Privacy Policy
This policy explains what personal data HeyBeet collects when you use heybeet.com, why we collect it, who we share it with, and what rights you have. HeyBeet is a web service that rates the meals you photograph for heart health and suggests simple swaps, following the DASH eating pattern.
In short
- Your answers about blood pressure and medication never leave your browser; we store only the daily sodium target your plan works out from them.
- When you ask for your plan, we store your other quiz answers, height and weight included, with your account and email the plan to you. Height and weight never go to our analytics or to Meta.
- We store your email, your name if you give it, the meal photos you scan and their results.
- Meal photos are analysed by AI models (Google, OpenAI) through OpenRouter, which keeps no copy of them.
- We use Meta cookies to see which ads bring people to HeyBeet. In Poland, Slovakia and Czechia we ask first.
- We never sell your data. Write to [email protected] to see, fix or delete it.
1. Who we are
The controller of your personal data is:
Dmytro Shylovskyi, running a sole proprietorship registered in CEIDG (Poland)
Aleja Pokoju 81E/86, Kraków, Poland
NIP: 6751833407
Email: [email protected]
"HeyBeet", "we" and "us" in this policy mean the controller above.
2. What data we collect
2.1. Quiz answers
The quiz asks about you and your eating habits. Your answers are kept in your browser's local storage while you take the quiz. When you enter your email to get your plan:
- Blood pressure and medication are kept only in your browser's local storage, to build your plan on the page. They are not sent to our servers, to our analytics or to anyone else. Clearing your browser data removes them. What is sent is the daily sodium target your browser works out from them: 1,500 mg (which suggests raised blood pressure or blood pressure medication) or 2,300 mg.
- All other answers, including height, current weight and target weight, are sent to our servers and stored with your account. We use them to build your plan, to email it to you and to open it again when you follow the link in that email, on any device.
- Height, current weight and target weight are never sent to our analytics or to Meta.
- Other answers (such as who you cook for, age range, sex, goals and eating habits) are also sent to our analytics tool, PostHog, linked to a random visitor ID, so we can see where people leave the quiz.
2.2. Account data
- Your email address and, if you give it, your first name, entered on the quiz's email step.
- The language of the site you used.
- The advertising campaign that brought you to us (UTM parameters in the link), stored with your account when it is created.
- The country your IP address belongs to when your account is created (we get it from Cloudflare; we do not store the IP address itself).
- The Meta browser and click identifiers (
_fbp,_fbc, see section 6) when your browser has them. - When you last logged in. Logging in works with one-time links sent to your email; we use no passwords.
2.3. Meal scans
- The photos you take or upload to scan a meal, and a small thumbnail of each.
- What the analysis found: the dish name, estimated nutrients (calories, sodium, fats, fibre and similar), the Heart Score and the suggested swap.
- Your answers to the questions after a scan (whether you added salt, how salty it tasted, where the meal came from), the corrections you make, the meal type and the time of the scan.
Please photograph your food, not people or documents. We use the photos only to analyse the meal and to show it in your scan history.
2.4. Payment data
Payments are processed by Stripe. You enter your card details in Stripe's own payment form, so we never see or store them. We receive and keep your subscription status, the plan you chose and Stripe's identifiers for your payment. To help Stripe prevent fraud and to attribute the purchase to our ads, the payment session also carries your IP address and your browser's user agent.
2.5. Technical data
- A random visitor ID created on your first visit and kept in your browser's local storage. It links your quiz, your account and your payment, and it is the ID our analytics use.
- Your IP address and browser user agent, which every website receives. We use the IP address to limit abuse (for example, too many login emails) in our servers' memory without storing it in our database, and we pass it to Meta and Stripe as described in sections 6 and 2.4. Our analytics tool derives your country from it.
- Login tokens stored in your browser's local storage while you are logged in.
3. Why we use your data and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating your account, sending login links, giving you access to what you paid for | Email, name, language, visitor ID, subscription status | Contract, Art. 6(1)(b) |
| Building your plan, emailing it to you and opening it again from the link in that email | Quiz answers except blood pressure and medication (height and weight included), the daily sodium target worked out from those two; email, name, language | Contract, Art. 6(1)(b): you ask us to send you the plan |
| Analysing your meal photos and keeping your scan history | Photos, scan results, your answers and corrections | Contract, Art. 6(1)(b) |
| Taking payments and handling refunds | Email, subscription and payment identifiers, IP address, user agent | Contract, Art. 6(1)(b); legal obligation for accounting records, Art. 6(1)(c) |
| Understanding how people use HeyBeet so we can improve it, including which countries our users come from | Visitor ID, events (pages and steps reached, buttons used, non-health quiz answers, scan outcomes), country, including the country stored with your account | Legitimate interest in improving the service, Art. 6(1)(f) |
| Meta cookies in your browser (the Meta Pixel) | See section 6 | Consent, Art. 6(1)(a), where we ask for it (Poland, Slovakia, Czechia); elsewhere legitimate interest, Art. 6(1)(f), and you can switch it off |
| Telling Meta from our server that someone signed up, reached the plans page, started checkout or paid, so we can measure and improve our ads | See section 6 | Legitimate interest in measuring our advertising, Art. 6(1)(f) |
| Keeping the service secure and preventing abuse | IP address, technical logs | Legitimate interest, Art. 6(1)(f) |
We do not send you marketing emails. If we start, we will ask for your consent first.
4. HeyBeet and your health
HeyBeet is a wellness tool, not a medical device. It does not diagnose, treat or prevent any condition and does not replace your doctor's advice. The Heart Score is calculated automatically from the estimated nutrients of a meal; it has no legal or similarly significant effect on you, and you can correct the values it is based on.
We designed the quiz so that your blood pressure and medication stay on your device: we do not collect them on our servers, only the daily sodium target worked out from them. That target, your height and your weight are stored with your account only to build your plan and send it to you (section 2.1); the plan email shows the sodium target, the BMI and the weight goal. They are never sent to our analytics or to advertising partners.
5. How meal photos are analysed
When you scan a meal, we send the photo to OpenRouter, Inc. (United States), which passes it to one of the AI models we have chosen, currently Google's Gemini (run on Google Cloud) andOpenAI's GPT (run on Microsoft Azure). Only the photo and the language of your site are sent, never your email, name or quiz answers.
- We send requests only to providers that keep no copy of the data (OpenRouter's zero data retention mode).
- The providers do not use the photos to train their models.
- The analysis runs outside the European Economic Area; see section 9 for how such transfers are protected.
The photo itself is stored only by us, in our own storage (section 7).
6. Cookies, local storage and Meta
6.1. Local storage
HeyBeet keeps the following in your browser's local storage: your visitor ID, your quiz progress and answers, your login tokens, your cookie choice, an ad click identifier from the link you arrived by, and our analytics tool's state. They are needed for the site to work or are described in this section. Our analytics tool (PostHog) uses local storage, not cookies, and records no screen recordings or automatic clicks.
6.2. The Meta Pixel
On the landing page and in the quiz we use the Meta Pixel, a script from Meta Platforms Ireland Ltd.It sets the cookies _fbp (a random browser ID) and, when you arrive from a Meta ad, _fbc(the ad click ID), and it tells Meta which page you viewed and when you sign up, reach the plans page or start checkout. It does not send your quiz answers or the text on the buttons you press. It is not used on the login page, in your dashboard or on this page.
- Poland, Slovakia, Czechia (the Polish, Slovak and Czech versions of the site): the Pixel loads only after you choose "Accept" in the cookie banner.
- Other versions: the Pixel loads when you open the page. You can switch it off with the cookie settings link at the bottom of the home page or below.
If you choose "Reject", the Pixel does not load on any version of the site and we remove its cookies. You can change your choice at any time: .
6.3. Meta Conversions API
Separately from the Pixel, our server tells Meta when someone creates an account, reaches the plans page, starts checkout or pays, so we can see which ads work. This happens whatever you chose in the cookie banner. Each report contains:
- your email address and visitor ID, both hashed (turned into a one-way code; Meta matches the code against its own users and cannot read the email back from it);
- your IP address and browser user agent;
- the
_fbpand_fbcidentifiers, if your browser has them; - for a payment, the amount, the currency and the subscription ID.
Meta acts as a joint controller with us for this data under Meta'sController Addendum; Meta's own use is described in its Privacy Policy. You can object to these reports at any time by writing to [email protected]; we will stop sending them for your account.
7. Who we share data with
We do not sell, rent or trade your personal data. We use these service providers, each bound by a data processing agreement under Art. 28 GDPR unless stated otherwise:
| Provider | What for | Data | Where |
|---|---|---|---|
| Hetzner Online GmbH | Servers, database, photo storage, backups | Everything we store | European Union |
| Cloudflare, Inc. | Delivering the site and protecting it from attacks | IP address and the requests passing through | Global network, United States |
| OpenRouter, Inc., with Google LLC (Google Cloud) and Microsoft Corporation (Azure, running OpenAI models) | Meal photo analysis (section 5) | Meal photos, site language | United States |
| Stripe Payments Europe, Ltd. | Payments and subscriptions | Email, payment details, visitor ID, IP address, user agent | Ireland (EU), United States |
| Brevo | Sending login emails and the email with your plan | Email, name, language, login link, your plan (built from your quiz answers) | France (EU) |
| PostHog, Inc. | Product analytics | Visitor ID, events, non-health quiz answers, country | EU data centre (Frankfurt, Germany) |
| Meta Platforms Ireland Ltd. | Measuring our ads (section 6); joint controller, not a processor | As listed in section 6 | Ireland (EU), United States |
We may also disclose data when the law, a court or a public authority requires it, or to protect the rights and safety of our users or others. If HeyBeet is sold or merged, your data may pass to the new owner, who will be bound by this policy.
8. How long we keep data
- Account data and scans: while you have an account. Deleting a scan in your dashboard deletes its photo and results at once. When you ask us to delete your account, we delete your account and all your scans within 30 days.
- Backups: our database is backed up nightly and each backup is kept for 14 days, so deleted data disappears from backups within 14 days.
- Payment records: as long as tax and accounting law requires, in Poland generally five years from the end of the year of the payment.
- Analytics data: kept in pseudonymous form (linked to the visitor ID, not your email) while we need it to understand how the service is used; we delete yours on request.
- Data in your browser: until you clear your browser data. Logging out removes your login tokens and starts a new visitor ID.
9. Transfers outside the EEA
Some providers (OpenRouter, Google, Microsoft, Cloudflare, and Stripe, PostHog and Meta for some processing) are based in the United States or may process data there. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Write to us for a copy of the safeguards that apply.
10. Your rights
Under the GDPR you can ask us to:
- access the data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- delete your data (for example, close your account);
- restrict how we use it in certain situations;
- give you your data in a common machine-readable format (portability);
- object to processing based on our legitimate interest, including analytics and the Meta reports in section 6.3;
- withdraw consent at any time, without affecting what we did before (for the Meta cookies, use the cookie settings).
Write to [email protected] from the email address of your account. We will answer within one month (up to three months for complex requests, and we will tell you if so). You can delete single scans yourself in your dashboard.
You also have the right to complain to a data protection authority, in Poland the President of the Personal Data Protection Office (uodo.gov.pl).
11. Security
Data travels encrypted (HTTPS). Meal photos are kept in private storage and shown to you only through links that expire after an hour. Access to our servers is limited to the controller and protected by keys. No system is perfectly secure; if a breach puts your rights at risk, we will tell the supervisory authority and, where required, you.
12. Children
HeyBeet is meant for adults and is not directed at children. You must be at least 18 to buy a subscription. If you believe a child has given us personal data, write to us and we will delete it.
13. Changes to this policy
We will publish any change on this page with a new date at the top. If a change affects how we use data you have already given us, we will tell you by email before it applies.
14. Contact
Questions about this policy or your data: [email protected], or by post to Dmytro Shylovskyi, Aleja Pokoju 81E/86, Kraków, Poland.
The rules for using HeyBeet, plans, cancelling and refunds are in our Terms of Use.