Privacy Policy

Last updated: 2026-09-02

This Policy explains what data Bodylab.coach collects, how we use it and what rights you have.

1. Data we collect

Account data (email, language, timezone). Profile data you enter (goals, measurements, restrictions, injuries). Content you upload (meal or progress photos, voice notes) and coach messages.

Health and fitness data: weight, body measurements, heart rate, steps and sleep, entered manually or synced from Apple Health or Health Connect only with your explicit consent. You can revoke that permission at any time from your device.

Location data (GPS): while you record an activity (walk, run, ride), to draw the route and compute distance, pace and elevation. It is collected only during active tracking and with your permission.

Payment data: processed by Stripe (web), Apple or Google (in-app purchases) depending on where you buy. We never store card numbers on our servers; we only receive your subscription status.

Technical data: device, browser and usage metrics to operate and improve the Service.

2. How we use your data

To generate and adapt your plans, estimate nutrition, give the coach context and operate your account. Meal and progress photos are analyzed with AI to estimate macros and physical progress; voice notes are transcribed so the coach can respond to them.

Some data is processed by AI providers (Google Gemini, OpenAI) acting as data processors: they process your data only on our instructions and to deliver these features.

We do not sell your personal data.

3. Third parties

We use providers for payments (Stripe on the web; Apple and Google for in-app purchases, with RevenueCat to manage subscription status), infrastructure, maps (Mapbox) and AI models (Google Gemini, OpenAI) as data processors. Each processes only the data needed for its function.

4. Your rights

You can access, correct, export or delete your data. From the app itself you can delete your account and download a copy of your data at any time. You can also write to privacy@bodylab.coach. If you are in the EU/EEA, you have GDPR rights.

5. Retention & security

We keep your data while your account is active and as long as needed for legal obligations. If you delete your account, your personal data is deleted or anonymized within a reasonable period. We apply per-user isolation and encryption in transit.

6. Cookies

We use local storage for your session and minimal cookies for language. We do not use third-party advertising cookies.

7. Contact

For any privacy question, write to privacy@bodylab.coach.