Privacy notice
Best Version is a lifestyle coach. This notice says, in plain words, what happens to your data. The short version: you use the app with an account; what you enter is stored encrypted on our server in Switzerland so that it follows you between devices; only you can sign in to it; and you can download or delete all of it at any time.
Who is responsible
The app is published by Karolina Bus (the "operator"). Postal address: Best Version, Karolina Bus, Postfach XX, 8053 Zürich, Switzerland. Questions and requests: hello@bestversion.ch.
Swiss data protection law applies (Federal Act on Data Protection, FADP). If you live in the EU or EEA, the GDPR gives you the same rights described below.
What the app stores, and where
Everything you enter — your name and colour, your pyramid ranking, answers about your day, check-ins, ticked habits, journal notes, meals, saved recipes and settings — is stored under your account: encrypted in a database hosted by Infomaniak Network SA in Switzerland, and cached in the browser storage of the device you use so the app opens instantly and works offline. Signing out clears the copy on that device.
Much of this is information about your health: hours slept, energy, body and mind, what you ate, your height, weight and age, whether you kept a habit such as an alcohol-free evening, and anything you write in the journal. Under Swiss law (Art. 5 lit. c FADP) and the GDPR (Art. 9) this is sensitive data, the most protected kind there is. The app treats all of it that way.
Your e-mail address is stored encrypted as well; your password is never stored, only a slow hash of it (Argon2id).
Your account and your consent
The app needs an account: it is what keeps your days in one place and lets a second phone, a new phone or a laptop show the same days. Creating one asks for your e-mail address, a password and your name.
Because this means health data is stored on a server, we ask you separately and explicitly to agree to it when you create the account — a checkbox of its own, next to the explanation of what is stored and why, not part of accepting these terms. Any e-mail news is a third, optional checkbox that has nothing to do with the consent above.
Every entry is encrypted with a key that is unique to your account before it is written; that key is itself encrypted with a master key kept outside the part of the server the web can reach. The operator can read your entries only in order to provide the service: to show them back to you on another device, to give you the file when you ask for it, and to fix a problem you report. The operator does not analyse individual people's entries, does not use them for advertising, does not sell or share them, and does not send them outside Switzerland. The usage counts described below are never linked to your account.
You withdraw your consent under You → Privacy & data. Because the app cannot keep your entries without it, withdrawing deletes the account: your entries, the key that could read them and your e-mail address are removed from the server immediately, and the copy on your device is cleared. You can also sign out of one device while keeping the account.
Signing in sets one cookie, needed to keep you signed in for up to 30 days. It is used for nothing else and is not shared with anyone.
What the app does not do
No advertising or third-party tracking code is included. No cookies are set except the one that keeps you signed in to an account, if you have one. Nothing is sold, shared or profiled. No entry you make is ever analysed to build a picture of you.
The app contacts the internet only to load itself and its images, fonts and videos from the hosting server; to save and load your entries under your account; to check a Plus subscription with the operator's server; to send the anonymous usage counts described below; and, when you ask, to open a share sheet, the clipboard, or Stripe's checkout page. Nothing is loaded from any other company's servers.
Hosting
The app, its files and the account database are hosted by Infomaniak Network SA, Geneva, Switzerland, in its data centres in Switzerland, under a written data-processing agreement. Like every web server, it records technical access logs (IP address, time, requested file, browser type) for security and operation, kept for a short period. Infomaniak also keeps backups of the hosting, in which the account database appears only in its encrypted form.
Reading a plate from a photo
If you use "Photo" on Today's plate, the picture you take is sent once to Mistral AI SAS, Paris, France, so that a computer model can list the foods it shows. It travels without your name, your account or the date; the app adds the numbers itself afterwards, on your phone. We do not keep the picture at all. Mistral may hold it for up to 30 days for abuse checks and does not use it to train its models.
France is in the EU, whose data protection the Swiss Federal Council recognises as adequate, so no further safeguard is needed for the transfer. You are asked once before the first photo and can say no — typing the meal in works the same, and the choice can be reversed under Privacy & data. Ten photos a day per account.
Usage counts
To see which parts of the app are used and whether it works, the app sends small anonymous counts to the operator's own server in Switzerland: that the app was opened, which screen or tool was shown, which recipe, place or scene was opened, that the Plus page was seen or a checkout started, that an account was created or signed in to, and any script error with the place it happened. Nothing you type, no entries, no health data and no e-mail address are sent, and no IP address is stored.
The counts also record where the app is used, coarsely: the country, read from the time zone your phone reports. Nothing more precise than the country is ever recorded, and no location service is asked.
The only identifier is a random code the app made for itself on your phone, so that a return visit can be told from a new one. It is not linked to your profile, to your account or to Stripe. Clearing the app's data (You → Data) makes a new code; the old counts cannot be tied back to you. Counts are kept for 400 days. No third-party analytics service is used.
Sharing
When you share a recipe, a shopping list or a day card, the content goes wherever you send it. The app hands it to your phone's share sheet or clipboard and nothing else. Your days move between devices only through your account — there is no export code or file to carry around.
Your rights
Everything works from inside the app, immediately, without a request to the operator: view your data in the app, download everything the server holds about you as one readable file (You → Privacy & data → Download my data), correct anything by editing it, and delete it all (You → Privacy & data → Delete my account, or Withdraw consent). You are welcome to write to hello@bestversion.ch about any of it, and you will be answered personally.
You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your national supervisory authority.
Children
Best Version is intended for people aged 16 and over. It does not knowingly collect anything from younger users; an account created by a younger person is deleted on request to hello@bestversion.ch.
Plus subscription and payments
If you subscribe to Plus, payment is handled by Stripe Payments Europe, Ltd. (Dublin, Ireland), a payment processor certified to the highest card-industry standard (PCI DSS Level 1). You enter your card details on Stripe's own page; the app and the operator never see, store or transmit them.
What the operator receives from Stripe and keeps on its server in Switzerland: your e-mail address, the plan, whether the subscription is active, the renewal date, Stripe's customer and subscription identifiers, and which account it belongs to. This is the minimum needed to unlock Plus on every device you sign in to and to keep accounts. It is kept for as long as the subscription exists and for ten years afterwards for Swiss bookkeeping rules (Code of Obligations art. 958f), then deleted.
Stripe processes your data as an independent controller for the payment itself, including fraud prevention, under its own privacy policy (stripe.com/privacy). Stripe may transfer data to the United States under the safeguards described there.
Deleting your account cancels the subscription; nothing further is charged.
How long things are kept
Your entries: on the server until you delete the account; on a device until you sign out. Account sign-ins: 30 days at most, and you can end one earlier. A record of sign-in attempts, holding only a hashed address and whether it succeeded, for 30 days, to stop password guessing. A password-reset link: one hour. Usage counts: 400 days. Subscription records: for as long as the subscription exists and ten years afterwards, for Swiss bookkeeping rules.
If something goes wrong
If a security incident were ever likely to put your data at risk, the operator would report it to the FDPIC as required by Art. 24 FADP and tell you directly where that helps protect you, saying what happened, what it means and what has been done.
Changes
When this notice changes in a way that matters, the app shows the new version once and asks you to accept it before continuing. The version and date are at the top of this page.