· Legal
Last updated 30 September 2026.
VerbaFit does not sell your health data. VerbaFit does not run advertising trackers. VerbaFit does not share your data with advertisers, data brokers, or insurers. If you have ankylosing spondylitis or another chronic inflammatory condition, VerbaFit is free for you, permanently, and that never changes based on what we learn from your data.
Account: your email address, and your name if you choose to set one.
Health data you enter: your body photos, your BASDAI and BASMI self-assessments, your meals and water, your workouts, your sleep and recovery readings, your symptom and flare log, and your injection log.
Device data: crash reports and basic diagnostics, so we can find bugs. No advertising identifiers.
We do not collect your name until you sign in.
We do not run Google Analytics, Meta Pixel, or any advertising tracker on this website or in the app.
We do not collect data from your photo library. Photos reach VerbaFit only when you pick them, one at a time.
Your records are held per-account, and every table is protected by a row-level security rule that only lets your own signed-in session read or write your rows. That rule lives in the database, not in the app, so a bug in the app cannot read another person's data.
Body photos are stored in a private bucket. They are not publicly listable and not indexed by search engines.
The research donation is off unless you turn it on. When you turn it on, you choose which 30-day period to donate, and you can see exactly what leaves your account before you send it.
We remove your name, your email, and your precise timestamps, and we do not donate your photos. Donations are only published in aggregate, and only once a group is large enough that no individual can be picked out of it.
Turning the opt-in off stops future donations. It does not retroactively pull back a period you already sent, and we will say so plainly rather than imply otherwise.
You can export everything we hold about you, correct anything that is wrong, and delete your account entirely, from inside the app, without emailing anyone.
If you are in the EU or UK, that covers GDPR Articles 15, 16, 17 and 20: access, rectification, erasure, and portability.
Payments run through Stripe. VerbaFit never sees or stores your card number. Stripe handles that data under its own policy.
Questions, deletions, or a data request: [email protected].
VerbaFit is a wellness and tracking tool. It does not diagnose, it does not prescribe, and it will never tell you to start, stop, or change a medication. That is a deliberate limit, not an oversight. Treatment decisions belong with your rheumatologist.