Privacy Policy — HYM
Last updated: 19 August 2026
HYM is an iOS app published by BCP Momentum, a French SASU registered in France. This policy explains what HYM collects, why, where it is stored, and how you delete it.
It describes the app as it actually works. If something below stops being accurate, the policy is wrong and we fix the policy.
Data controller: BCP Momentum, 47 rue Vivienne, 75002 Paris, France — SIREN 107 187 700
Contact: hello@bcp-momentum.com
1. What HYM collects
Your account
Your email address and a password. The password is stored hashed — we never see it and cannot recover it. Purpose: signing you in and letting your program follow you to another device. Legal basis: performance of our contract with you.
Your progress photos
HYM asks for three photos when you start (front, side, face) and one photo per day afterwards. These are health-related data under Article 9 of the GDPR, and we treat them as such.
Purpose: building your progress gallery and your before/after comparison inside the app. Legal basis: your explicit consent, given when you upload them. You can withdraw it at any time by deleting your account (see section 5).
Your body and goal data
Sex, age, height, current weight, target weight, activity level, water and sleep habits, target date and the physique references you picked. Purpose: placing your starting point and your target, and drawing the weight curve you see in the app. Legal basis: performance of our contract.
Your daily weigh-ins
The weight you enter after each photo, and the time you chose for your daily reminder. Purpose: drawing your weight curve and sending your reminder. Legal basis: performance of our contract.
Purchase data
Your subscription status, handled by RevenueCat. We never see your card details — Apple processes the payment and does not share them with us.
Usage analytics
HYM records a short list of product events through PostHog, tied to a pseudonymous identifier:
onboarding_started, onboarding_step_completed, sign_in, paywall_shown, purchase_completed, account_deleted.
These events carry no email address, no name, no photo, and nothing you typed. They tell us where people stop in the setup flow, and nothing else. Legal basis: our legitimate interest in understanding whether the product works.
Your device identifier
A random identifier generated on your iPhone and kept in its Keychain. It is sent with every request to our server.
Purpose: it holds ownership of the photos you upload before you create an account, so that they can be attached to your account afterwards, and it lets us apply per-device limits. It says nothing about you, and it is not an advertising identifier — HYM uses none. Because it lives in the Keychain, it survives deleting the app. Legal basis: our legitimate interest in protecting data that has no owner yet.
Technical data
Our server sees your IP address on each request, to apply rate limits and block abuse. It is not stored in our application database and is not used to profile you.
2. What HYM never does
- No advertising. HYM shows no ads and works with no ad network.
- No tracking across other apps or websites. HYM never asks for permission to track you, because it never does.
- We never sell or share your personal data, and we never share it with data brokers.
- Your photos are never public and are never shared with other users. HYM has no feed, no friends list and no sharing feature.
- HYM is not for people under 18 and does not knowingly collect data from them.
3. Where your data is stored
Progress photos
Where: Cloudflare R2, in a private bucket
Region: European Union
Account, goal, measurements
Where: PostgreSQL on our own dedicated server
Region: European Union
Subscriptions
Where: RevenueCat
Region: United States
Product analytics
Where: PostHog
Region: United States
Account emails (password reset, verification)
Where: Resend
Region: United States
| What | Where | Region |
|---|---|---|
| Progress photos | Cloudflare R2, in a private bucket | European Union |
| Account, goal, measurements | PostgreSQL on our own dedicated server | European Union |
| Subscriptions | RevenueCat | United States |
| Product analytics | PostHog | United States |
| Account emails (password reset, verification) | Resend | United States |
Photos are stored in a bucket that refuses any unauthenticated access. When the app needs to display one, our server issues a link that expires after one hour.
Your photos are never sent to any AI service, and never leave our own storage.
Transfers outside the EU: RevenueCat, PostHog and Resend are based in the United States. These transfers are covered by the European Commission's Standard Contractual Clauses. None of the three ever receives your photos.
4. How long we keep it
Your data is kept for as long as your account exists. Delete your account and it goes with it (section 5). Data stored on your iPhone — your local database and your photo files — is removed when you delete the app.
Encrypted backups of our database are kept for 30 days, then destroyed.
5. Deleting your account and your data
You can delete your account from inside the app, without contacting us and without waiting: open Profile → Delete my account.
We ask for your password first: an unlocked phone left on a table should not be able to erase your account.
Deletion is immediate and permanent. It removes your account, your goal, your measurements, and it deletes your photo files from our storage — not just the rows that point to them. There is no recovery.
Deleting your account does not cancel your App Store subscription. Cancel it from Settings → Apple Account → Subscriptions on your iPhone; only Apple can do that.
6. Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, export it in a portable format, restrict how we use it, or object to a use based on our legitimate interest. Where we rely on your consent — your photos — you can withdraw it at any time.
If you are in California, you also have the right to know what we collect, to delete it, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.
Write to hello@bcp-momentum.com and we answer within 30 days. If you think we handled your data badly, you can complain to the French data protection authority, the CNIL.
7. Notifications
HYM's daily reminders are scheduled on your iPhone. They are not sent from a server, and HYM holds no push notification token for your device. Turning them off in iOS Settings stops them completely.
8. Changes
If this policy changes in a way that affects you, we update the date at the top and, when the change is significant, tell you in the app before it takes effect.
9. Contact
hello@bcp-momentum.com — BCP Momentum, 47 rue Vivienne, 75002 Paris, France