This policy explains how OwnMetric handles personal data in the OwnMetric mobile app and on ownmetric.app. We designed it to be clear about the fitness, nutrition and optional health information the app uses.
1. Who we are
BPS Designs Limited is the controller responsible for your personal data. We are a company registered in England and Wales under company number 05360014.
BPS Designs Limited2a Swordfish Business Park
Swordfish Close, Higgins Lane
Burscough, Lancashire L40 8JW
United Kingdom
Privacy enquiries and data-rights requests can be sent to support@bpsdesigns.co.uk.
2. Information we collect
Account and profile information
We process your account identifier, email address, authentication provider information and, where you provide them, your name, age, height, weight, goals, activity level, dietary preferences and allergy or excluded-food settings.
Training, nutrition and body metrics
We process the workouts and plans you create or complete, exercise history, food diary entries, saved foods and meals, calorie and macro targets, barcode and nutrition-label details, meal-photo results, body weight records and related progress trends.
Optional health information
If you choose to connect Apple Health, OwnMetric may read the specific categories you enable, including steps, workouts, heart rate, resting heart rate, heart-rate variability, sleep, active energy and body weight. With separate permission, OwnMetric may write completed workout summaries, confirmed nutrition totals and OwnMetric body-weight entries back to Apple Health. Health access is optional and can be changed in OwnMetric and Apple Health settings.
Images and AI inputs
If you choose an AI-assisted feature, we process the meal, packaging or nutrition-label images and the minimum information needed for that request. For suitable-meal suggestions, this can include your chosen ingredients and remaining calorie and macro targets. Saved allergy records and imported Apple Health data are not sent to OpenAI.
Subscription, security and support information
We process your subscription product and entitlement status, but not your payment-card details. We also process the technical identifiers, authentication tokens, device-attestation results, network information and server logs needed to sign you in, prevent abuse and operate the service. If you contact us, we process the information in your message.
This website
The current website has no account, contact form, advertising tracker or analytics cookie. Our hosting provider may process basic request data, such as IP address, browser details and security events, to deliver and protect the site.
3. How and why we use information
| Purpose | UK GDPR basis |
|---|---|
| Provide your account, sync records, calculate targets, show progress and manage subscriptions | Performance of our contract with you |
| Process optional health information and optional AI image or suggestion features | Your explicit consent for health data and your consent for the optional feature |
| Secure the service, prevent fraud and abuse, diagnose failures and maintain reliability | Our legitimate interests in operating a safe, reliable service |
| Respond to rights requests, complaints and legal requirements | Legal obligation and, where relevant, our legitimate interests |
We do not use solely automated decision-making that produces legal or similarly significant effects. Nutrition estimates and recovery guidance are informational, explainable and subject to your review.
4. Who processes information
We use carefully selected providers to operate OwnMetric:
- Google Firebase and Google Cloud for authentication, app attestation, database storage, temporary image storage and server functions. OwnMetric’s regional Firestore, Storage and Functions resources use London (
europe-west2) where the service supports regional selection. - Apple for Sign in with Apple, App Store subscriptions and, only when you choose it, Apple Health access.
- Google for Google sign-in.
- RevenueCat to validate purchases and maintain subscription entitlement status. We do not send imported health data to RevenueCat.
- OpenAI for the optional AI features described above, called only through OwnMetric’s server. We set API requests not to be stored for product use; standard abuse-monitoring logs may nevertheless retain request content for up to 30 days. OpenAI does not train its models on API data by default.
- Cloudflare to host, deliver and protect this website.
These organisations process information under their own terms or under contracts requiring appropriate confidentiality and data protection. We may also disclose information where the law requires it or to protect people, rights and the security of the service. We do not sell personal data and do not share it for behavioural advertising.
5. International transfers
Some providers may process information outside the UK. Where personal data is transferred to a country without UK adequacy regulations, we rely on an appropriate safeguard such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. Contact us if you would like more information about the safeguard relevant to your data.
6. How long we keep information
- Account, profile, training, nutrition and progress records are normally kept while your account remains active and then deleted or anonymised following a valid deletion request, unless law requires a longer period.
- Meal images are deleted from OwnMetric storage after processing succeeds or fails.
- Product-package evidence is deleted after an automated or human decision. Unresolved evidence has a maximum seven-day retention period.
- OpenAI’s standard abuse-monitoring logs may retain AI request content for up to 30 days.
- Security and support records are kept only for as long as reasonably required for the purpose, dispute handling or legal compliance.
We may keep anonymised information that no longer identifies you. Shared catalogue facts may remain after creator identity and evidence have been removed.
7. Your choices and rights
You can decline optional Apple Health and AI features and still use the app’s core manual features. You can change Apple Health permissions in device settings. OwnMetric also lets you clear its imported health summaries and rebuild them from the health data you still permit; this does not delete source records held by Apple Health.
Under UK data-protection law, depending on the circumstances, you may have rights to access, correct, erase, restrict or object to our use of your personal data, and to receive portable data. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing.
Account self-service deletion is being prepared. Until it is available, email support@bpsdesigns.co.uk from your account address to request export or deletion. We may need to verify your identity before acting. You can also complain to the Information Commissioner’s Office, although we would appreciate the chance to resolve your concern first.
8. Security
We use access controls, encrypted transport, platform authentication, app attestation and restricted server-side processing intended to protect personal data. No online service can promise absolute security, so please use a strong device passcode and protect your sign-in account.
9. Children
OwnMetric is intended for adults aged 18 and over. We do not knowingly offer the service to children or collect their personal data.
10. Changes and contact
We may update this policy as OwnMetric changes. We will publish the new date here and, where a change is material, give an appropriate notice in the app before it takes effect.
Questions can be sent to support@bpsdesigns.co.uk.