YOURJIMBFF

Privacy Policy

Updated 5 November 2026

Who this is

YOURJIMBFF is a coaching app run by Yusuf Richardson. If you want to reach a human about anything on this page, email yusuf@yourjimbff.com, or text Yusuf on the number he coaches you from.

What the app holds

What you tell us when you set up: your name, your phone number if you choose to give it, your date of birth, your height, your weight, your goal weight, how and how often you train, and anything you write in your own words.

What you log day to day: food — typed, photographed, or read off a label — workouts and sets, weigh-ins, steps, sleep, energy check-ins, journal entries and progress photos.

What you say: your messages to Jim in the app, and anything you send Yusuf.

What Yusuf leaves you: voice notes he records on your meals and workouts, and the calls you book with him, with the time and what you want to go over.

How you get in: your email and password (older accounts used an access code), and a sign-in token your own phone keeps so you are not asked every time.

Before you make an account: if you log a meal first, it is saved under a private code that only your phone holds. Make an account and it carries over into it.

What it does not hold: your card number. Payments run through Stripe and card details never touch this app.

This is health information, and it is treated that way

Your weight, your body, your food, your sleep and your progress photos are health information about you. It is the most sensitive thing in here and it is the reason the rest of this page exists.

It is never sold. It is never used for advertising. It is never handed to an employer, an insurer or a data broker. There are no advertising trackers and no analytics SDKs anywhere in this app.

What it is used for

One thing: coaching you.

That means showing you your own numbers, working out your targets, writing and adjusting your programme, letting Yusuf read your logs so that he is coaching off something real, and sending you the occasional text about your own account.

Booking a call

The booking pages ask for your name, your phone number, your age, height and weight, your goal, and what you need help with, so Yusuf can come to the call ready. That goes to the same database as the app, is seen by Yusuf only, and is kept until you ask for it to be deleted. Email yusuf@yourjimbff.com and it goes.

The Hour is booked and paid through Calendly. Calendly takes your name, your email, the time you pick and your payment, under its own privacy policy.

Who else touches it

The app is built on other people’s infrastructure, and being honest about your data means naming them. Each one gets only what its part of the job needs, and only to do that job for this app.

Supabase — the database, and the private storage your photos live in.

Netlify — hosting, and the small server functions that sign you in and delete your account.

Anthropic — the AI. When you describe or photograph a meal or a workout, or send a message to Jim, that text or image goes to Anthropic’s API so it can come back as numbers and answers. It is sent through the API, which is not used to train their models.

Stripe — payments. When you pay for Jim BFF, you pay on Stripe’s own page. They hold the card details; this app never sees them.

Calendly — booking and paying for the Hour.

Resend — emails the app sends to Yusuf, such as a new booking.

Google — the app’s lettering is loaded from Google Fonts, which sees your device’s internet address when it loads. Password-reset emails are sent through Google’s email service from yusuf@yourjimbff.com.

Apple — if you allow notifications, Apple delivers them to your phone. It is sent the notification and nothing else.

Apple Health — on an iPhone, if you allow it, the app reads your steps, your weight and your workouts from Apple Health so your day fills in on its own. It only reads; it never writes to Apple Health. What it reads is kept like everything else you log, is never sold and is never used for advertising. You can turn it off in the Health app at any time.

Cloudflare — if you import your steps from a file, a small reading tool is loaded from Cloudflare’s library. It is sent nothing about you.

USDA FoodData Central — public nutrition lookups. It is given the name of a food and nothing at all about you.

ElevenLabs — the voice that can read Jim’s replies out loud. It is sent the words of the reply and nothing else.

Text messages come from Yusuf’s own phone. There is no SMS company sitting in the middle of them.

Who can see you inside the app

You, and Yusuf, who is your coach. That is true on the free app too: Yusuf can see what you log.

Other clients cannot see your logs, your photos, your messages or your name. That is enforced by the database itself — every table checks who is asking before it answers — and not by what a screen happens to show.

How long it is kept

For as long as your account is open. When you delete your account it goes, and what that covers is listed below.

One record is kept after that: what was paid and when, because the law requires payment records to be kept for taxes. It holds no logs, no photos and no messages.

Backups held by our database provider may keep a copy for a short window before they roll over.

What you can do about it

See it. Most of it is already on your own screens; ask for the rest.

Correct it. In Settings, or tell Yusuf.

Take it with you. Ask and you will be sent a copy.

Take your agreement back. Delete your account, or email yusuf@yourjimbff.com. Nothing of yours is sent to Anthropic or anyone else after that.

Delete it. Settings, at the bottom: "Delete Account and All Data". It removes your logs, your photos, your voice notes, your messages, your calls and your account, and it stops a Jim BFF subscription if you have one. It cannot be undone, and it only ever touches your own data.

Depending on where you live you may have further rights — GDPR, UK GDPR, CCPA and CPRA and the like. Email yusuf@yourjimbff.com and they will be honoured.

Security, said plainly

Everything travels encrypted. Every table is locked so that a request can only return your own rows, and your photos sit in a private bucket that needs your own signed session to open.

The honest part: your password, or your access code on an older account, is what gets you in. Do not share it, and tell Yusuf if you think somebody else has it.

Children

This app is for adults, 18 and over. We do not knowingly collect anything from anyone under 18. Sign-up stops anyone who gives a birthday under 18. A parent who thinks their child has an account can email yusuf@yourjimbff.com and it will be deleted.

If this changes

If anything here changes in a way that matters, this screen comes back and you will be asked to read and agree to it again, exactly as you were the first time.

See also the Terms of Use. Questions: yusuf@yourjimbff.com