Health data
Your body data is not ad inventory.
Last updated July 22, 2026
The short version
BFF uses health and wellness information you choose to provide to build and adapt your fitness, meal, and coaching experience. We do not sell consumer health data or use it for targeted advertising. We disclose it only to processors that help provide, secure, and improve the service, or when you direct a connection such as a wearable integration.
Consumer health data we collect
Depending on what you choose to use, BFF may collect: • Fitness goals, experience, equipment, exercise plans, workout history, strength records, mobility information, injuries, and exercise-readiness answers • Age, height, weight, body measurements, progress photos, activity, sleep, water, mood, energy, and lifestyle patterns • Food preferences, allergies, dietary restrictions, meal selections, food logs, and nutrition information • Cycle, pregnancy, postpartum, medication, supplement, chronic-condition, symptom, or other health information you voluntarily disclose • Health and activity information from a wearable or connected service you choose to connect • Health-related details in chats, photos, check-ins, and feedback, plus inferences BFF makes to personalize the service
Where it comes from
We receive consumer health data directly from you, from your use of BFF, from devices or services you choose to connect, and from calculations or inferences needed to provide requested features. BFF does not buy consumer health data from data brokers.
Why we collect and use it
We use consumer health data to provide the service you request. That includes building and adapting workouts and meal plans, filtering allergens and preferences, tracking progress, remembering details you asked Rosie to use, connecting wearable data, responding to support requests, preventing fraud and abuse, securing the service, debugging errors, and improving feature reliability. We will not collect or use a new category of consumer health data for a materially different purpose without updating this policy and obtaining any consent required by law.
Processors and disclosures
BFF may disclose consumer health data to processors only as needed for the service you request: • Supabase for database storage, authentication, and file storage • Anthropic for AI processing used to provide Rosie and other requested AI features • Vercel for application hosting and infrastructure • Sentry for error monitoring and security diagnostics, with configured data scrubbing • A wearable or connected-service provider when you choose that connection Stripe processes billing data and Resend processes email delivery data. Optional PostHog, Meta, and TikTok tools do not load in the member app or on health-data pages. We do not intentionally send body measurements, workout logs, meal logs, health-screen answers, or health-chat content to Stripe, Resend, PostHog, Meta, or TikTok. BFF has no affiliate that receives consumer health data. We do not sell consumer health data, use it for targeted advertising, or use health-care-facility geofences.
Your health-data rights
You may ask BFF to confirm whether we collect, share, or sell your consumer health data; access that data; receive a list of third parties or affiliates that received it; withdraw consent from future collection or sharing; or delete it. BFF does not sell consumer health data. For an export or deletion, use the data export or Delete my account control in your profile, or email hello@rosiethebffgirl.com. To withdraw consent, email hello@rosiethebffgirl.com with "Withdraw health-data consent" in the subject line. We may need to verify that the request belongs to you. We respond without undue delay and within the time required by applicable law. Withdrawing consent may prevent BFF from providing personalized health and fitness features. Deletion requests are also sent to processors as required by law. Backup deletion may take up to the period allowed by applicable law. If we deny a request, email hello@rosiethebffgirl.com with "Health data appeal" in the subject line. We will review the appeal and explain the result. Washington consumers may also contact the Washington State Attorney General.
Security and health breaches
BFF limits access to consumer health data to people and processors that need it for the purposes described above and uses technical and organizational safeguards appropriate to the data. No system is perfect. BFF is not covered by HIPAA. If an unauthorized acquisition or disclosure triggers the Federal Trade Commission Health Breach Notification Rule or another applicable breach law, BFF will provide the notices required by that law.
Contact
Questions, requests, consent withdrawals, appeals, or security concerns about consumer health data can be sent to hello@rosiethebffgirl.com. BFF, 1154 Orchard Ave SE, Grand Rapids, MI 49506. Last updated: July 22, 2026.