Privacy Policy

Last Updated: February 18, 2026

This Privacy Policy describes how Bodyfon ("we," "us," or "our") collects, uses, processes, shares, and protects your information when you use the Bodyfon mobile application, the website at bodyfon.com, and any related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms of Service.

We take your privacy seriously. We are a subscription-funded app. We do not display ads, we do not sell your Personal Data, and we do not share your data for cross-behavioral advertising purposes. You are our customer — not our product.

1. Definitions

"Personal Data" means information that identifies or can reasonably be linked to an individual.

"Health Data" means information you provide relating to your physical characteristics, health, nutrition, goals, or activity, including weight, height, food logs, body composition data, and progress photos.

"Usage Data" means data collected automatically through your use of the Service, including device information, activity logs, crash reports, and analytics data.

"User Content" means photos, images, text, food entries, notes, metadata, or other inputs you upload or submit through the Service.

"Account" means the profile created for you to access the Service.

"Application" means the mobile application titled "Bodyfon."

"Device" means any device used to access the Service.

2. Data We Collect

2.1 Personal Data You Provide

When you create an Account or use the Service, we may collect:

• Email address
• First name and username (if provided)
• Optional profile details you choose to share

2.2 Health and Nutrition Data

To provide calorie estimation, adaptive nutrition planning, and nutrient tracking features, we collect:

• Weight and height
• Food logs and food data, including items photographed, scanned, or logged manually
• Macro and micronutrient intake data
• Body composition data (e.g., body fat, measurements such as waist, hips, arms)
• Progress photos
• Nutrition goals and dietary preferences
• Activity level and exercise information
• Any other health information you choose to enter

You decide which health information to provide. The Service cannot function properly without basic nutrition data such as food entries.

2.3 User Content (Including Photos)

User Content includes:

• Photos of food uploaded for AI-based calorie and nutrient analysis
• Progress photos (front, side, back)
• Weight entries, body measurements, and activity data (e.g., steps)
• Text entries, notes, and logs
• Any other health, wellness, or lifestyle data you choose to enter (e.g., sleep, mood, hydration, menstrual cycle)

We may use anonymized or aggregated food images to improve our AI models, algorithms, and product features. When used for internal development, such images are not associated with your identity. Progress photos shall not be used for model training.

2.4 Usage Data

We automatically collect:

• Device type, operating system, and app version
• IP address
• Timestamps, session duration, and activity logs
• Crash data and error reports
• Feature usage analytics and screen views
• Performance data

This data helps us secure, improve, and optimize the Service.

2.5 Apple Health Data

With your permission, Bodyfon may read from and write to Apple Health. This may include weight, nutrition data, body measurements, and other metrics. We use this data solely to provide and improve the Service. Data obtained through Apple Health is not used for advertising or sold to third parties.

2.6 Cookies and Tracking Technologies

The website bodyfon.com may use cookies, tags, and similar technologies for analytics, functionality, and security. The Application may use mobile identifiers for analytics purposes.

3. How We Use Your Data

3.1 To Provide and Improve the Service

• AI-based food identification and calorie estimation
• Adaptive nutrition planning and tracking
• Body composition tracking and progress visualization
• Behavioral insights and personalization
• Account management
• Service stability, debugging, and performance optimization
• Any other features and functionality described within the Application

3.2 To Improve AI and Computer Vision Models

We use food images and related User Content to train and improve our AI models and enhance the accuracy of calorie and nutrient estimates. Such use is strictly anonymized or aggregated and not linked to your identity. Progress photos shall not be used for this purpose.

3.3 Communications

We may contact you about service-related notifications, updates, new features, and customer support responses.

3.4 Marketing (Optional)

We may send you promotional communications unless you opt out. You can unsubscribe at any time by using the unsubscribe link in any email or by contacting us.

3.5 Legal and Compliance

We may use your data to detect or prevent fraud, comply with legal obligations, and protect our rights.

3.6 Waitlist

If you join our waitlist, we collect your email address to notify you when the Service launches and to provide waitlist-related communications. You may unsubscribe at any time.

3.7 Restrictions on Health Data

We do not use Health Data for advertising or marketing purposes. Health Data is used solely to provide, personalize, and improve the Service as described in this Policy.

4. Legal Bases for Processing

Where applicable (e.g., under the EU or UK General Data Protection Regulation), we rely on the following legal bases:

• Consent: When you voluntarily provide information, grant access to third-party services like Apple Health, or agree to receive marketing communications.
• Contract Performance: To fulfill our agreement with you, including providing the Service, managing your Account, and processing your subscription.
• Legitimate Interests: For service improvement, security, fraud prevention, analytics, and internal research using aggregated data.
• Legal Obligations: To comply with applicable laws and regulations.

5. How We Share Personal Data

We do not sell your Personal Data. We do not share your data for cross-behavioral advertising. We may share Personal Data in the following circumstances:

5.1 Service Providers

We engage trusted third-party vendors to help operate the Service. These providers process your data solely on our behalf and under contractual obligations to protect it. Our current service providers include:

• Google LLC, USA
• OpenAI, Inc., USA
• Anthropic, PBC, USA
• RevenueCat, Inc., USA
• Apple Inc., USA
• Intercom, Inc., USA
• Resend, Inc., USA

We will update this list as our service providers change.

5.2 Business Transfers

If we engage in a merger, acquisition, financing, or asset sale, your information may be transferred as part of that transaction, as permitted by law.

5.3 Legal Compliance

We may share data with law enforcement or regulators when legally required to do so.

5.4 With Your Consent

Where you direct us to share information, we will do so accordingly.

5.5 Aggregated or Anonymized Data

We may share aggregated or non-identifiable data for analytics, research, or business purposes. Such data does not identify you individually.

6. User Content and License Rights

The license terms governing User Content are set forth in our Terms of Service. This section describes how we handle your content from a privacy perspective.

We do not publicly display your photos or content without your express consent. Progress photos shall not be used for AI model training. Progress photos are stored using encrypted cloud storage and are accessible only to you through the Application. They are not shared with third parties except as necessary for cloud hosting infrastructure.

7. Data Retention

We retain your data for as long as necessary for the purposes described in this Policy, subject to the following guidelines:

• Personal Data and Health Data: Retained for as long as your Account is active. Deleted or anonymized within 30 days of Account deletion, unless legally required to retain.
• Usage Data: Retained for up to 24 months unless needed for security or legal reasons.
• Crash data and error reports: Retained for up to 12 months.
• Waitlist email addresses: Retained until we contact you about the launch or you unsubscribe.
• Customer support communications: Retained for up to 12 months after the related inquiry is resolved.

We delete or anonymize data when no longer needed, unless legally required to retain it.

8. International Data Transfers

Your information may be transferred to and processed on servers outside your jurisdiction. Where required by law, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers.

9. Your Privacy Rights

Regardless of where you live, we are committed to respecting your privacy rights. Depending on your jurisdiction, you may have the right to:

• Access: Obtain confirmation of whether we process your Personal Data and request a copy.
• Rectification: Correct inaccurate or incomplete Personal Data.
• Deletion: Request deletion of your Personal Data, Account, progress photos, food logs, and profile data.
• Data Portability: Receive a copy of your data in a structured, commonly used, machine-readable format. To export your data, use the in-app data export feature or contact us at support@bodyfon.com.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Object to Processing: Object to certain processing activities, including direct marketing.
• Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@bodyfon.com or use the in-app settings where available.

10. U.S. State Privacy Rights

If you reside in California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or any other state with applicable data privacy laws, you may have additional rights regarding your Personal Data, including:

• Right to Know: You may request that we disclose the categories and specific pieces of Personal Data we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request the deletion of your Personal Data, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate Personal Data.
• Right to Opt Out: You may direct us not to sell or share your Personal Data for targeted advertising or profiling. We do not sell your Personal Data, and we do not share it for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Appeal: If we deny a privacy rights request, you may appeal our decision by contacting us at privacy@bodyfon.com.

To exercise your rights, contact us at privacy@bodyfon.com. We will verify your identity before processing your request and respond within 45 days (or such other period as required by applicable state law).

11. Deleting Your Personal Data

You may delete your progress photos, food logs, body measurements, and other entries directly through the Application at any time. To delete your entire Account and all associated data, use the account deletion feature in the Application settings or contact us at privacy@bodyfon.com. Certain data may be retained where required by law.

Please note that Account deletion does not automatically cancel your subscription, which you can manage through the App Store.

12. Security

We use administrative, technical, and physical safeguards to protect your data, including encryption and access control measures. However, no method of transmission over the internet or electronic storage is completely secure. We recommend keeping your app up to date to ensure the best protection for your Personal Data. In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities in accordance with applicable law.

13. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect Personal Data from children under 13. If we learn that we have collected Personal Data from a child under 13, we will take steps to delete it promptly.

14. Third-Party Links and Services

The Service may contain links to third-party websites or services, including Apple Health. Their privacy practices are governed by their own policies, and we do not control or endorse them. We encourage you to review the privacy policies of any third-party services you use.

15. Use of Artificial Intelligence

Certain features of Bodyfon use artificial intelligence (AI) provided by third-party services (see Section 5.1) to deliver food recognition, calorie estimation, nutrient analysis, and adaptive nutrition planning.

When processing your data through AI services, we transmit only the minimum information necessary to generate a response. AI service providers process this data solely for the purpose of delivering the requested functionality and do not use it for their own model training.

Data transmitted to AI service providers for processing may be temporarily retained by such providers for up to 30 days for quality assurance and debugging purposes, after which it is deleted in accordance with their data processing agreements.

AI processing is performed using anonymized or aggregated data where possible. We do not use AI to make automated decisions that produce legal or similarly significant effects on you without human review.

16. Changes to This Privacy Policy

We may update this Policy from time to time. Updates become effective when posted. We will notify you by email or through the Application for material changes. We encourage you to review this Policy periodically.

17. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your Personal Data, you may contact us:

General inquiries: support@bodyfon.com

Privacy-specific inquiries: privacy@bodyfon.com

Website: bodyfon.com

Bodyfon LLC
5830 E 2nd St, Ste 7000 #31032
Casper, Wyoming 82609, United States