Your data, clearly explained
Privacy Policy
Boddy keeps app records on your iPhone and, when you sign in, in your account so you can restore them on another device. This policy explains how those records and optional services are handled.
Last updated October 19, 2026Overview and contact
Boddy is a fitness and nutrition app for workout tracking, camera-based form coaching, meal logging, and progress tracking. Boddy is operated by Nurlan Gasimov, Garabagh Str. 72a, Baku, Azerbaijan (“Boddy,” “we,” “us”). We are the controller of the personal information described in this policy.
Privacy questions and requests can be sent to support@yourboddy.com. You can also visit the Boddy support page. Washington, Nevada, and other U.S. residents can also read our Consumer Health Data Privacy Policy.
Information you provide
You may provide your name, email address, age or birth date, sex, height, weight, goals, experience level, injuries, equipment, diet preferences, allergies, workouts, routines, meals, spoken or typed meal descriptions, meal and recipe photos, water logs, body-weight logs, progress photos, coaching results, coach-chat questions and answers, and workout goals you type or say.
This information is stored on your device. If you sign in, app records and meal, recipe, and progress photo files are also stored in your Boddy account through our cloud provider so you can restore them on another device. Photo files are kept in private account storage that other users cannot access.
Accounts and authentication
Boddy supports email/password sign-in, Sign in with Apple, and Google sign-in. Cloud authentication and storage providers may process your email address, account identifier, authentication tokens, and sign-in provider information to provide sign-in, sync, restore, and deletion. Delete Account removes your account, synced records including coach-chat history, account photo files, and local app data from the device. If the account used Sign in with Apple, Boddy also requests revocation of the Apple authorization token.
Shape Boddy community board
When you post an idea, bug report, or comment on Shape Boddy, its text becomes visible to other visitors right away. Other members can show they experience a bug or support an idea. Your email and app or device details are kept private from other members. Screenshots are stored privately; they appear on the board only if you choose to share them and the post has not been removed. Remove personal information from text and screenshots before submitting.
You can edit or delete your own posts and comments, report content, and hide another member's posts and comments. We review the board and reports and may remove content or restrict accounts that misuse the board. Deleting your account removes your board posts, comments, and uploaded screenshots from active storage.
Apple Health
With your permission, Boddy can read body mass, height, step count, heart rate, resting heart rate, active energy, sleep, workouts, date of birth, and biological sex, and can write workouts, active energy, dietary energy, protein, carbohydrates, fat, water, and body mass. HealthKit-derived data is not used for advertising or analytics.
Sleep is used on your iPhone to set how hard your workouts push, for example easing a week after several short nights. When you talk to the coach, your hours asleep last night and your 7-night average are sent with your question so the coach can answer about your recovery. Nightly sleep data is not stored in your account.
Camera, photos, and food lookup
Live form coaching analyzes camera frames on your device; live coaching video frames are not uploaded. When you choose meal-photo logging, the selected image is processed by third-party AI and nutrition-data providers to identify foods and estimate nutrition. A copy of a photo-logged meal's image is kept on your iPhone and in your account with the meal. Recipe and progress photos are also copied to your account when you sign in. Barcode lookup sends the barcode value to a nutrition database provider. An AI provider may retain request data for up to 30 days for security and abuse prevention. You agree to this AI processing when you sign up; people who joined earlier are asked before their first meal-photo analysis.
Spoken meals, coach chat, and workout goals
For spoken meal logging, speech recognition turns your words into text on your device. The words you say or type are sent to Boddy's proxy and an AI provider to identify foods and amounts. Your meal description and saved meal are kept on your iPhone and in your account when you sign in. You agree to this AI processing when you sign up; people who joined earlier are asked before first use.
When you speak to the coach during a workout, your speech is transcribed on your device. Your question and relevant context, such as your workout, today's and recent food logs, your weight trend, and your sleep from Apple Health, may be sent to our proxy and an AI provider to generate an answer. The proxy does not keep this context. Your questions and the coach's answers, including answers produced on your device, are saved in your account for personalized coaching and answer-quality review. Raw microphone recordings from spoken meals and coach chat are not stored in your account.
When you describe a workout goal, for example “3 days a week, bigger arms, bad lower back,” you can type it or say it; speech is transcribed on your device. With your permission, the text, your app language, and basic training details (days per week, equipment, experience level, and the injury areas in your profile) are sent to our proxy and an AI provider to turn the goal into plan settings. Neither the proxy nor Boddy keeps the goal text: it is not saved to your account, and injuries mentioned in it only shape that week’s exercises. The plan it builds is saved like any other routine. Boddy asks before the first use; if you decline, the goal is read on your device instead and nothing is sent.
Custom voice processing
When you create a custom coach voice, Boddy extracts a short audio sample on your device and, with your explicit permission, sends it to a third-party voice processing provider for voice enhancement and speech generation. Temporary processing copies are automatically deleted within two days. The voice sample and generated coach clips you keep are stored on your device and are removed when you delete the voice, delete your account, or uninstall the app.
Analytics, session replay, and movement data
If you opt in, Boddy sends limited product analytics to an analytics provider using a random analytics ID stored in the iOS Keychain. Events are designed not to include names, email, free text, HealthKit values, exact weight or nutrition values, photos, or video. Analytics is off by default and can be disabled or reset in Profile → Preferences → Privacy.
When you enable product analytics, our analytics provider may also create screenshot-style session recordings of in-app activity so Boddy can understand navigation, errors, and where people get stuck. Text inputs and images are masked, camera previews are blocked, and HealthKit-derived values shown on Progress cards are obscured. Recordings use the same random analytics ID and are not connected to your Boddy account identity. Disabling analytics in Profile → Preferences → Privacy stops both product events and session recordings.
Advertising measurement: if you opt in to analytics, Boddy also uses TikTok’s app-events SDK to measure whether our TikTok ads lead to installs and sign-ups. TikTok may receive app install and open events, device and network information such as your IP address and device model, and these events: account registration, free-trial start, and subscription purchase (with the product, price, and currency). Your device’s advertising identifier is included only if you allow tracking when iOS asks. TikTok does not receive your name, email, health or fitness data, photos, or app content. Turning analytics off in Profile → Preferences → Privacy stops this sharing, and you can deny or change tracking permission in iOS Settings → Privacy & Security → Tracking. TikTok handles this data under its own privacy policy.
Movement-data sharing is on by default and can be turned off in Profile → Preferences → Privacy. When you are signed in and sharing is enabled, Boddy may upload stick-figure joint positions and confidence values from unusual coached sets to improve form coaching. These traces are stored in a private folder linked to your account. They do not include camera pixels, video, photos, audio, your name, or your email address.
Subscriptions
Purchases are processed by Apple through the App Store. A subscription-management provider processes your Boddy account identifier, product identifiers, entitlement status, and purchase history so Boddy can unlock premium access and restore purchases. If analytics is enabled, subscription lifecycle events such as trial starts, conversions, renewals, and cancellations may be sent to our analytics provider using Boddy's random analytics ID. Boddy does not receive your full payment-card details.
Crash reporting and performance diagnostics
Boddy uses diagnostics service providers and Apple's platform diagnostics to receive crash, app-hang, launch, and performance information needed to find defects and keep the app reliable. Reports can include technical details such as the app version, device model, operating-system version, stack traces, and timing information. Boddy does not attach your account ID, name, email address, screenshots, or screen hierarchy to these reports. Diagnostics are not linked to your identity and are not used for tracking or advertising.
How we share information
Boddy does not sell or rent personal information. We disclose information only as needed to provide requested features, operate and secure the service, process purchases, comply with law, or when you direct us to do so. Recipient categories include:
- Cloud infrastructure, authentication, and account-storage providers
- Third-party AI providers used for features you explicitly request
- Nutrition information and barcode-database providers
- Product analytics and masked session-recording providers, when enabled
- Advertising-measurement partners (TikTok), when analytics is enabled
- Subscription-management, payment, and entitlement providers
- Crash-reporting, security, and performance-diagnostics providers
- Platform services and integrations you choose to enable
We require service providers to process information only for the purposes described in this policy and to protect it consistently with this policy and applicable law.
If Boddy is involved in a merger, acquisition, financing, reorganization, or sale of assets, including a transfer to a company formed to operate Boddy, personal information may be transferred to the acquirer or successor as part of that transaction, subject to this policy. We may also disclose information when we believe in good faith that the law requires it, or to protect the rights, safety, and security of our users, Boddy, or others.
We may create de-identified or aggregated data, such as anonymous usage counts, and use it to improve Boddy. We do not attempt to re-identify de-identified data.
Why we use information (legal bases)
Where laws such as the EU and UK GDPR apply, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Your account, sync, restore, and deletion; the features you use; subscriptions | Performance of our contract with you |
| Health and fitness data you enter or connect (such as weight, injuries, sleep, and heart rate) and Apple Health access | Your explicit consent, given on the welcome screen when you sign up; withdraw it by deleting your account or emailing us |
| AI meal recognition, coach chat, custom voices, and workout goals | Your consent, given on the welcome screen (people who joined earlier are asked before first use); workout-goal reading is asked before its first use |
| Product analytics, masked session recordings, and advertising measurement | Your consent (off by default) |
| Movement traces to improve form coaching | Our legitimate interest in making coaching accurate; you can object by turning sharing off in Profile → Preferences → Privacy |
| Crash reports, security, and fraud prevention | Our legitimate interest in keeping Boddy reliable and secure |
| Responding to legal requests and keeping required records | Compliance with legal obligations |
Boddy does not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Workout and nutrition recommendations are suggestions you can change at any time.
Security and international transfers
We use technical and organizational safeguards designed to protect personal information, including encryption in transit, private per-account storage, and access controls. No system is perfectly secure, so we cannot guarantee absolute security.
Our service providers may process information in the United States and other countries whose data-protection laws may differ from yours. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.
Retention and your choices
Local data remains until you delete it or uninstall the app. Synced records, meal descriptions, photo files, and coach-chat history remain until account deletion. Movement traces are kept for up to 90 days unless promoted into a test fixture. Product analytics, masked session recordings, and diagnostics are retained only for configured operational periods needed to understand product use, investigate defects, and secure the service. AI providers may retain request data under their service terms. Temporary voice-processing copies are deleted automatically within two days and can be removed sooner when the app successfully sends a deletion request.
- Disable or reset analytics and session recordings in Profile → Preferences → Privacy.
- Disable movement-data sharing in Profile → Preferences → Privacy.
- Manage Health, camera, photo, and notification permissions in iOS Settings.
- Delete your account from Profile.
- Email support@yourboddy.com for privacy help.
Your privacy rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a portable copy (you can download your workouts, meals, and measurements as a JSON file from Profile → Download My Data);
- correct inaccurate information (most of it can be edited in the app);
- delete your information (Delete Account in Profile removes your account data);
- restrict or object to certain processing, including movement-data sharing;
- withdraw consent at any time, without affecting earlier processing;
- appeal our decision if we decline your request.
To make a request, email support@yourboddy.com from the address on your account. We may need to verify your identity before acting, and we will respond within the time the law requires. You may use an authorized agent where the law allows; we may ask for proof of their authority. We will not discriminate against you for exercising these rights.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you can also complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). To appeal a denied request in a U.S. state that provides appeals, reply to our decision with “Appeal” in the subject line; if you disagree with the outcome, you can contact your state attorney general.
U.S. state privacy notice
This section applies to residents of California and other U.S. states with comprehensive privacy laws. In the past 12 months we collected the categories below, from you, your device, and services you connect, for the purposes described in this policy.
| Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email, account ID, random analytics ID, device and advertising identifiers | Cloud, analytics, subscription, and advertising-measurement providers |
| Characteristics and personal details | Age or birth date, sex | Cloud and AI providers |
| Commercial information | Subscription and purchase history | Apple, subscription and advertising-measurement providers |
| Internet and app activity | Feature usage, masked session recordings, crash reports | Analytics and diagnostics providers |
| Audio and visual information | Meal, recipe, and progress photos; custom-voice samples | Cloud, AI, and voice-processing providers |
| Sensitive personal information (health) | Weight, height, injuries, sleep, heart rate, workouts, nutrition | Cloud and AI providers, only to provide features you use |
| Inferences | Training level, plan adjustments, nutrition targets | Not disclosed outside our service providers |
We do not sell personal information for money. If you opt in to analytics, our use of TikTok’s SDK to measure ad performance may count as “sharing” for cross-context behavioral advertising or “targeted advertising” under some state laws. To opt out, turn analytics off in Profile → Preferences → Privacy or email us. We use sensitive personal information only to provide the features you request, not to infer characteristics about you, and we do not knowingly sell or share the personal information of consumers under 16. We do not disclose personal information to third parties for their own direct marketing (California “Shine the Light”).
We keep personal information for as long as your account is active or as needed for the purposes in this policy, then delete or de-identify it, as described in Retention and your choices. Health data is covered in more detail in our Consumer Health Data Privacy Policy.
Children and teens
Boddy is not directed to children under 13, and we do not knowingly collect personal information from them. Users aged 13 to 17 should use Boddy with a parent’s or guardian’s involvement, and in the European Economic Area and the UK, users under their country’s age of digital consent (up to 16) need a parent’s or guardian’s consent. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date. If a change is material, we will also tell you in the app or by email before it takes effect.
Contact
Nurlan Gasimov, Garabagh Str. 72a, Baku, Azerbaijan. Email: support@yourboddy.com.