Privacy Policy

Last updated: May 2026 (analytics identifier and opt-out disclosure)

Data Controller

Marshall Matters Ventures Pte. Ltd. ("FastingBestie," "we," "us," or "our") operates the FastingBestie mobile application and the website at fastingbestie.com. This Privacy Policy explains how we handle your information when you use our app and website.

UEN: 202603347K
Address: 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
Email:

Our Core Principle: Work With You, Work With Your Body

FastingBestie is designed to respect both your privacy and your body. Wherever possible, your data stays on your device. We prioritise Apple HealthKit and on-device processing so your health information remains under your control.

How We Handle Your Data

On-Device Processing

The app processes your health and cycle data locally on your device. A rules engine runs entirely on-device to augment your fasting recommendations based on your cycle phase, goals, and preferences. This means your personal data does not need to leave your phone for the app to work.

Apple HealthKit

If you choose to connect Apple Health, the app accesses menstrual cycle data (menstruation start dates) to automatically determine your current cycle phase and generate personalised recommendations. HealthKit data is:

  • Processed on-device, staying within Apple's HealthKit framework
  • Never shared with third parties
  • Never used for advertising or analytics

Apple Health integration is entirely optional. You can enter your cycle details manually instead.

What Leaves Your Device

Most app data stays on your device. The exceptions are:

  • A stable, pseudonymous analytics identifier (a random UUID) is stored in your iCloud Key-Value Store. This lets us recognise the same install across reinstalls and across your own iPhones signed into the same Apple ID, so our usage analytics do not double-count you. The identifier contains no personal information and is not linked by us to your Apple ID, name, or email.
  • Anonymous usage analytics are sent to PostHog (see Analytics below).
  • Bug reports you submit from inside the app (see Bug Reports below).
  • Subscription and purchase status is handled by Apple's StoreKit. We read your entitlement locally and only send a derived status label (such as "trialing" or "active") to PostHog. The Apple receipt itself never leaves Apple's servers and your device.

In future, we may introduce optional features (such as account sync or cloud backup) that transmit data you have entered manually to our servers. If and when we do:

  • Only the minimum data required will be transmitted
  • Data will be encrypted in transit (TLS 1.2+) and at rest
  • We will not sell, share, or use this data for advertising
  • You will be able to request deletion of any server-side data at any time
  • HealthKit data will never be sent to our servers, as strictly enforced by Apple's HealthKit policies and by our own architecture

This privacy policy will be updated before any cloud sync or server-side storage feature is made available. We will notify users of any material changes to data handling.

What Data the App Uses

The app stores the following data locally on your device:

  • Onboarding preferences: Your selected fasting goal, experience level, dietary preferences, cycle length, and period length.
  • Fasting history: Records of your fasts including start times, end times, and fasting type.
  • Cycle data: Your last period start date and calculated cycle phase, used to generate personalised recommendations.

Analytics

We use PostHog (EU Cloud, hosted in Frankfurt, Germany) to understand how the app is used so we can improve it. PostHog receives:

  • Product events such as which screens you view, which features you tap, paywall views and purchases, onboarding step progress, and that you started or completed a fast (including the planned and actual duration of the fast).
  • Interaction events recording that you logged a mood check-in or a period event, along with non-sensitive context such as whether a fast was active at the time and whether a note was attached. We do not send the mood rating itself, the note text, the period intensity, or the cycle phase.
  • Profile properties derived from your onboarding choices and subscription state: your selected fasting goal, experience level, whether HealthKit and notifications are enabled, your subscription status (for example "trialing" or "active"), and the date you installed the app.
  • Standard device and app metadata automatically attached by the PostHog SDK, including device model, iOS version, app version, locale, and timezone.

This data is pseudonymous: it is tied to a random analytics identifier (described above), not to your name, email, Apple ID, or any directly identifying information. HealthKit data, your cycle phase, period dates and intensity, mood ratings, mood note text, weights, and other biometric values are never sent to PostHog or any other analytics provider. No advertising identifiers or third-party tracking SDKs are used beyond PostHog.

You can turn analytics off at any time in Settings, About, Share Analytics. When you opt out, no further events leave your device.

Although PostHog's servers are located in the EU, analytics data may be accessed by the data controller from Singapore for product improvement purposes. For EEA users, this constitutes a cross-border transfer and is covered by the safeguards described in the Data Location section below.

Bug Reports

If you submit a bug report from within the app, we collect a description you write, a screenshot, basic device information (model, OS version, app version), your current cycle phase name and fasting state (no dates, weights, or raw health data), and recent app log lines. Bug report data is used solely to diagnose issues and is deleted within 90 days.

What We Don't Do

  • We do not sell your personal data
  • We do not use advertising identifiers or ad-tracking SDKs
  • We do not use your data for advertising or profiling
  • We do not share health, cycle, fasting, or biometric data with any third-party service
  • We do not share HealthKit data with any third party or send it to any server

Website

Our website (fastingbestie.com) does not use cookies, analytics tools, or third-party tracking scripts. The site is a static marketing site that does not set any cookies or collect any browsing data. The only data collected through the website is information you submit voluntarily via the waitlist or contact forms (see below).

Website Forms

If you join our waitlist, we collect your email address and country. If you contact us through our support form, we collect the information you provide (name, email, subject, message). In both cases, your IP address is recorded for spam prevention. This data is processed on the basis of your consent (GDPR Article 6(1)(a)) and is used solely to communicate with you. It is not connected to any app data.

Waitlist and Newsletter

Our waitlist is also our newsletter. When you sign up, you consent to receive:

  • Launch and early-access emails: notifications when the app is available and invitations to early access.
  • The FastingBestie newsletter: cycle-synced fasting guidance, typically one email per week. Includes links to new guides and articles we publish.
  • Product announcements: occasional updates about new features or content.

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any newsletter email, or by emailing . Unsubscribing removes you from the newsletter; your waitlist record is kept only so we can send you launch access. You can also request full deletion at any time.

We do not use your waitlist email for advertising, do not share it with third parties, and do not connect it to any app usage or health data. Emails are sent via a transactional email provider under a data processing agreement; no marketing SDKs or tracking pixels are embedded in our emails beyond a basic open/click signal used solely to measure whether our newsletter is being read.

You may request deletion of your waitlist, newsletter, or contact data at any time by emailing .

Data Retention

App data is stored on your device and is under your direct control. You can delete all local app data at any time by:

  • Using the "Reset All Data" option in the app's Settings
  • Deleting the app from your device

"Reset All Data" also clears the analytics identifier from your device and resets PostHog. Because the identifier is also stored in your iCloud Key-Value Store, reinstalling the app while signed into the same Apple ID may restore the same identifier from iCloud. To delete the iCloud-stored identifier entirely, sign out of iCloud or remove FastingBestie's iCloud data via iOS Settings, Apple ID, iCloud, Manage Account Storage.

Waitlist and contact form submissions are retained until you request deletion. Bug report data is deleted within 90 days. If server-side features are introduced in future, you will be able to request deletion of any associated data by contacting us at .

Data Location

App data resides on your device, in the jurisdiction where your device is physically located. HealthKit data never leaves your device.

Waitlist and contact form data is stored on Amazon Web Services (AWS) servers in the US East (N. Virginia, us-east-1) region. Analytics data is processed by PostHog EU Cloud on servers in Frankfurt, Germany.

The data controller (Marshall Matters Ventures Pte. Ltd.) is based in Singapore and may access personal data from Singapore for operational purposes such as support, debugging, and product improvement. For users in the European Economic Area (EEA), this access constitutes a cross-border transfer of personal data. These transfers are safeguarded by Standard Contractual Clauses (SCCs) incorporated into the data processing agreements with AWS and PostHog, in accordance with GDPR Chapter V.

Purposes of Collection

We collect, use, and disclose personal data for the following purposes:

  1. To provide and personalise the fasting experience (cycle phase detection, fasting recommendations, progress tracking)
  2. To sync your fasting records and preferences across sessions (where server-side persistence is used)
  3. To understand how the app is used and improve the user experience (anonymous analytics)
  4. To respond to support inquiries submitted via our website
  5. To send waitlist, launch, and newsletter emails to people who have signed up for them
  6. To comply with legal obligations and enforce our terms of service

We do not collect, use, or disclose personal data for any purpose beyond what is stated above without obtaining your consent.

Your Rights

Because your app data is stored on your device, you already have direct control over it. For any data we hold server-side (waitlist, contact form, bug reports), you may exercise the following rights by contacting us at .

Under Singapore PDPA

You may request access to, correction of, or deletion of any personal data we hold. The purposes for which your data is collected are set out in the Purposes of Collection section above.

Under EU GDPR

If you are in the European Economic Area, you have rights including access, rectification, erasure, restriction of processing, data portability, and the right to object. You may also withdraw consent for waitlist or contact form processing at any time.

Legal Basis for Processing

  • On-device health and cycle data (HealthKit): Processed entirely on your device under your explicit consent (Article 9(2)(a)), granted via Apple's HealthKit permission prompt. This data is never transmitted to our servers.
  • Fasting records and preferences: Processed on the basis of performance of a contract (Article 6(1)(b)), providing you with the fasting service you signed up for.
  • Pseudonymous analytics: Processed on the basis of legitimate interest (Article 6(1)(f)), namely understanding how the app is used so we can improve it. Events are tied to a random analytics identifier, not to your name or email, and you can opt out at any time in the app's Settings.
  • Support inquiries, waitlist, and newsletter: Processed on the basis of consent (Article 6(1)(a)) for waitlist and newsletter signups (you may withdraw consent and unsubscribe at any time), and legitimate interest (Article 6(1)(f)) for responding to support requests.

Under CCPA (California)

We do not sell personal information. California residents may contact us for information about our privacy practices or to request deletion of any data we hold.

Data Breach Notification

In the event of a data breach affecting your personal data, we will notify the relevant authorities and affected users in accordance with applicable law.

  • Under GDPR, we will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach.
  • Under Singapore's PDPA, we will comply with the mandatory data breach notification requirements under the Personal Data Protection (Notification of Data Breaches) Regulations 2021.

We will notify affected users without undue delay where the breach is likely to result in high risk to their rights and freedoms.

Children's Privacy

The app is rated for ages 16+ on the App Store. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance.

Contact

If you have questions about this Privacy Policy, contact us at:

Marshall Matters Ventures Pte. Ltd.
60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051