Privacy Notice

Last updated: May 2026

This Privacy Notice explains how Blue Harvest (“we”, “us”) handles personal data when you use SimpleBMICalc (the “Service”). Blue Harvest is the data controller for the personal data described below.

1. Data we collect

• Health inputs you enter (height, weight, age, sex, activity level, body fat, recipes, goals): stored locally on your device by default. We do not transmit this data to our servers.
• Purchase data when you buy Pro: the email address you provide at checkout and a transaction identifier, so we can verify your purchase if you ask us to restore Pro on another device.
• Basic technical data (IP address, browser type, pages visited) collected automatically by our hosting and analytics providers for security, fraud prevention, and product improvement.

2. How we use your data

• Provide the Service and Pro features you purchased (contract performance).
• Verify and restore Pro purchases across devices (contract performance).
• Prevent fraud, abuse, and security incidents (legitimate interest).
• Improve the Service through aggregate usage analytics (legitimate interest).
• Comply with legal, tax, and accounting obligations (legal obligation).

3. Who we share data with

• Paddle.com — our Merchant of Record. Paddle processes your payment, manages billing, handles tax compliance, sends receipts, and handles refunds. Paddle independently collects and controls the payment data you provide at checkout. See Paddle’s privacy policy.
• Hosting and infrastructure providers who run our website and database under written data-processing agreements.
• Authorities where required by law, court order, or to protect our legal rights.
• Professional advisers (legal, accounting) under a duty of confidentiality.

We do not sell your personal data.

4. Data retention

Health inputs you enter into the Service remain on your device until you clear them. Purchase records (email, transaction id) are retained for the duration required by applicable tax and accounting law (typically 7 years), after which they are deleted or anonymised. You can request deletion at any time, subject to legal retention requirements.

5. International transfers

Our service providers may process data outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, contact us through the support contact on this site. For payment-related data, you can also contact Paddle directly at paddle.net. You also have the right to complain to your local data protection authority.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and limiting the data we collect in the first place.

8. Cookies

SimpleBMICalc uses essential browser storage (localStorage) to remember your settings and Pro status on your device. We may use basic analytics cookies to understand aggregate usage. We do not use advertising or cross-site tracking cookies.

9. Changes

We may update this Privacy Notice from time to time. Material changes will be reflected by the “Last updated” date above.