Legal information
Privacy
Last updated: September 18, 2026
This English translation is provided for convenience only. The Bulgarian version is the legally binding text.
1. Who we are
My Better You - LIFE is a digital platform for personalized health and an active lifestyle, built for men and women. It provides a health assessment, individual nutrition and workout plans, a digital Personal Coach, a supplement shop, and specialized health modules, including “My Cycle” for tracking the menstrual cycle and symptoms in women.
The controller of your personal data is the My Better You - LIFE team. For questions about this policy, write to contact@mybetteryou-life.com.
This policy is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act. The supervisory authority in Bulgaria is the Commission for Personal Data Protection (CPDP, cpdp.bg).
2. What data we collect
Profile data: name, email, age, weight, height, activity level, and goals, entered at sign-up and in the Assessment.
Health data (a “special category” under Art. 9 GDPR):menstrual cycle dates, phase (perimenopause, menopause), symptoms, hormonal status, and health conditions that you enter voluntarily in the “My Cycle” module and in the assessment — see the full section below.
Order and payment data: delivery address and payment details, processed directly by our payment partner — we do not store bank card numbers.
Technical data: cookies, IP address, and platform usage data.
3. Health data from “My Cycle” and symptoms — a special category under Art. 9 GDPR
3.1 Why this data is a “special category”
The data about your menstrual cycle, the phase of your hormonal transition, and the symptoms you enter qualify as health data within the meaning of Art. 4(15) and Art. 9(1) GDPR — a category of data the Regulation prohibits processing, unless one of the exceptions in Art. 9(2) applies. Because of the sensitive nature of this type of data — and women’s health apps worldwide are subject to heightened regulatory attention — we process it with the additional care described below.
3.2 Legal basis — explicit, separate consent (Art. 9(2)(a) GDPR)
We process your health data solely on the basis of your explicit consent. Unlike the general acceptance of the Terms of Use, this consent is:
- Separate — it is not tied to the general terms and is never pre-ticked (the checkbox is never checked by default).
- Specific — it concerns precisely the cycle, symptom, and hormonal status data, not data in general.
- Informed — before you give it, we explain what is collected and why.
- Freely given and revocable — you can decline or withdraw your consent at any time, without affecting your use of the platform features that do not require health data.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR). After withdrawal, the “My Cycle” module stops generating predictions and personalized recommendations tied to your hormonal stage until the data is entered again.
3.3 What we use this data for — and what we never use it for
The data from “My Cycle” and your symptoms is used solely for:
- predicting your cycle and the phase of your hormonal transition;
- personalizing your nutrition and workout plan according to your phase and symptoms;
- the Personal Coach recommendations and tracking your symptoms over time.
3.4 Minimization and retention
We collect only the data necessary for the stated purposes (Art. 5(1)(c) GDPR). Health data is stored for as long as you maintain an active account with consent given; when your account is deleted or consent is withdrawn, it is erased within 30 days, except for restricted-access backups, which are overwritten on a fixed cycle.
3.5 Security
Health data is stored encrypted in a database hosted in the European Union (Frankfurt, Germany), with access restricted to personnel bound by a duty of confidentiality under Art. 9(3) GDPR. We apply access controls, encrypted connections (TLS), and regular reviews of access rights.
3.6 Automated recommendations
Plans and recommendations are generated automatically from the data you enter and from rules based on clinical guidelines (see “Scientific basis”). This is not automated decision-making with legal or similarly significant effects within the meaning of Art. 22 GDPR — the recommendations are informative, not binding, and you can request human review at any time by writing to contact@mybetteryou-life.com.
4. Who we share data with
We share data only with processors acting on our instructions under a data processing agreement (Art. 28 GDPR), never for their own marketing purposes:
| Data processor | Role | Location |
|---|---|---|
| Supabase | Database hosting and authentication | EU (Frankfurt, Germany) |
| Stripe | Payment processing | EU / international, with certified safeguards |
| Resend | Transactional email delivery | Outside the EEA, with contractual safeguards |
| Vercel | Application hosting | International, with contractual safeguards |
Where a processor is located outside the EU/EEA, we ensure appropriate safeguards under Art. 46 GDPR — Standard Contractual Clauses approved by the European Commission, or a transfer under an adequacy decision (e.g. the EU-U.S. Data Privacy Framework).
5. Legal basis for the remaining data
We process profile and order data on the basis of contract performance (Art. 6(1)(b) GDPR). We send marketing messages only with your consent (Art. 6(1)(a)), which you can withdraw at any time. We retain accounting documents on the basis of a legal obligation (point (c)).
6. Your rights
At any time, for all categories of data, you have the right to:
- Access — receive a copy of your data (Art. 15).
- Rectification of inaccurate data (Art. 16).
- Erasure (“the right to be forgotten”, Art. 17).
- Restriction of processing (Art. 18).
- Objection to processing based on legitimate interest (Art. 21).
- Portability of your data in a structured format (Art. 20).
- Withdrawal of consent — at any time, without affecting past processing (Art. 7(3)).
You can exercise part of your rights yourself, with one click: Manage consents (linked in the footer of every page) — to withdraw your health data consent and change your cookie choice. Marketing emails are stopped from Settings → Notifications or via the unsubscribe button in every email. For a copy of your data (Art. 20), write to us — we send it in a machine-readable format within the statutory period.
Closing your account (Art. 17): found in My account → Notifications and consents, at the bottom of the page, under “Need anything else?”. You can also go directly: close your account. If you prefer, just write to us at contact@mybetteryou-life.com— we’ll do it for you.
You can also exercise your rights in writing at contact@mybetteryou-life.com. We reply within 30 days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or with the supervisory authority in the country where you live.
7. Children
The platform is intended for adult users. We do not knowingly collect data of persons under 18. If we learn that we have received data of a minor without parental/guardian consent, we delete it immediately.
8. In the event of a data breach
In the event of an incident threatening the security of personal data, we will notify the CPDP within 72 hours of becoming aware (Art. 33 GDPR), and — where there is a high risk to your rights and freedoms — you personally, without undue delay (Art. 34 GDPR).
9. Cookies
A plain visit sets no cookies at all. They appear only once you do something specific — sign in, switch language, or arrive through a partner link. Here is the full list:
| Cookie | What it does | Lifetime | Consent |
|---|---|---|---|
| sb-…-auth-token | Keeps you signed in. | while signed in | not required |
| mbyl-lang | Remembers the language you use. | 1 year | not required |
| mbyl-units, mbyl-currency | Remember the units and currency you chose. | 1 year | not required |
| mbyl-acct-lang | Remembers your account language, so you see the site in it from abroad too. | 1 year | not required |
| mbyl-role | Remembers whether you are a subscriber, a coach’s client or a coach, so your own pages open for you. | until you close the browser | not required |
| mbyl-app | Marks that you opened the site from the mobile app, so it can show you the way back. | until you close the browser | not required |
| mbyl_consent | Remembers your choice in this banner. | 1 year | not required |
| mby_aff | Records which partner you came through, so their commission is credited. | 60 days | required |
| mby_ref | The same, for the “invite a friend” link. | 30 days | required |
| _fbp, _fbc (Meta) | Measures our Facebook and Instagram ads. | up to 90 days | required |
| Stripe | Payment security. Set by Stripe on their own page. | per Stripe’s policy | not required |
The cookies marked “required” are not set before you press “Accept” in the banner. If you decline, partner links still work — the connection to the partner is simply remembered for your current visit only, not for 60 days.
You can change your choice at any time from Manage consents — the link sits in the footer of every page.
10. Changes to this policy
If we change the way we process personal data — especially special-category health data — we will update this page and notify active users by email before the change takes effect.
11. Contact
For questions about your personal data, write to us at contact@mybetteryou-life.com.