Legal
Privacy Notice
Last updated: September 30, 2026
This is a translation provided for convenience. The Spanish version is the one that governs under Mexican law (LFPDPPP) in case of any discrepancy.
1. Identity and address of the data controller
BE REAL BE FIT, S.A. DE C.V. (hereinafter, "Be Real Be Fit," "we," or "the Controller"), with address at Calle Ingenieros Petroleros No. 14, Manzana 14, Lote 10, Colonia Nueva Rosita, Alcaldía Iztapalapa, Ciudad de México, C.P. 09420, is responsible for the processing of your personal data, in accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and other applicable law in Mexico.
2. What services this notice covers
This Privacy Notice covers both Be Real Be Fit services:
- The website (berealbefit.com), where you get information, join the launch waitlist, create your account, and can subscribe.
- The mobile app, where you view your routines, log your workouts, and keep your nutrition diary. On iPhone you can also subscribe from within the app.
Both share the same user account and the same database, which is why a single notice governs them. Below we distinguish what data is collected on each one.
3. Personal data we collect
3.1 On both services
- Name. To identify you within the service.
- Email address. To log you in, recover your password, and notify you about your account.
- Password. Always stored encrypted (hashed). Never in plain text — not even we can read it.
- Your Google or Apple account data. Only your name and email, if you choose to log in with those methods.
If you log in with Google or Apple, we do not access your contacts, calendar, or any other data from those accounts — only what's needed to create your profile. Apple, in addition, only shares your name the first time you authorize the app.
3.2 Only on the website
- Pre-registration (waitlist). If you sign up before launch, we keep your name, your email and, if you give them to us, your phone or WhatsApp number and what you're interested in, plus the language of the page. We only use them to confirm your sign-up and let you know when we open. Pre-registering doesn't create an account; if you later sign up with the same email, we link it to your account. You can ask us to delete it at any time (section 9).
- Payment data. If you subscribe on the website, the charge is processed by Stripe. Your card details are sent directly to Stripe: we never see or store them. We only keep a customer identifier and your subscription status.
- Currency preference. A functional cookie
(
breal_currency) that remembers whether you see prices in pesos or dollars. It is not used for advertising or tracking. - Visit statistics. We use Cloudflare Web Analytics, which measures traffic in aggregate without cookies, without fingerprinting, and without tracking you across sites. It cannot identify you.
3.3 Only in the mobile app
The data in this section is considered sensitive personal data under the LFPDPPP, as it involves health and physical condition information. See section 4 on your express consent.
- Weight, height, and body measurements. To calculate your goals, estimate calories, and chart your progress.
- Activity level and experience. To suggest routines that fit your condition.
- Workout logs. Exercises, sets, reps, and weight lifted, to keep your history.
- Diet and nutrition information. Food logged, calories, and macronutrients from your diary.
- Profile photo. Optional. Only used to personalize your profile.
The app requests camera access only to scan the barcode of the food items you log. We do not take or store photographs in that process. Reminders are local notifications scheduled on your own device and are never sent to our servers.
In-app purchases (iPhone). If you subscribe from the app, the charge is made by Apple to your Apple ID, through the App Store. We never see or store your card details. From Apple we only receive what's needed to give you access: the purchase identifier, the plan, its validity dates, whether it will renew, and whether it was refunded. To know the purchase is yours, the app gives Apple a random identifier of your account that contains no personal data.
3.4 What we don't collect
- We do not sell, rent, or share your data with third parties for advertising purposes.
- We do not show advertising on the website or in the app.
- The mobile app includes no third-party analytics or tracking tool whatsoever.
- We do not collect your geographic location.
4. Sensitive data and express consent
The health and physical condition information you enter in the app (weight, body measurements, diet, and workouts) constitutes sensitive personal data. Under article 9 of the LFPDPPP, its processing requires your express consent, which you give when you register and when you voluntarily enter that information.
This data is processed exclusively to provide you the service described in section 5. You can withdraw your consent at any time (section 11).
5. Purposes of the processing
Primary purposes (necessary for the service):
- Create and manage your account, and verify your access to the service.
- If you pre-registered, confirm your sign-up and let you know when the service launches.
- Show you your routines and log your workouts.
- Calculate your nutrition goals and track your progress.
- Allow the coach or nutritionist assigned to you to follow up on your training and your meal plan.
- Process your subscription payment on the website, or verify with Apple the one you bought in the app, and manage its term.
- Send you reminders within the app, which you can turn off whenever you want.
- Handle your support requests and comply with legal obligations.
We do not use your data for secondary purposes — such as marketing, advertising, or sales prospecting — unless you give us separate consent to do so.
6. Third parties involved in the processing
To operate the service we rely on providers that act as processors: they may only handle your data under our instructions and for the purposes of this notice, never for their own purposes.
| Provider | Purpose | What it processes |
|---|---|---|
| Cloud infrastructure providers | Hosting the service, database, and file storage | Your account data and your activity |
| Payment processor (Stripe) | Subscription billing, only on the website | Payment data, which is sent directly to Stripe and we never see or store |
| Public food catalogs (Open Food Facts, USDA, CONABIO) | Looking up nutrition information | We query these catalogs using the barcode or the food's name. We never send them any personal data of yours. |
In-app purchases are processed by Apple, which acts as the seller on the App Store and handles your payment data under its own privacy policy: it is not a processor of ours. We only check the status of your subscription with Apple (section 3.3).
Some of these providers store information on servers outside Mexico. By using the service you consent to that transfer, carried out solely for the purposes described in this notice. If you want to know the specific identity of the providers involved in a given case, you may request it at the email in section 9.
Beyond the above, we do not transfer your personal data to third parties without your consent, except in the cases provided for in article 37 of the LFPDPPP (for example, when required by a competent authority).
7. How long we keep your data
We keep your personal data for as long as your account remains active, since it is necessary to provide the service and for you to be able to view your own history of workouts, measurements, and nutrition.
When you delete your account, your personal data and history are permanently erased. We may only keep, for as long as the law requires, the minimum information we're obligated to retain — for example, billing records required by tax law — which is kept isolated and is not used for any other purpose.
8. Security measures
- Passwords are stored encrypted (hashed), never in plain text.
- All communication between your devices and our servers travels encrypted (HTTPS/TLS).
- Access to the database is restricted and protected with authentication.
- Sessions use tokens with expiration.
9. Your data protection rights
Under Mexican law, you have the right to:
- Access the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Cancel data you believe we no longer need.
- Object to our using it for specific purposes.
To exercise these rights, write to us at [email protected] stating your name, the right you wish to exercise, and attaching an official ID. We will respond within a maximum of 20 business days, as required by the LFPDPPP.
To delete your account immediately, you don't need to write to us: you can do it yourself from the app, under Profile → Permanently delete my account. This permanently removes your account and its associated data.
10. How to limit the use or disclosure of your data
Beyond the rights above, within the service you can at any time:
- Stop sharing your progress with a professional: if you no longer want a coach or nutritionist to see your information, request it at the email below and we'll disconnect that relationship.
- Turn off reminders from your device's settings or from your profile inside the app.
- Skip any data you don't want to log: your profile photo, and each body measurement, food item, or workout are optional; the service works without capturing them.
- Delete your account at any time from the app, with no need to contact us.
11. Withdrawing your consent
You can withdraw the consent you gave us at any time, at the same email in section 9 or by deleting your account from the app. Note that, in some cases, withdrawing consent means we can no longer keep providing you the service.
12. Minors
The service is intended for people over 18. If we detect — or are informed — that a minor provided us personal data without the consent of their parent or guardian, we will delete it.
13. Changes to this notice
We may update this Privacy Notice. Any change will be published on this same page, updating the date in the header. If the change is substantial, we will notify you by email.
14. Contact
If you have questions about this notice or about how we process your personal data, write to us at [email protected] .