Privacy Policy

1. Information We Collect

a. Account Information & Google OAuth Login

We allow users to sign in using Google OAuth provided by Google. When you use Google login, we may receive:

• Your email address
• Your name
• Your profile information (if permitted by your Google settings)
• A unique identifier associated with your Google account

We use this information only to:

• Create and manage your account
• Authenticate your login
• Provide access to BodyFit services

We do not post to your Google account or access your Google data beyond what is necessary for authentication.

b. User Content

• Uploaded body images (front, side, back)

c. Derived Data

• Body composition estimates
• Body scores
• Fitness insights and predictions

d. Usage Data

• Interactions with the platform
• Device and log data

e. Google Health & Fitbit API Data

If you connect your Fitbit/Google Health device integration, we collect and process:

• Activity metrics (daily step counts, active energy burned/calories, active minutes)
• Sleep metrics (sleep duration, sleep stages including deep, light, rem, and awake durations)

This health-related data is accessed solely to calculate your derived health insights, readiness index, sleep index, and customize your training program target loads in the AI Coach dashboard. We store this data securely on our database. We do not use this data for advertising, nor do we sell or share it with third parties.

2. How We Use Your Information

We use your data to:

• Analyze body composition
• Generate scores and predictions
• Provide personalized insights
• Operate and improve the Service
• Manage subscriptions and accounts

We do not sell your personal data.

3. Image Processing & Storage

• Images are securely stored
• Used only for analysis and generating results
• Not used to identify individuals
• Not used for advertising

Images are not used to train AI models.

4. AI & Predictions Disclaimer

Our system uses AI to generate outputs.

• Results are estimates only
• Not guaranteed
• Not medical advice

5. Data Retention

We retain your data while your account is active.

If you delete your account:

• Data is deleted within a reasonable timeframe (typically within 30 days)

6. Your Rights

You have the right to:

• Access your data
• Request deletion
• Close your account

7. Security

We implement industry-standard security measures, including:

• Encryption in transit and at rest
• Secure cloud infrastructure (e.g., Supabase)
• Access controls

However, no system is 100% secure.

8. Age Restriction

BodyFit is intended for users 18 years and older.

We do not knowingly collect data from minors.

9. Third-Party Services

We may use third-party providers for:

• Authentication
• Payment processing
• Infrastructure

These providers have their own privacy policies.

10. Data Sharing

We do not sell or rent your personal data.

We may share data only:

• With service providers
• To comply with legal obligations
• To protect rights and safety

11. Changes to This Policy

We may update this Privacy Policy at any time. Continued use of the Service constitutes acceptance.

12. Google API Limited Use Disclosure

BodyFit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use, transfer, or sell Google user data for serving ads, profiling, retargeting, or personalized advertising.

13. Contact

For privacy inquiries: support@bodyfit.live