Reverfit Diet app privacy policy

This is a translation for convenience; the Spanish version is the legally binding one.

Last updated: September 17, 2026.

This policy covers the Reverfit Diet mobile app (Reverfit Dieta), the one you download on your own from Google Play or the App Store. If you use Reverfit because your gym has subscribed to it, the policy that applies to you is the platform’s: there, the controller of your data is your center.

1. Who the controller is

• Controller: Francisco José Fraile León
• Tax ID (NIF): 27313175P
• Postal address: Apartado de Correos 1313, 41012 Sevilla (Spain)
• Email for data matters: info@reverfit.com

2. What data we collect and why

a) Your account. To sign in we ask for your email address and a password. We don’t keep the password: it is stored encrypted and nobody at Reverfit can read it. We use them to identify you and so that your diets and your history follow you to your new phone if you change phones. When you create it, we send you a welcome email. Legal basis: performance of the contract (art. 6.1.b GDPR). If you also tick the news and offers checkbox, which is off by default, we keep that choice and the date and write to you with Reverfit news. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw whenever you want from Your account. Without an account, everything stays on your phone only and nothing reaches us.

b) Health and food data. This is the heart of the app, and you should know exactly what it is: your weight, your height, your age, your sex, your body measurements, your goal (lose, maintain or gain), your activity level, what you log that you eat with its calories and macronutrients, and the glasses of water of the day. They are used to calculate your daily targets, draw the rings and show you your progress. They are not used for anything else.

The GDPR considers health data a special category (art. 9), and that is why we tell you in plain words: we process it with your explicit consent, which you give by ticking the checkbox that asks for it when you create the account (without ticking it, the account is not created). Legal basis: art. 9.2.a GDPR. You can withdraw it whenever you want by deleting your account, and that deletes the data.

c) The camera, for barcodes. When you scan a product’s package, the image is not stored and does not leave your phone: the only thing that travels is the barcode number.

d) The camera, for the meal photo. If you take a photo of your plate or choose one from your camera roll, that image does leave your phone: it is reduced in size on the phone and sent to our server, which sends it to Anthropic so that its artificial intelligence model can recognize the foods and estimate the grams and calories. The photo is not stored anywhere, neither on our server nor on Anthropic’s: it is analyzed and discarded. Nor is it used to train models. What is recorded is that you made a request —the date, your identifier (your account or your gym’s code), a random identifier the app creates on your phone, and the cost— to keep track of the spending and apply the limits: the meal photo is part of Pro, so without Pro there are none; with Pro, up to four a day and ninety a month (three a day and sixty a month in the countries where Pro costs less, which are worked out from the country your phone connects from, without storing it); and during the trial days, fifteen in total. Legal basis: performance of the contract (art. 6.1.b GDPR) and, as this is food data, your explicit consent (art. 9.2.a).

Two honest warnings about this. First: what the photo returns is an estimate made by a machine, not a measurement; it can be wrong and you should check the grams. Second: point only at the plate. If another person gets into the frame, you would be sending data about someone who hasn’t given permission, and you must not do that.

e) Apple Health and Health Connect. Only if you turn it on and give permission. The app reads your weight so you don’t have to enter it by hand and writes the calories you eat each day. If you turn on glucose, it reads the latest reading from your sensor to show it to you in Hoy (Today). That data stays on your phone: we don’t upload it to any server or share it with anyone. You can turn it off whenever you want from your phone’s settings.

f) If you go Pro. You pay through Apple (App Store) or Google Play, with your phone’s account: your card details are held by the store and we never see them. To know whether you have Pro active we use RevenueCat, which receives the purchase from the store (which plan, when it starts, when it renews or is canceled) together with your Reverfit identifier (your account’s, your gym’s code or, without either, a random one). Neither your name nor your email. The subscription is managed and canceled from your Apple or Google account settings. Legal basis: performance of the contract (art. 6.1.b GDPR).

3. What we DON’T do

• There is no advertising inside the app.
• There are no trackers or analytics tools. We don’t know which screens you look at or how long you spend on each one.
• We don’t sell or pass on your data to anyone, for advertising or for any other purpose.
• We don’t collect your location, your contacts or your messages.
• We don’t keep the photos the app analyzes and we have no access to your camera roll: only the image you choose travels, and it is discarded as soon as it is analyzed.
• We don’t use your data or your photos to train any artificial intelligence.
• We don’t make automated decisions that affect you legally.

4. Who it is shared with

With no one, except the companies strictly necessary for the app to work, which act as processors under contract:

• Supabase — hosting of the database and the account system. Your data is stored on servers located in the European Union (Frankfurt, Germany). It does not leave the European Economic Area.
• Open Food Facts — the public food database that is queried when you scan a barcode. It is sent only the barcode number: not your email, your identifier or any data about you. They cannot know who made the query.
• Vercel — where our server runs, the one that receives the meal photo and talks to the artificial intelligence. It does not store the image.
• Anthropic (United States) — the artificial intelligence model that looks at the meal photo, the sentence you type or the restaurant menu and returns the foods and their calories. It receives only that image or that text, without your name, your email or your identifier. It works as a processor, does not keep the content and does not use it to train its models. As it is outside the European Economic Area, the transfer relies on the European Commission’s standard contractual clauses.
• RevenueCat (United States) — keeps track of Pro subscriptions: it receives the purchase data and your identifier, never your card. Transfer covered by the standard contractual clauses.
• Resend (United States) — sends the account emails (welcome, password change) and, if you accept them, the news emails. It receives only your email address. Transfer covered by the standard contractual clauses.

Apple and Google charge the subscription as controllers of their own processing, under their own privacy policies: we only receive, through RevenueCat, whether the purchase is active.

In addition, if a court or a public authority ever legally required us to hand over information, we would have to comply. It has never happened.

5. How long we keep it

For as long as you keep your account open. When you delete your account, your data is deleted with it; it isn’t left “deactivated” anywhere. Deletion is immediate and cannot be undone: we can’t recover the data even if you ask us later.

Only what the law requires us to keep is kept, for the period set by tax regulations. Deleting your account does not cancel your subscription: that is done in the store (Apple or Google), which is who charges you.

6. How to delete your account

From the app itself: You → Your account → Delete my account and my data. You don’t have to write to anyone or wait for anyone to approve it. If you can’t get into the app, you’ll find the instructions and another way on the account deletion page.

7. Your rights

You can ask us to access your data, rectify it, erase it, restrict or object to its processing, and ask for portability (that we give it to you in a file you can take with you). You can also withdraw your consent at any time, without affecting what was done before.

Write to info@reverfit.com from your account’s email. We reply within one month at most. If you think we haven’t done things right, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Minimum age

The app is not intended for people under 16 and they must not use it. We process health data, and in that area we prefer to be strict. If we detect an account belonging to someone under that age, we will delete it.

9. Security

Everything that leaves your phone travels encrypted (HTTPS). Passwords are stored encrypted. Access to the data is restricted at database level so that each account can only see its own. No system is infallible, but if there were ever a breach that affected you, we would tell you.

10. Important health notice

Reverfit Diet is not a medical device and does not replace the advice of a doctor or a registered dietitian. The calories and targets it calculates are estimates based on general formulas. If you have an illness, are pregnant, are breastfeeding or are undergoing treatment, consult a professional before changing your diet.

11. Artificial intelligence

Three features of the app use artificial intelligence: the meal photo, the meal typed in a sentence and the restaurant menu. In all three, what you see on screen is an automatically generated estimate, marked as such, which you can correct before logging it. The final numbers of your day are calculated by the app with its own formulas, not by the machine.

There is also a “tip” that works with the artificial intelligence built into your own phone (Apple Intelligence or Gemini Nano): there, nothing leaves the phone, not even to our server.

None of these features makes decisions about you, does profiling or has legal effects. If an answer seems wrong or offensive to you, write to us at info@reverfit.com and we will review it.

12. Changes to this policy

If we change anything important, we will say so inside the app before it comes into force. The date at the top tells you which version you are reading.