Legal

Privacy Notice

Last updated: October 19, 2026

This is a translation provided for convenience. The Spanish version is the one that governs under Mexican law (LFPDPPP) in case of any discrepancy.

1. Identity and address of the data controller

BE REAL BE FIT, S.A. DE C.V. (hereinafter, "Be Real Be Fit," "we," or "the Controller"), with address at Calle Ingenieros Petroleros No. 14, Manzana 14, Lote 10, Colonia Nueva Rosita, Alcaldía Iztapalapa, Ciudad de México, C.P. 09420, is responsible for the processing of your personal data, in accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and other applicable law in Mexico.

2. What services this notice covers

This Privacy Notice covers both Be Real Be Fit services:

The website (berealbefit.com), where you get information, join the launch waitlist, create your account, and can subscribe.
The mobile app, where you view your routines, log your workouts, and keep your nutrition diary. On iPhone you can also subscribe from within the app.

Both share the same user account and the same database, which is why a single notice governs them. Below we distinguish what data is collected on each one.

3. Personal data we collect

3.1 On both services

Name. To identify you within the service.
Email address. To log you in, recover your password, and notify you about your account.
Password. Always stored encrypted (hashed). Never in plain text — not even we can read it.
Your Google or Apple account data. Only your name and email, if you choose to log in with those methods.

If you log in with Google or Apple, we do not access your contacts, calendar, or any other data from those accounts — only what's needed to create your profile. Apple, in addition, only shares your name the first time you authorize the app.

3.2 Only on the website

Pre-registration (waitlist). If you sign up before launch, we keep your name, your email and, if you give them to us, your phone or WhatsApp number and what you're interested in, plus the language of the page. We only use them to confirm your sign-up and let you know when we open. Pre-registering doesn't create an account; if you later sign up with the same email, we link it to your account. You can ask us to delete it at any time (section 9).
Payment data. If you subscribe on the website, the charge is processed by Stripe. Your card details are sent directly to Stripe: we never see or store them. We only keep a customer identifier and your subscription status.
Currency preference. A functional cookie (breal_currency) that remembers whether you see prices in pesos or dollars. It is not used for advertising or tracking.
Visit statistics. We use Cloudflare Web Analytics, which measures traffic in aggregate without cookies, without fingerprinting, and without tracking you across sites. It cannot identify you.
Meta advertising cookies. The site's public pages use the Meta Pixel (Facebook and Instagram), which stores a cookie (_fbp) and sends Meta the pages you visit, your IP address and details about your browser, plus whether you pre-registered, created an account or bought a plan (with the plan and its price). It lets us measure whether our ads work and show them to people who already visited the site. We do not send it your name, email or phone number, and it never runs in your account, the staff portal or the app, so it never receives your health data. You can turn it off at any time (section 11).

3.3 Only in the mobile app

The data in this section is considered sensitive personal data under the LFPDPPP, as it involves health and physical condition information. See section 4 on your express consent.

Weight, height, and body measurements. To calculate your goals, estimate calories, and chart your progress.
Activity level and experience. To suggest routines that fit your condition.
Injuries you enter in your profile. To suggest routines and exercise alternatives that take them into account.
Workout logs. Exercises, sets, reps, and weight lifted, to keep your history.
Diet and nutrition information. Food logged, calories, and macronutrients from your diary.
Profile photo. Optional. Only used to personalize your profile.
Photos of your meals. Optional. Only if you use the meal photo: they are analyzed to identify the foods and we don't keep them.

The app requests camera access to scan the barcode of the food items you log and, if you use the meal photo, to take a photo of your meal. When you scan a barcode we do not take or store photographs. Reminders are local notifications scheduled on your own device and are never sent to our servers.

Artificial intelligence features. The meal photo and "Swap exercise" run on AI from Anthropic, a third-party provider, and the app asks for your permission before you use them for the first time. For the meal photo we send it the photo and, if you correct the result, what you type; for "Swap exercise", the exercise, the reason, your note and the injuries in your profile. We don't keep the photos. We do keep your corrections, without the photo, to improve the feature. If you don't use these features, nothing is sent.

In-app purchases (iPhone). If you subscribe from the app, the charge is made by Apple to your Apple ID, through the App Store. We never see or store your card details. From Apple we only receive what's needed to give you access: the purchase identifier, the plan, its validity dates, whether it will renew, and whether it was refunded. To know the purchase is yours, the app gives Apple a random identifier of your account that contains no personal data.

3.4 What we don't collect

We do not sell or rent your data. For advertising, we only share with Meta the browsing data described in section 3.2, and you can stop it at any time (section 11).
We do not show advertising on the website or in the app.
The mobile app includes no third-party analytics or tracking tool whatsoever.
We do not collect your geographic location.

4. Sensitive data and express consent

The health and physical condition information you enter in the app (weight, body measurements, injuries, diet, and workouts) constitutes sensitive personal data. Under article 9 of the LFPDPPP, its processing requires your express consent, which you give when you register and when you voluntarily enter that information. Before your injuries are sent to the AI provider (section 3.3), the app also asks for a separate permission.

This data is processed exclusively to provide you the service described in section 5. You can withdraw your consent at any time (section 11).

5. Purposes of the processing

Primary purposes (necessary for the service):

Create and manage your account, and verify your access to the service.
If you pre-registered, confirm your sign-up and let you know when the service launches.
Show you your routines and log your workouts.
Calculate your nutrition goals and track your progress.
If you use the AI features, identify the foods in the photo of your meal and suggest exercise alternatives.
Allow the coach or nutritionist assigned to you to follow up on your training and your meal plan.
Process your subscription payment on the website, or verify with Apple the one you bought in the app, and manage its term.
Send you reminders within the app, which you can turn off whenever you want.
Handle your support requests and comply with legal obligations.

Secondary purpose (not needed for the service): measuring how well our Facebook and Instagram ads work and showing them to people who already visited the website (section 3.2). You can opt out by turning off Meta cookies (section 11), and that does not affect the service.

Beyond that, we do not use your data for marketing, advertising, or sales prospecting unless you give us separate consent to do so.

6. Third parties involved in the processing

To operate the service we rely on providers that act as processors: they may only handle your data under our instructions and for the purposes of this notice, never for their own purposes.

Provider	Purpose	What it processes
Cloud infrastructure providers	Hosting the service, database, and file storage	Your account data and your activity
Payment processor (Stripe)	Subscription billing, only on the website	Payment data, which is sent directly to Stripe and we never see or store
Anthropic (artificial intelligence)	Analyzing the photo of your meal and suggesting another exercise, only when you use those features	The photo, what you type to correct the result and, in "Swap exercise", the exercise, the reason, your note and your injuries. We don't keep the photos.
Public food catalogs (Open Food Facts, USDA, CONABIO)	Looking up nutrition information	We query these catalogs using the barcode or the food's name. We never send them any personal data of yours.

In-app purchases are processed by Apple, which acts as the seller on the App Store and handles your payment data under its own privacy policy: it is not a processor of ours. We only check the status of your subscription with Apple (section 3.3).

Meta Platforms receives the browsing data described in section 3.2. Meta is not a processor of ours: it also handles that data under its own privacy policy, on servers outside Mexico. If you don't agree with that transfer, you can turn it off at any time (section 11).

Some of these providers store information on servers outside Mexico. By using the service you consent to that transfer, carried out solely for the purposes described in this notice. If you want to know the specific identity of the providers involved in a given case, you may request it at the email in section 9.

Beyond the above, we do not transfer your personal data to third parties without your consent, except in the cases provided for in article 37 of the LFPDPPP (for example, when required by a competent authority).

7. How long we keep your data

We keep your personal data for as long as your account remains active, since it is necessary to provide the service and for you to be able to view your own history of workouts, measurements, and nutrition.

When you delete your account, your personal data and history are permanently erased. We may only keep, for as long as the law requires, the minimum information we're obligated to retain — for example, billing records required by tax law — which is kept isolated and is not used for any other purpose.

8. Security measures

Passwords are stored encrypted (hashed), never in plain text.
All communication between your devices and our servers travels encrypted (HTTPS/TLS).
Access to the database is restricted and protected with authentication.
Sessions use tokens with expiration.

9. Your data protection rights

Under Mexican law, you have the right to:

Access the personal data we hold about you.
Rectify data that is inaccurate or incomplete.
Cancel data you believe we no longer need.
Object to our using it for specific purposes.

To exercise these rights, write to us at privacidad@berealbefit.com stating your name, the right you wish to exercise, and attaching an official ID. We will respond within a maximum of 20 business days, as required by the LFPDPPP.

To delete your account immediately, you don't need to write to us: you can do it yourself from the app, under Profile → Permanently delete my account. This permanently removes your account and its associated data.

10. How to limit the use or disclosure of your data

Beyond the rights above, within the service you can at any time:

Stop sharing your progress with a professional: if you no longer want a coach or nutritionist to see your information, request it at the email below and we'll disconnect that relationship.
Turn off reminders from your device's settings or from your profile inside the app.
Skip any data you don't want to log: your profile photo, and each body measurement, food item, or workout are optional; the service works without capturing them.
Delete your account at any time from the app, with no need to contact us.

11. Withdrawing your consent

You can withdraw the consent you gave us at any time, at the same email in section 9 or by deleting your account from the app. Note that, in some cases, withdrawing consent means we can no longer keep providing you the service.

You don't need to email us to stop sharing your browsing with Meta: turn off its cookies with this button. The choice is saved in this browser, so on another device, or if you clear the site's data, you'll need to do it again. You can also block them in your browser settings.

On in this browser.

12. Minors

The service is intended for people over 18. If we detect — or are informed — that a minor provided us personal data without the consent of their parent or guardian, we will delete it.

13. Changes to this notice

We may update this Privacy Notice. Any change will be published on this same page, updating the date in the header. If the change is substantial, we will notify you by email.

14. Contact

If you have questions about this notice or about how we process your personal data, write to us at privacidad@berealbefit.com .