Privacy Policy
Privacy Policy
Effective 10 September 2026.
What we collect
- Physique photos. The photo you submit is sent over an encrypted connection to our server, analysed by an AI model, and deleted immediately after analysis. We store only a cryptographic hash of the image (to avoid re-analysing the same photo) and the resulting scores. Photos are never shown to other users, never used for training, never sold.
- Meal photos and descriptions (optional) are analysed the same way and not stored on our servers. Packaged-food lookups are sent to Open Food Facts as barcode or search text only.
- Profile data you enter: goal, sex, age, height, weight, body-fat guess, training days. Stored on your device; sex and goal may be sent with each analysis to calibrate it.
- Account data. By default you are anonymous (a random device identifier). If you sign in with Apple or Google we store the provider's user identifier and, if shared, your e-mail address.
- Coach messages you type are sent to our server and the AI provider to generate a reply, together with your scores and plan. Conversations are not stored on our servers.
- Purchases are processed by Apple; RevenueCat keeps a record of your entitlement tied to an anonymous identifier.
What we do not do
- No advertising SDKs, no tracking across apps or websites, no sale of personal data.
- The leaderboard is opt-in and shows an anonymous name and a score only — never a photo.
Who processes your data
Our API runs on Cloudflare Workers (Cloudflare, Inc., USA), with scores stored in Cloudflare D1/KV.
The analysis itself is run by our AI provider, currently OpenAI (OpenAI, L.L.C., USA). We send it only what the request needs: for a scan, the photo plus your sex, age, height, weight and goal; for a meal photo, the photo; for Coach, the message you type together with your scores and this week’s plan. It never receives your name, e-mail address, contacts, location or any health record. The provider processes the request under a data-processing agreement, keeps the content only for the duration of the request, and does not use it to train its models. If we change provider we will say so here and in the app.
We ask your permission inside the app before any of this is sent, the first time you scan, submit a meal photo or use Coach. You can withdraw that permission at any time in Profile → AI analysis permission; those features then stop working until you grant it again.
Retention and deletion
Scores are kept while your account exists. You can delete your account and all server-side data at any time from Profile → Delete account & data, or by e-mailing us. Local data is removed when you delete the app.
Children
Body Scan is rated 17+ and is not intended for anyone under 18. Users who indicate an age under 18 cannot use the photo analysis.
Health disclaimer
Body Scan is not a medical device and is not intended to diagnose, treat, cure or prevent any disease. Body-fat ranges, calorie and macro estimates are approximate AI estimates for general fitness guidance.