1. Who we are
Bromunity (“we”, “us”) provides the Bromunity app and website at bromunity.com. For any privacy question or to exercise your rights, contact support@bromunity.com. We are the data controller for the information described below.
2. 18 and over only
Bromunity is strictly for adults aged 18 or older. We do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor, we will delete it. By using Bromunity you confirm you are 18+.
3. What we collect
We only collect what the app needs to work for you:
- Account & login — your email, and (if you use Google) your Google account identifier and basic profile. Bromunity is passwordless (magic link / Google), so we never store a password.
- Profile & onboarding — display name, username, avatar, and anything you choose to add such as age, location, a short bio and your reasons for joining.
- Health & wellbeing data — your mood check-ins and notes, wellbeing screeners (e.g. PHQ-2 / GAD-2), wellness scores, and optional details like weight, height, gender, smoking and supplements. This is sensitive (“special category”) data and we treat it accordingly.
- Diet & fitness — meals, macros, calorie goals, workouts and any food photos you upload for AI estimation.
- Goals — the goals you set and your progress.
- AI chats — your conversations with Ben (messages you send and his replies), so your history is there when you return.
- Community — posts, replies, reactions, bookmarks and reports you create in the Bromunity community (anonymous by default to other members).
- Notifications — your reminder preferences, push subscriptions (device tokens) and email-sending status.
- Referrals — your referral code and a record of sign-ups attributed to your link.
- Technical data — limited security and rate-limiting data (e.g. IP-derived identifiers) and essential cookies needed to keep you signed in.
4. How we use it
- To provide the service: run your account, chats, mood/goal/diet tracking, community and notifications.
- To personalise Ben: recent mood, diet and chat context is used to give you more relevant support. It is never recited back or sold.
- To send the reminders you switch on (daily check-in, streak alerts, weekly summary) by push and/or email.
- To keep the community safe: automated and human moderation of posts, and acting on reports.
- To protect the service: rate-limiting, abuse prevention and security.
5. AI processing
To generate Ben's replies and analyse food photos, the relevant content is processed by the Bromunity AI service and returned to you. We do not use your conversations to train models, and the service is configured to prioritise your privacy and safety. As with any AI feature, avoid sharing information you wouldn't want processed to generate a response.
6. Legal bases (UK/EU GDPR)
- Contract — to deliver the features you sign up for.
- Consent — for health/wellbeing (special category) data, optional cookies, and marketing/reminder emails. You can withdraw consent at any time.
- Legitimate interests — security, abuse prevention and improving the product.
7. Who we share it with
We never sell your data. We use a small set of trusted service providers, strictly to run Bromunity for you:
- Infrastructure & hosting — to run the app and store your data securely.
- The Bromunity AI service — to power Ben and food-photo analysis.
- Email delivery — to send the transactional and reminder emails you've enabled.
- Security & abuse-prevention — to protect the service (e.g. rate-limiting).
These providers process data only on our instructions. We may also disclose information if required by law, or to protect someone's safety.
8. Security
Access to your data is protected with database row-level security, a passwordless magic-link/OAuth login, and encryption in transit. The community is anonymous by default. No system is perfectly secure, but we work hard to protect you.
9. Retention
We keep your data while your account is active. When you delete your account, your personal data and content (chats, moods, goals, diet, posts, etc.) are deleted, except where we must retain limited records for legal or security reasons.
10. Your rights
You can, at any time:
- Access & export your data — use “Export my data” in Settings.
- Delete your account and data — use “Delete Account” in Settings.
- Correct your profile information in Settings.
- Withdraw consent — turn off reminder emails/notifications in Settings, or manage cookies (below).
- Complain to your local data protection authority (in the UK, the ICO).
12. Not a crisis service
Bromunity offers support and reflection — it is not a medical, therapy or emergency service. If you are in danger or crisis, contact local emergency services or a helpline at findahelpline.com.
13. International transfers
Some of our processors operate outside your country. Where data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) to protect it.
14. Changes & contact
We'll update this policy as the product evolves and post the new date above. Questions? Email support@bromunity.com.