Privacy Policy

Last updated: October 20, 2026

This Policy explains what personal data Bodylab, Inc. ("Bodylab," "we," "us") collects through the Bodylab app and the bodylab.coach website (the "Service"), how we use it, who we share it with, and what rights you have. It includes our consumer health data privacy policy (Section 3) and our U.S. state privacy rights notice, which serves as the notice at collection for California residents (Sections 10 and 11). We do not sell your personal data or share it for advertising.

1. Who we are

Your data is controlled by Bodylab, Inc., a Delaware corporation in the United States, located at 1910 SE 7th St, Cape Coral, FL 33990, United States. It operates the Bodylab app and the bodylab.coach website.

For any questions about this Policy or your data, email us at support@bodylab.coach.

2. What data we collect

Account data: email, name, password (stored hashed, never in plain text), language, time zone, and email verification status. If you sign in with Google, we receive your email, your name, and an account identifier from Google.

If you sign in with Apple (Sign in with Apple), we receive an account identifier from Apple and, only the first time, the name and email you choose to share. If you choose to hide your email, Apple gives us a private relay address (@privaterelay.appleid.com) instead of your real email, and the emails we send you reach you through Apple. We also store, encrypted, a token Apple gives us at sign-in, solely so we can revoke Bodylab's access to your Apple ID when you delete your account.

Health and body data (including, if you connect them, data from Apple Health or Health Connect): described in detail in Section 3.

Pre-registration questionnaire data: your answers to the initial questionnaire (including your measurements and goal) are stored on your device while you complete it, along with a random anonymous identifier that lets us link that questionnaire to your account if you sign up. If you give us your email before creating an account, we use it to link your projection to you and remind you of your plan.

Location data (GPS): only while you record an activity (walk, run, ride), to map the route and calculate distance, pace, and elevation. We do not track your location outside an active recording.

Voice: the audio of your voice messages and voice conversations with the coach, which is transcribed so the coach can reply.

Content you send us: your messages to the coach, notes, and what you write to support.

Subscription and payment data: plan, billing period, dates, and subscription status. Your card details are processed directly by Stripe (web purchases) or Apple and Google (in-app purchases); we never see or store them.

Referral data: if you arrive through a creator's or partner's link, that link's code, to attribute your subscription to them.

Technical and usage data: device model, operating system, IP address, push notification identifiers, screens and features you use, error reports, and performance metrics, to operate, debug, and improve the Service.

3. Consumer health data

This section is our consumer health data privacy policy, within the meaning of Washington's My Health My Data Act and the equivalent laws of Nevada, Connecticut, and other states.

What we collect: photos of your body, weight, height, measurements, estimated body composition, age and sex, fitness goal, injuries and discomfort, answers to the physical activity readiness questionnaire (PAR-Q), meals you log or photograph with their estimated macros, workouts, walks and runs (including GPS during the activity), the audio of your voice when you talk to the coach, and, if you connect them, the activity, sleep, and heart data from Apple Health or Health Connect detailed below. From this data the Service derives other data, such as your training level, your calorie and macro targets, and your progress.

Why: only to provide the Service you asked for: building and adjusting your plan, estimating your meals, commenting on your activities, giving your coach context, and showing your progress. Also to keep the Service secure and comply with the law. We do not use it for advertising and we do not sell it.

Where it comes from: from you (what you enter, photograph, or say) from your device (GPS, while you record an activity), and, if you allow it, from Apple Health or Health Connect.

Who we share it with: only with the providers that help us deliver the Service and process it on our instructions: Google (Gemini models, which analyze your photos, meals, and context to generate plans, estimates, and coach replies), OpenAI (transcribes the audio of your voice), and our hosting and storage providers (Netcup, Neon, and Backblaze). The full list of providers is in Section 6. We may also disclose it if the law requires us to.

Consent: we collect and use this data only with your explicit consent, which you give with a dedicated checkbox when you sign up, separate from accepting the Terms.

Apple Health and Health Connect: what we read. If you allow it in the app, Bodylab reads the following from Apple Health (on iPhone) or Health Connect (on Android): steps, active calories, sleep (duration, the times you fell asleep and woke up, and sleep stages), resting heart rate, average and maximum heart rate for the day, and heart rate variability (HRV). This data may come from the phone itself or from a watch or band that syncs with Apple Health or Health Connect (for example, Apple Watch, Garmin, Fitbit, Samsung, or Oura). With each data point we store which source it came from and, when available, the type of device.

Only with your permission, and read-only. Connecting Apple Health or Health Connect is optional: Bodylab works the same if you don't. You choose which data types to share on your phone's permission screen, and you can revoke permission at any time in the Health app (on iPhone) or in Health Connect settings (on Android). Bodylab never writes, changes, or deletes data in Apple Health or Health Connect.

What we use it for: only to adjust your workout for the day and your plan (for example, your daily readiness score) and so your coach can take it into account in its recommendations. To generate those recommendations, this data may be processed with our artificial intelligence providers, Google (Gemini models) and OpenAI (which only transcribes your voice, so it only receives what you say to the coach out loud), with the consent to process health data that you give when you sign up. These providers process it only on our instructions, and neither they nor we use this data to train artificial intelligence models.

Never for advertising or sale: we never use Apple Health or Health Connect data for advertising or marketing, we never sell it, and we do not share it with third parties, except with the providers that help us deliver the Service on our instructions (Section 6) or when the law requires us to.

How long we keep it: we keep data imported from Apple Health and Health Connect for 12 months from the day it refers to, and then we delete it. When you disconnect Apple Health or Health Connect in the app, you can choose to delete everything imported. If you delete your account, it is deleted along with the rest of your data within 30 days.

The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

Your rights over this data: you can confirm what health data we hold and who we share it with, get a copy, ask us to delete it, and withdraw your consent. Because this data is essential to the Service, withdrawing consent means deleting your account; the exception is Apple Health and Health Connect data, which you can disconnect at any time without deleting your account. To delete it, delete your account from Settings in the app or at bodylab.coach/delete-account, or email support@bodylab.coach: we purge it within 30 days. We respond to your request within 45 days, and if we decline it you can appeal by emailing the same address.

4. Cookies and on-device storage

On the website we only use our own cookies and storage, needed for it to work. We do not use advertising cookies, pixels, or third-party trackers.

Cookies: your chosen language (1 year), your approximate country based on IP to show prices for your region (1 year), and, if you arrive through a creator's or partner's link, an attribution cookie (90 days) to recognize that referral if you subscribe. The creator or partner sees aggregated statistics, never your personal data.

Browser storage: the draft of the initial questionnaire (so you don't lose your answers if you reload the page), the random anonymous identifier from Section 2, and, during the session, the parameters of the campaign you came from (UTM).

You can clear cookies and storage in your browser settings; the website keeps working with the default values. We do not currently respond to "Do Not Track" signals, but since we do no advertising tracking there is nothing for those signals to turn off.

5. How we use your data

To provide the Service: building and adapting your plan, estimating your meals' macros, commenting on your activities, giving your coach real context, and showing your progress.

To run your account: sign-in, email verification, billing and subscription, notifications you have turned on, and support.

To improve the Service: understanding which features are used and detecting errors, preferably with aggregated or de-identified data, which we do not attempt to re-identify.

Security and compliance: preventing fraud and abuse, protecting our rights and yours, and complying with the law and valid requests from authorities.

Automated decisions: your plans, estimates, and coach replies are generated automatically by AI models. We do not make automated decisions that produce legal effects on you or similarly significant effects; you can always email us to have a person review a result.

7. We do not sell or share your data for advertising

We do not sell your personal data, share it for cross-context behavioral advertising, run targeted advertising, or use your data for profiling that produces legal or similarly significant effects. So there is nothing you need to opt out of; if your browser sends a Global Privacy Control signal, we treat it as a valid opt-out request.

We have no actual knowledge of collecting data from anyone under 16: the Service is only for people 18 and older.

8. How long we keep your data

We keep your data while your account is active. If you delete your account, it is deactivated immediately and your personal data is permanently purged within the following 30 days. We only keep longer what a legal obligation requires: billing records are anonymized (amounts and dates with no link to your identity), and Stripe, Apple, and Google keep their own payment records under their obligations.

Pre-registration data: anonymous questionnaire events are kept for 3 months. If you left your email and never created an account, we delete it within 6 months at most, and you can ask us to delete it sooner at any time.

Apple Health and Health Connect data: 12 months, as explained in Section 3.

9. Your choices

Access and copy: in the app you can request a full export of your data, delivered by email (up to once a day).

Correction: you can correct your profile, measurements, and logs in the app.

Deletion: you can delete your account from Settings in the app or at bodylab.coach/delete-account, with no outside steps.

Withdrawing consent: see Section 3.

Apple Health and Health Connect: you can disconnect them from Settings in the app, with the option to delete what was imported, or revoke permission in the Health app or in Health Connect.

Location and notifications: you can remove location or notification permission in your phone's settings; without GPS, routes are not recorded.

Emails: account emails (verification, payments, trial reminders) are part of the Service. If we ever send you marketing emails, you will be able to unsubscribe from the email itself.

10. U.S. state privacy rights

Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Nevada, or Washington), you may have the right to: know what categories of data we collect, where from, why, and who we share them with; access them and get a portable copy; correct them; delete them; opt out of sale, targeted advertising, and certain profiling (which we do not do); limit the use of your sensitive data (we only use it to provide the Service you asked for, not to infer characteristics about you for other purposes); and appeal if we decline your request.

How to exercise them: use the options in the app or email support@bodylab.coach from your account email. To protect your data, we verify your identity with your account email before responding. You may designate an authorized agent; we will ask for proof that they act on your behalf. We respond within the legal deadlines (generally 45 days). To appeal a response, email the same address with the subject "Appeal."

We will not discriminate against you for exercising these rights: we will not charge you differently or give you a worse service.

California (Shine the Light): we do not share personal data with third parties for their own direct marketing. Nevada: we do not sell personal data; if you still want to register an opt-out request, email us.

11. Categories of data (California notice)

In the past 12 months we collected these categories of personal information (as defined in California Civil Code §1798.140), from the sources and for the purposes described above. We did not sell any of them or share any for advertising. We disclosed them only to the providers in Section 6, for business purposes:

Identifiers (name, email, account identifier, IP address, device and notification identifiers): to hosting, email, payment, notification, and error-reporting providers.

Customer records and commercial information (plan, subscription and payment history, referral code): to payment and hosting providers.

Protected classification characteristics (age, sex): to AI and hosting providers.

Sensitive personal information: health data (Section 3), precise geolocation during a recorded activity, and account credentials. Health data and geolocation go to AI, map, and hosting providers; credentials are not disclosed.

Audio and visual information (body and meal photos, the audio of your voice): to AI, transcription, and storage providers.

Internet or app activity (screens and features used, errors): to hosting and error-reporting providers.

Inferences (training level, goals, progress): to AI and hosting providers.

We keep each category as described in Section 8.

12. Security

We use encryption in transit (TLS) for all communications, per-user data isolation in the database (row-level security), short-lived sessions with token revocation, and restricted internal access. No system is infallible and we cannot guarantee absolute security, but the Service is designed to minimize risk.

13. Where your data is processed

Bodylab is based in the United States and your data is processed mainly there. Some providers may process it in other countries. If you use the Service from outside the U.S., your data is transferred to the U.S., where privacy laws may differ from those of your country.