Privacy Policy

Data Controller

EvolveTech LLC operates the BestNext mobile application. For privacy questions, contact evolvetech86@gmail.com.

Guest Mode

BestNext can be used without creating an account. In guest mode, all data (profile, missions, scores, chat history) is stored locally on your device only and is never synced to our servers. No email address or personal identifier is collected from guest users. Creating an account is only required to sync your data across devices, restore progress after reinstalling, or manage a subscription.

What We Collect

Account data (accounts only): Your email address, collected via Supabase Authentication when you create an account or sign in with Google or Apple.

Profile data: Name, age, gender, height, weight, fitness goals, fitness level, activity level, dietary preferences, lifestyle, life focus areas, your personal motivation statement ("WHY"), and life pillar snapshot data (your current state and goals per life pillar — e.g. Mind: struggling · goals: reduce anxiety, better sleep). This is stored locally on your device and, for account holders, synced to Supabase so your data is never lost if you reinstall or switch devices.

Profile photo (optional): If you choose to set a profile picture, your selected photo is compressed and uploaded to Supabase Storage. Photo library access is requested only when you initiate this action — for example, by tapping the avatar picker. BestNext does not access your photo library at any other time.

Sensitive health data: Menstrual cycle information (cycle length, last period date) — collected only with your explicit opt-in during onboarding. Stored locally and, for account holders, included in your synced profile protected by Supabase row-level security.

Progress data: Pillar scores, habit logs (last 90 days), and mission history (last 2 years) — synced to Supabase for account holders only.

AI Coach conversations: Messages you send to the AI Coach are processed in real time to generate responses. See the AI & Third Parties section below for exactly what is sent. Conversations are stored locally on your device only and are never synced to our servers.

Chat history: Stored locally on your device only. Never synced to our servers.

Why We Collect It

To authenticate your account and identify you across sessions (account holders only). To personalise your AI coaching, daily missions, workout plans, and meal plans. To provide cycle-aware coaching (only if you opt in). To store and display your profile photo. We do not use your data for advertising or sell it to any third party.

Legal Basis (GDPR)

We process your data based on your explicit consent (given before any data collection begins) and the contract to provide the BestNext service. You may withdraw consent at any time by deleting your account.

AI & Third Parties

What is sent to the AI provider: When you send a message to the AI Coach, the following information is transmitted to our backend and then to the AI provider to generate a response:

• Your typed message
• Your display name, primary goals, and life focus areas
• Your pillar scores (Health, Mind, Finance, Career, Relations) and current streak count
• General physical stats you provided (age, height, weight, fitness level, activity level, fitness goals, dietary preferences) — only if you entered them
• Your personal motivation statement ("WHY") — only if you entered one
• Your life pillar snapshot data — current state and goals per pillar (e.g. "Finance: getting by · goals: save consistently, start investing") — only if you completed the life snapshot step
• Up to 10 recent messages from your current chat session for conversational context
• If opted in: your current menstrual cycle phase (not the raw dates)

What is NOT sent to the AI provider: Your Apple ID password, payment card details, contacts, photo library, precise location, or any data unrelated to your coaching session.

Groq Inc.: Primary AI provider. Processes AI coaching messages in real time via our Supabase backend. Messages are not stored or used for model training by Groq. See groq.com/privacy.

Anthropic PBC: Fallback AI provider used only if Groq is unavailable. Same data-handling guarantees apply. See anthropic.com/privacy.

Supabase: Provides authentication and database storage. Your email (for account holders) and synced profile data are stored in Supabase's infrastructure. See supabase.com/privacy.

Apple / Google: Handle in-app purchase and subscription transactions. We never receive your payment card details.

RevenueCat: Manages in-app purchase entitlements. Receives a pseudonymous app user ID to track subscription status. See revenuecat.com/privacy.

No other third parties receive your personal data.

Sensitive Health Data

Menstrual cycle data is classified as special category health data under GDPR. It is stored locally on your device. For account holders, it is synced to Supabase (protected by row-level security). It is only included in real-time AI coaching prompts sent to Groq/Anthropic, which do not retain this data. You can opt out at any time in Profile → Edit Profile.

Photo Library Access

BestNext requests access to your photo library only when you choose to set or update your profile picture. For example, when you tap the avatar picker in onboarding or in Profile, you will be asked to select a photo from your library. The selected photo is compressed and uploaded to Supabase Storage as your profile avatar. BestNext does not scan, read, or access any other photos in your library.

Data Storage & Retention

Most data (missions, scores, habits, chat history) is stored locally on your device using AsyncStorage. For account holders, profile and progress data is synced to Supabase and retained until you delete your account. Profile photos are stored in Supabase Storage. Contact evolvetech86@gmail.com to request full deletion. Uninstalling the app clears all local data.

Your Rights

You have the right to access, correct, erase, restrict processing of, and port your data. Email evolvetech86@gmail.com to exercise any right. We respond within 30 days. You may also lodge a complaint with your local data protection authority.

Children

BestNext is not directed at anyone under 16. We do not knowingly collect data from children. Contact us immediately if you believe a child has an account.

Changes

We may update this policy from time to time. We will notify you of material changes in-app at least 14 days before they take effect.