej republiky (ÚOOÚ), dataprotection.gov.sk.

We use reasonable technical and organizational measures to protect personal data, including access controls so users can only access their own records, encrypted connections (HTTPS), and secure handling of payment data via our payment provider.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

BiteBeat is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact yanchi(at)yanchi.space and we will take appropriate steps to delete it.

BiteBeat is currently offered in beta. Features, data handling practices, and availability may change as the service develops. Material changes to this Privacy Policy will be reflected by updating the “Last updated” date and, where required, notifying you.

We may update this Privacy Policy from time to time. The current version is always available at bitebeat.app/privacy. Continued use after changes means you accept the updated policy, subject to your rights under applicable law.

Questions about this Privacy Policy or your personal data:

Jan Kosara
Email: yanchi(at)yanchi.space
Novackeho 8, Bratislava, Slovak Republic 841 04