Privacy Policy

Bene is operated by Pour Global Ltd (trading as “Bene”), a company registered in England and Wales, company number 15531004, with its registered office at 5 Canon Court, Institute Street, Bolton, England, BL1 1PZ. Pour Global Ltd is the data controller for the personal data described in this policy.

You can contact us about anything in this policy at support@trybene.com.

Account information.When you create an account we collect your name and email address, plus the credentials of the sign-in method you choose: an email and password (stored in hashed form by our authentication provider, never readable by us), or your Apple or Google sign-in identifier (with Google, this includes your Google profile picture). If you use Apple's “Hide My Email”, we only ever see the private relay address. If you add a profile photo in the app, it is stored with your profile. Each account is identified internally by a random user ID.

Health and fitness data you log. This is the core of the app and includes: workouts (exercises, sets, weights, reps, durations, and notes), workout routines, your weekly training schedule and planned sessions, body-weight entries and your weight goal, nutrition logs (foods, portions, calories, macronutrients, and when you ate), the foods you have saved or used before, your calorie and macronutrient targets (including targets for individual days), habits and habit completions, and the profile details you choose to provide (date of birth, biological sex, height, activity level, and goals). Under UK data protection law, health-related data is “special category” data and we treat it accordingly — see section 5.

Apple Health (HealthKit) data. If you explicitly connect Apple Health, Bene reads your completed workouts (activity type, duration, heart rate, energy burned, distance, and routes where available) to show them alongside your logged data. Bene only reads from Apple Health; it never writes to it. Your Apple Health workouts are kept on your device and are not copied to our servers, with these limited exceptions:

• the highest heart rate recorded across your workouts is saved with your profile, so the app can show heart-rate zones;
• when a workout from Apple Health completes a session you planned, that plan is marked as done (the plan is stored, not the workout);
• if you use the coach (section 4), summaries of your recent Apple Health workouts — their dates, activity types, durations, average and maximum heart rates, energy burned, distances, the device or app each came from (for example “Apple Watch” or “Garmin Connect”), and any energy rating you gave the workout — are sent to our AI provider to generate coach messages, and coach messages that mention them are saved in your conversation history.

Workout route and location data is never transmitted. We never use Apple Health data for advertising or marketing, never disclose it to third parties for their own purposes, and never sell it. You can disconnect Apple Health at any time in the app or in iOS Settings.

Photos. You can take a photo in the app or choose one with the iPhone photo picker. When you use the photo picker, Bene only receives the photo you choose — it never has access to the rest of your photo library.

• Meal scan: your meal photo is sent to our AI provider to estimate its nutrition (section 4). A small, compressed copy is saved with that meal so you can see it in your day. You can also add a photo to a meal yourself, which is stored the same way. You can remove or replace a meal photo at any time, and it is deleted when you delete the meal or your account.
• Food label scan: your photo of a nutrition label is sent to our AI provider to read it. The photo itself is not stored — only the nutrition details it finds, saved as a food in your list.

Coach conversations. Messages you exchange with the in-app coach are saved to your account, so they are still there on a new phone or after reinstalling the app. Messages older than 30 days are deleted automatically (the clean-up runs when you use the app), and “Clear conversation” deletes the whole conversation immediately. To generate each reply, your recent messages and a summary of your logged data are sent to our AI provider (section 4).

Things the coach remembers.From your conversations, the coach keeps a short list of lasting facts you have told it — for example an old injury or when you like to train — so it doesn't have to ask again. Picking these out involves sending your recent messages to our AI provider. The list is saved to your account, and you can see and delete each item in Profile → Coach → What Coach remembers.

Notifications.Meal reminders and most other reminders are scheduled on your device. If you allow notifications, the app also saves a notification token for your device, your time zone, and the times and names of your upcoming planned sessions (or the times you usually train) to our backend, so we can send your pre-session check-in even when the app is closed. At the time of that check-in, our backend reads your nutrition targets, weight goal and that day's nutrition totals from your account and sends them to our AI provider to write the message.

Feedback you send us. If you use “Send feedback” in the app, we receive your message, the reply-to email address you give, any screenshot you choose to attach, and — only if you leave it switched on — your app version, iOS version, and device model. Your user ID is included so we can look into your report. The message goes to our support inbox, which is hosted on Google Workspace.

Usage and diagnostic data.We collect aggregate usage events (for example, “a workout was saved”) and crash reports so we can understand what's working and fix what isn't. This data is not used for advertising and is not combined with your logged health data. Bene contains no advertising identifiers (IDFA) and does not track you across other companies' apps or websites.

Device integrity tokens. To protect our backend from abuse, requests from the app carry an Apple App Attest token that proves they come from a genuine copy of Bene. These tokens identify the app installation, not you.

• To provide the service — recording your logs, showing your history and trends, reconciling your plans against what you actually did, and sending you reminders and check-ins.
• To back up and restore your data — your logged data is synced to our cloud database so it survives a lost phone or reinstall and is there when you sign in again.
• To power the AI features you choose to use — the coach answers your questions, checks in around your plans, and remembers what you tell it; meal scan and food label scan read nutrition from a photo. All of this is described in section 4.
• To improve Bene — using aggregate usage statistics that are not tied to your identity.
• To keep the service reliable and secure — crash diagnostics, abuse prevention, and rate limiting.
• To manage your account and subscription — including the free trial and purchases made through Apple.
• To respond to you — when you email us or send feedback from the app.

We do not use your data for advertising, sell it, or share it with data brokers. We do not make automated decisions about you that have legal or similarly significant effects. The coach may suggest a change to your calorie targets, but nothing changes unless you choose to apply it.

Bene's coach, meal scan and food label scan are powered by Anthropic, PBC, a US-based AI provider acting as our processor (sub-processor). This is the one place your health-related data is sent to an AI provider, so here is exactly how it works.

The coach is part of Bene, not an optional add-on. You give your explicit consent to it when you create your account: the sign-up screen asks you to agree to our Terms and this policy, which cover the coach's use of your data as described in this section. If you created your account before 21 September 2026, the app asks you to agree once before you continue.

• Coach replies:when you send a message, your recent conversation and a compact summary of your logged data are sent to Anthropic to compose the reply. The summary includes your first name and profile basics (age, sex, height, activity level, and goals), recent workouts and personal records, your recent Apple Health workout summaries if Apple Health is connected (see section 2 — never location routes), recent daily nutrition totals, when you ate today and each meal's calories, protein and carbohydrate, your targets, your weight trend and goal, your habits, your upcoming planned sessions, monthly summaries of your history, and the things the coach remembers about you.
• Coach check-ins:the coach also writes messages on its own — a greeting when you first open it, a short daily brief, notes after you log, a check-in before planned sessions, and a weekly review — using the same kind of summary. Pre-session check-ins sent as push notifications are written by our backend from your targets and that day's nutrition totals (section 2).
• Remembering: your recent messages are sent to Anthropic to pick out lasting facts worth remembering (section 2).
• Meal scan: your meal photo is sent to Anthropic to produce an editable nutrition estimate.
• Food label scan: your photo of a nutrition label is sent to Anthropic to read the nutrition information.
• Meal and label photos are sent only when you use those scans.
• Anthropic processes this data solely to generate the response. Under its commercial API terms, Anthropic does not use this data to train its AI models and does not sell it; it may retain it for a limited period for trust and safety monitoring, after which it is deleted.
• Because the coach is part of the app, you withdraw your consent by deleting your account (Profile → Account settings → Delete account), which stops all processing and deletes your data. You can also clear your conversation and delete the things the coach remembers whenever you like, and turning off notifications for Bene in iOS Settings stops push check-ins.

AI outputs are estimates and conversational guidance — not medical, dietary, or treatment advice. Meal scan and food label results are always shown for your review and editing before anything is logged.

We rely on the following legal bases:

• Performance of a contract(Article 6(1)(b)) — operating your account, storing and syncing your logs, and providing the app's features.
• Your explicit consent(Articles 6(1)(a) and 9(2)(a)) — given when you create your account, for processing the health-related data you choose to log and for the coach's use of it, including sending it to our AI provider (section 4); and, when you choose to use them, for reading Apple Health data and for meal scan and food label scan. You can withdraw consent at any time by deleting your account (section 9).
• Legitimate interests (Article 6(1)(f)) — keeping the service secure, preventing abuse, and understanding aggregate usage so we can improve the product. We balance these interests against your rights, and none of this processing involves advertising or profiling.
• Legal obligation (Article 6(1)(c)) — where we must retain or disclose information to comply with the law.

We use a small number of providers to run Bene. Each processes data only on our instructions:

• Google Cloud / Firebase(Google Ireland Ltd) — authentication (including Sign in with Google if you choose it), our cloud database and backend functions, push notification delivery (Firebase Cloud Messaging), aggregate analytics, crash reporting, and our email (Google Workspace), where support messages and in-app feedback arrive. Your synced data is stored in Firebase's European Union multi-region (eur3), and our backend functions run in London (europe-west2).
• Anthropic, PBC (USA) — generates coach messages and meal-scan and food-label results, as described in section 4.
• Apple — app distribution, Sign in with Apple if you choose it, push notification delivery, device attestation, and all payment processing for subscriptions. We never see your payment card details.
• RevenueCat, Inc. (USA) — subscription management. Processes purchase receipts and subscription status tied to your random user ID; it receives none of your health or nutrition data.
• Open Food Facts (a French non-profit) — when you scan a barcode or search its food database, the barcode or search text is sent to Open Food Facts to find the product. No account or health data accompanies these lookups.

Your synced data is stored in the EU. Some providers process data in the United States — Anthropic, RevenueCat, and some Google services (such as authentication, analytics, crash reporting, and push notification delivery). For these transfers we rely on UK-approved safeguards: the UK Extension to the EU-U.S. Data Privacy Framework where the provider is certified, or the UK International Data Transfer Agreement / standard contractual clauses otherwise.

• Your account and logged data: for as long as your account exists. Deleting your account (section 9) removes it permanently.
• Coach messages: saved to your account for up to 30 days (older messages are deleted automatically when you use the app), deleted immediately if you clear the conversation, and deleted with your account. Signing out removes them from your device; they come back when you sign in again.
• Things the coach remembers: until you delete them, or your account.
• Meal photos: until you remove the photo, delete the meal, or delete your account. Food label photos are not stored.
• Apple Health data: the workouts read from Apple Health are kept on your device until you sign out, delete your account, or delete the app — disconnecting Apple Health stops new workouts arriving. The heart-rate value and completed-plan records described in section 2 are kept with your account.
• Notification details:your upcoming check-in times are updated as your plans change; your device's notification token is removed when you sign out; and everything is deleted with your account.
• Feedback and emails: kept in our support inbox for as long as we need them to respond and improve the app. Deleting your account does not delete emails you have sent us — ask us and we will.
• Purchase records: kept by Apple and RevenueCat as needed for billing, tax, and legal obligations.
• Aggregate analytics: retained by Google Analytics for up to 14 months.
• Crash reports: retained by Crashlytics for approximately 90 days.

Under UK data protection law you have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Because the coach is part of Bene, withdrawing your consent means deleting your account, as described below.

Deleting your account is built into the app: Profile → Account settings → Delete account permanently removes your data from our cloud database (including your coach conversation, the things the coach remembers, and your meal photos), your notification details, your sign-in record, and the data on your device. If you signed in with Apple, Bene also revokes its access to your Apple ID. This is immediate and irreversible. You can also email us at support@trybene.com to exercise any of your rights, and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Your data is encrypted in transit (TLS) and at rest. Access to your cloud data is restricted by per-user security rules — each account can only ever read and write its own records — and our backend functions accept requests only from verified, genuine installations of the app. No system is perfectly secure, but we design for the failure modes: signing out wipes the device, and account deletion removes the cloud copy.

Bene is not directed at children and is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16; if you believe a child has created an account, contact us and we will delete it.

If we make material changes — especially anything that affects how your health data is processed — we will update this page, revise the date at the top, and notify you in the app before the change takes effect. The current version is always at trybene.com/privacy.