Bite Beat

Privacy Policy

Effective date: 28 July 2026
Last updated: 29 July 2026

1. Who we are

BiteBeat is operated by Jan Kosara (trading as BiteBeat), Novackeho 8, Bratislava, Slovak Republic 841 04.

Email: yanchi(at)yanchi.space

For the purposes of applicable data protection law (including the EU General Data Protection Regulation, “GDPR”), Jan Kosara is the data controller responsible for your personal data.

BiteBeat is a web-based application that helps you track meals, eating urges, and patterns between meals. It is not a medical, nutritional, or mental health service.

2. Scope

This Privacy Policy explains how we collect, use, store, and share personal data when you visit or use BiteBeat at bitebeat.app and related pages, create an account, log meals and urges, subscribe to Premium, or contact us for support.

By using BiteBeat, you acknowledge this Privacy Policy. If you do not agree, please do not use the service.

3. Personal data we collect

3.1 Account and profile data

When you register and manage your account, we collect your email address (for account creation, sign-in, password reset, and service communications), password (stored in hashed form, not as plain text), an internal user identifier, an optional display name, and your account creation date.

3.2 Data you enter in the app

Meal entries: timestamp of when you ate or logged a meal, and an optional short note (up to 500 characters).

Urge entries: timestamp of when you felt the urge, an optional short note (up to 500 characters), and optional feeling tags from a fixed list: Hunger, Anxious, Bored, Stressed, Lonely, Tired, Sad, Angry, Happy.

Goals and preferences (Premium): optional daily goals you set, such as target longest meal gap, minimum average gap between meals, and maximum meals per day.

We also compute derived statistics from your logs (for example meal counts, urge counts, average gaps between meals, and inferred fasting-related durations based on time between logged meals). These are calculated from your entries, not collected from third parties.

3.3 Subscription and billing data

If you subscribe to Premium, we receive and store billing-related metadata, such as subscription status, current billing period end date, whether cancellation is scheduled at period end, and payment provider customer and subscription identifiers. We do not store your full payment card details. Payment card information is entered and processed on our payment provider’s secure pages.

3.4 Support and communications

If you send a bug report or contact us, we may receive your message, your email address, and your user identifier. We may send transactional emails about your account and subscription. We do not use your data for advertising based on what we currently operate.

3.5 Technical data

When you use BiteBeat, limited technical data may be processed automatically, such as authentication session data (via cookies or similar technologies needed to keep you signed in) and basic server and security logs (for example IP address, browser type, timestamps, and error logs) for security, abuse prevention, and troubleshooting.

On the marketing website, Google Analytics may process technical usage data such as page views, approximate location derived from IP address, device/browser information, and referral information.

We do not intentionally collect precise geolocation, photos, contacts, or health records from external sources.

4. How we use your data

We use personal data to:

  • provide the service — store and display your logs, calculate statistics, and show free or Premium features according to your plan;
  • manage your account — registration, authentication, password reset, profile updates, and account deletion;
  • process subscriptions — billing, renewals, cancellations, and payment-related communications;
  • communicate with you — transactional emails and responses to support requests;
  • improve and secure the service — debugging, fraud prevention, rate limiting, and maintaining reliability;
  • measure and improve the marketing website — using Google Analytics on bitebeat.app;
  • comply with law where required by applicable legal obligations.

We do not sell your personal data.

If you are in the EU/EEA or UK, we rely on the following legal bases:

  • Performance of a contract — providing the service you request;
  • Legitimate interests — account security, abuse prevention, service improvement, and website analytics;
  • Legal obligation and/or contract — billing and tax compliance;
  • Contract and/or legitimate interests — optional display name and voluntary log content.

Where consent is required by law, we will ask for it separately.

6. Who we share data with

We share personal data only with service providers that help us run BiteBeat, under contracts that require them to protect your data. Categories include hosting and infrastructure, authentication and database services, payment processing, email delivery providers for transactional emails, and website analytics (Google Analytics on the marketing site).

These providers may process data in the EU and/or other countries. Where data is transferred outside the EU/EEA, we use appropriate safeguards (such as Standard Contractual Clauses) where required by law.

We may also disclose data if required by law, court order, or to protect rights, safety, and security.

7. International transfers

Your data may be processed in Slovakia and in other countries where our service providers operate. We take steps to ensure an adequate level of protection consistent with applicable law.

8. Cookies and similar technologies

BiteBeat uses essential cookies (or similar technologies) needed for keeping you signed in, securing your session, and operating core functionality.

On the marketing website (bitebeat.app), we use Google Analytics (gtag.js) to measure traffic and how pages are used. Google may set cookies or use similar technologies for this purpose. We do not use advertising cookies.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using signed-in features. Disabling or blocking analytics cookies may limit our ability to measure site usage.

9. Data retention

Account data, logs, and goals are retained until you delete your account or delete individual entries. When you delete your account, personal data tied to the account is deleted or anonymized when deletion succeeds; some copies may remain briefly in backups.

Billing records are retained as required for accounting, tax, and legal obligations. Support messages are retained as needed to handle your request and for a reasonable period afterward. Security logs are retained for a limited period for security and troubleshooting.

10. Your rights

If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, object to processing, and receive your data in a structured format where applicable. Where processing is based on consent, you may withdraw consent.

To exercise your rights, email yanchi(at)yanchi.space. We may need to verify your identity.

You may delete your account in the app (Profile → Delete account), which removes your profile and logs and cancels an active subscription.

You have the right to lodge a complaint with a supervisory authority. In Slovakia: Úrad na ochranu osobných údajov Slovenskej republiky (ÚOOÚ), dataprotection.gov.sk.

11. Security

We use reasonable technical and organizational measures to protect personal data, including access controls so users can only access their own records, encrypted connections (HTTPS), and secure handling of payment data via our payment provider.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Children

BiteBeat is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact yanchi(at)yanchi.space and we will take appropriate steps to delete it.

13. Beta service

BiteBeat is currently offered in beta. Features, data handling practices, and availability may change as the service develops. Material changes to this Privacy Policy will be reflected by updating the “Last updated” date and, where required, notifying you.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available at bitebeat.app/privacy. Continued use after changes means you accept the updated policy, subject to your rights under applicable law.

15. Contact

Questions about this Privacy Policy or your personal data:

Jan Kosara
Email: yanchi(at)yanchi.space
Novackeho 8, Bratislava, Slovak Republic 841 04