Last updated: November 13, 2026
Bodia may collect account data, physical profile data, training preferences, workout history, progress, subscription data, app usage, social posts, social messages, and requests sent to artificial intelligence features.
Body photos, physical data, scans, and conversations with Bodia AI are used to generate plans, training guidance, estimated metrics, and progress tracking. For these features, Bodia may send the data needed to OpenAI, LLC through Cloudflare: Coach messages and recent history; goal, age, sex, height, weight, preferences, injuries, and scan results for plans; workout settings, goal, weight, and experience for quick workouts; and body photos, age, sex, height, weight, and goal for scans. These providers receive the data only to provide the requested feature and apply equivalent protection. Results are fitness and wellness estimates; they are not medical diagnosis, medical treatment, or a substitute for professional evaluation. Consult a professional before making clinical, nutrition, or injury-related decisions. If you have an account, we keep a copy of your scan photos in our private Cloudflare cloud so you can recover them when you update or reinstall the app. They are stored encrypted with AES-256, travel over an encrypted connection, and are delivered only to your session; they are not public or used for advertising. Bodia holds the keys so it can restore them. They are removed when you permanently delete the scan or delete your account.
We use data to operate the app, authenticate users, personalize plans, show progress, enable social features, process purchases, provide support, prevent abuse, moderate content, and improve service security. We do not sell personal data or use health and fitness data for advertising based on that data.
Bodia allows sign-in with Apple or Google. When you use these services, basic profile data such as name and email may be shared with Bodia according to Apple and Google privacy policies. You can delete your account from the app settings or from the account deletion page.
Camera, photos, media library, and notifications are requested only when a specific feature requires them. You can revoke permissions in system settings. The camera may be used for training photos or videos and for body scanning when you request it. The photo library may be used to select or save content when you choose to do so.
We do not sell personal data to third parties. We use Cloudflare to route requests and OpenAI, LLC as an AI processing provider, together with authentication, operational analytics, storage, payment, and support providers. These providers receive only the data needed to provide the service, are not authorized to use it for their own advertising, and must provide protection equal or equivalent to the protection described in this policy. The exception is Meta, which receives limited data to measure our ads, as explained in section 24.
If you use social features, other users may see the content you post according to the visibility you choose. Bodia may process posts, comments, bios, messages, reports, blocks, and related information to prevent abuse, spam, self-harm, explicit sexual content, illegal content, dangerous medical advice, and other community risks.
We retain data while your account is active or while it is needed to operate the service, meet legal obligations, resolve disputes, prevent fraud, or maintain security. When you delete your account from Settings > Account > Delete account, we delete your account, profile, scans, associated photos, plans, progress, social content, messages, reports linked to your user, derived data, and session tokens, except data we must retain for legal or security reasons.
Bodia is not directed to children under 13. Use by minors requires authorization from a parent or legal guardian according to the rules applicable in their jurisdiction.
Depending on the jurisdiction and purpose, we process data because it is necessary to provide the requested service, comply with law, protect security, pursue balanced legitimate interests, or because you consented. When we process body photos, health data, or data revealing health information, we request explicit consent or another valid legal basis where required. You can withdraw consent in Settings or by contacting support; withdrawal does not affect prior processing and some features may stop working.
Bodia and its providers may store or process information in countries other than yours, including the United States. Where required, we use adequacy decisions, contracts, standard contractual clauses, or other safeguards recognized by applicable law. You may request information about transfer safeguards at hello@bodia.app.
The site or app may use technical identifiers, logs, cookies, or equivalent technologies for sign-in, security, performance measurement, error detection, and service understanding. On iPhone, the app includes the Meta SDK and a RevenueCat integration to measure which Bodia ads work (see section 24). We do not use health data, scans, photos, or conversations for advertising, and we do not show third-party ads inside Bodia.
Bodia may use automated systems to generate workout recommendations and fitness estimates. These outputs are not intended to produce legal or similarly significant effects on their own, and they are not medical diagnoses or medical decisions. You may stop using an AI feature, request human review of a privacy request, or report an inaccurate output at hello@bodia.app.
We use reasonable technical and organizational measures, including access controls, encryption in transit, service separation, and data minimization. No internet service can guarantee absolute security. If an incident requires notice, we will notify people or authorities within the time required by applicable law. Do not post medical information, credentials, or another person’s data in social areas.
Depending on where you live, you may have rights to access, copy, correct, delete, object, restrict, port, withdraw consent, and complain to a data-protection authority. California and other U.S. states may provide additional rights concerning sensitive personal information, sale or sharing, targeted advertising, and preference signals. Bodia does not sell personal data or share health data for advertising. To exercise rights, write from your account email; we will verify identity and respond within the legal deadline. We share with Meta the limited data described in section 24 to measure our ads; you can opt out as explained there.
We retain each category only as long as needed for the stated purpose, then delete, anonymize, or retain it only when required by law, security, fraud prevention, or claim defense. We publish the effective date and material changes on this page. Mandatory local law prevails over any general description in this policy.
Depending on the feature and permissions available, we may receive IP address, device type, operating system, technical or advertising identifiers you allow, crash logs, and interaction data. We use them for security, authentication, diagnostics, performance, and service improvement. We do not use them to sell personal information or target advertising based on health data.
For purchases and subscriptions, we may receive confirmations, transaction identifiers, plan status, and data needed to validate access directly from Apple App Store or Google Play. Bodia does not receive or store your full card number when payment is processed by those platforms. Store terms may also apply.
We may use automated tools and human review to moderate content and handle reports, blocks, and security risks. Exercising privacy rights will not result in discrimination or denial of basic service, except where a difference is necessary and permitted by law. Where allowed, California residents and other individuals may appoint an authorized agent; we verify identity and authorization before responding.
Bodia advertises the app on Facebook and Instagram and measures which ads bring people who install it, sign up, start a trial, or subscribe. To do this on iPhone, the Meta SDK (Meta Platforms Ireland Ltd. or Meta Platforms, Inc., depending on your region) and RevenueCat, Inc., our subscription provider, send app events to Meta: install and app open, account creation (sign-up method only), trial start, trial conversion to paid, and purchases and renewals with their price and currency, together with Meta's anonymous identifier, the identifier for vendor (IDFV), IP address, and technical device data. Only if you allow Apple's tracking prompt (App Tracking Transparency) are the advertising identifier (IDFA) and your email address also sent; the email is hashed before it is shared. If you do not allow it, we do not send the IDFA or your email, and Meta can only use the events in aggregated form under Apple's rules. We never share photos, scans, weight, measurements, workouts, health data, or conversations with Meta. Meta processes this data as an independent controller to measure and optimize Bodia's ads under its privacy policy (facebook.com/privacy/policy); RevenueCat acts as Bodia's processor. The legal basis is your consent where the law requires it and, otherwise, Bodia's legitimate interest in measuring its advertising. You can withdraw permission at any time in Settings > Privacy & Security > Tracking, and ask us to stop sharing your data with Meta by writing to hello@bodia.app. In California and other U.S. states, this may be considered "sharing" personal information for cross-context behavioral advertising; you can exercise your right to opt out through either of those options.