Bimo Privacy Policy

Last updated: October 27, 2026

Bimo is a food and calorie logging app for iPhone with an AI coach. This policy explains what personal data we collect in the app and on getbimo.app, why we use it, who we share it with, and your rights.

1. Who we are

Bimo is run by Sebastian‑Valentin Poenar, who is responsible for your personal data. You can contact us at [email protected].

2. Who can use Bimo

Bimo is for people aged 16 and over. If we learn that a younger person has an account, we delete the account and its data.

Bimo is not a medical service and does not replace advice from a doctor or dietitian.

3. What data we collect

Data you give us. Your Sign in with Apple details (Apple user ID, email address or Apple’s relay address, and name); your body profile and goals, such as sex, year of birth, height, weight and activity level; the meals, weigh‑ins, favorites and reminders you log; the photos and voice recordings you add; and your chat with the coach.

Data we create. Notes the coach keeps about your preferences, a record of your consent, crash reports, usage and cost records, and technical data such as your app version and a device identifier for notifications.

Sign in with Apple is needed to create an account. Profile details, photos and voice are optional; without the profile details, Bimo uses a default calorie target. Bimo does not read Apple Health, does not collect your location, contacts or advertising identifier, and does not track you across other apps or websites.

4. Health data

Your weight, height, food intake, meal photos and chat about eating are health data under the General Data Protection Regulation (GDPR). We process them only with your explicit consent, which you give in the app before any of this data is stored or sent to our AI provider.

You can withdraw your consent at any time by deleting your account or by writing to us. Withdrawal does not affect processing that already happened. Because Bimo cannot log your meals or coach you without your food intake and chat, withdrawing consent means deleting your account.

We never use your health data for advertising or marketing.

5. Why we use your data

Purpose	Legal basis
Provide your account, diary, goals and history	Contract (GDPR Art. 6(1)⁠(b)) and, for health data, your explicit consent (Art. 9(2)⁠(a))
Estimate your meals and coach you, including summaries, reminders and check‑ins	Contract and explicit consent
Keep the app working, fix bugs and prevent abuse	Our legitimate interest in a working, safe service (Art. 6(1)⁠(f))
Control our AI costs	Our legitimate interest in protecting the service and its costs
Answer your questions and run our website	Our legitimate interest in answering you and running the website
Keep a record of your consent and handle your privacy requests	Legal obligation (Art. 6(1)⁠(c))

6. The AI coach

The coach is an AI system, not a person. To answer you or estimate a meal, Bimo sends the data the task needs, such as your message, profile, recent meals and any photo or recording you add, to our AI provider in the European Economic Area (EEA). Voice recordings are turned into text this way, and our servers do not keep them. Our AI provider does not keep this data and is not allowed to use it to train AI models. We do not use your data to train AI models either.

The coach keeps notes about what you tell it, such as your preferences and usual foods, to personalize your coaching. You can see these notes in the You tab and ask the coach to forget any of them.

The coach makes no decision about you with legal or similarly significant effects. Its estimates and suggestions are yours to change or delete.

We share your data only with service providers that help us run Bimo. Each one works under a contract with us that requires it to protect your data at least as well as this policy and Apple’s App Review Guidelines require. We do not sell your data or use it for advertising.

An AI provider in the EEA and the AI model hosts it uses there, for meal estimates and coaching.
Hosting, database and storage providers in the European Union (EU).
A crash reporting provider in the EU.
Providers in the United States that deliver app updates and notifications.
Providers in the United States that host our website and handle our email.
A public food database in the EU, which receives only the barcode numbers you scan.
Apple, for Sign in with Apple and the App Store, under Apple’s own privacy policy.

You can ask us for the names of these providers at any time.

8. Where your data is processed

Your data is stored in the EU, and all AI processing happens in the EEA. Our database provider may access data from the United States or Singapore under the European Commission’s Standard Contractual Clauses. Our app update, notification, website, email and crash reporting providers receive or may access data in the United States under the EU‑US Data Privacy Framework. You can ask us for a copy of these safeguards.

9. How long we keep your data

Your account and its content: until you delete the item or your account.
Items you delete in the app: up to 30 days, so that you can undo, then erased.
Photos: about 30 days after nothing in the app uses them.
Notes you ask the coach to forget: the text is erased after 30 days. Information that stops the coach from learning the same fact again is kept until you delete your account, or sooner if you ask us. We use it only for this purpose, under the contract and your explicit consent.
Consent, usage and cost records: until you delete your account.
Backups: 7 days. Crash reports: up to 90 days. Server logs: up to 30 days.
Emails you send us: 2 years after we answer a privacy request, and 1 year after we close any other request.

10. Your rights

You have the right to access your data and get a copy, to correct it, to erase it, to restrict how we use it, to receive the data you gave us in a machine‑readable format and have it sent to another provider where technically feasible, and to withdraw your consent at any time.

Your right to object. You can object, for reasons related to your situation, to the processing we base on our legitimate interests. We then stop unless we have compelling grounds that override your rights, or need the data for legal claims.

How to use your rights. In the app you can correct your profile, goals, meals and weights, ask the coach to forget a note, and delete your account. For everything else, write to [email protected]. We answer within one month, free of charge, and may ask you to confirm that the account is yours.

Complaints. You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (https://www.autoriteitpersoonsgegevens.nl), or to the authority in the EU country where you live or work.

11. Deleting your account

Open the You tab, tap “Delete account” and confirm. We erase your account, diary, chat, photos and notes at once. Backups, crash reports, server logs and emails you sent us are kept only as section 9 describes. Signing out does not delete your account.

12. Your device and our website

Bimo keeps your sign‑in session and your settings on your iPhone. The app asks your permission before it uses the camera, your photos, the microphone or notifications. You can change these in iOS Settings.

Our website sets no cookies and runs no analytics. It stores only your language choice in your browser. Our website host processes your IP address to deliver the site, and we keep no logs of visits.

13. Security

Your data is encrypted when it travels between your phone, our servers and our providers, and our database host encrypts the data it stores. If a breach affects your data, we inform you and the Autoriteit Persoonsgegevens as the law requires.

14. Changes to this policy

We may update this policy. When we change what Bimo does with your data, we tell you in the app before the change applies, and ask for your consent again where the law requires it.

15. Contact us

Sebastian‑Valentin Poenar [email protected]