Last updated: August 12, 2026
Bodia may collect account data, physical profile data, training preferences, workout history, progress, subscription data, app usage, social posts, social messages, and requests sent to artificial intelligence features.
Body photos, physical data, scans, and conversations with Bodia AI are used to generate plans, training guidance, estimated metrics, and progress tracking. For these features, Bodia may send the data needed to OpenAI, LLC through Cloudflare: Coach messages and recent history; goal, age, sex, height, weight, preferences, injuries, and scan results for plans; workout settings, goal, weight, and experience for quick workouts; and body photos, age, sex, height, weight, and goal for scans. These providers receive the data only to provide the requested feature and apply equivalent protection. Results are fitness and wellness estimates; they are not medical diagnosis, medical treatment, or a substitute for professional evaluation. Consult a professional before making clinical, nutrition, or injury-related decisions.
We use data to operate the app, authenticate users, personalize plans, show progress, enable social features, process purchases, provide support, prevent abuse, moderate content, and improve service security. We do not sell personal data or use health and fitness data for advertising based on that data.
Bodia allows sign-in with Apple or Google. When you use these services, basic profile data such as name and email may be shared with Bodia according to Apple and Google privacy policies. You can delete your account from the app settings or from the account deletion page.
Camera, photos, media library, and notifications are requested only when a specific feature requires them. You can revoke permissions in system settings. The camera may be used for training photos or videos and for body scanning when you request it. The photo library may be used to select or save content when you choose to do so.
We do not sell personal data to third parties. We use Cloudflare to route requests and OpenAI, LLC as an AI processing provider, together with authentication, operational analytics, storage, payment, and support providers. These providers receive only the data needed to provide the service, are not authorized to use it for their own advertising, and must provide protection equal or equivalent to the protection described in this policy.
If you use social features, other users may see the content you post according to the visibility you choose. Bodia may process posts, comments, bios, messages, reports, blocks, and related information to prevent abuse, spam, self-harm, explicit sexual content, illegal content, dangerous medical advice, and other community risks.
We retain data while your account is active or while it is needed to operate the service, meet legal obligations, resolve disputes, prevent fraud, or maintain security. When you delete your account from Settings > Account > Delete account, we delete your account, profile, scans, associated photos, plans, progress, social content, messages, reports linked to your user, derived data, and session tokens, except data we must retain for legal or security reasons.
Bodia is not directed to children under 13. Use by minors requires authorization from a parent or legal guardian according to the rules applicable in their jurisdiction.
Depending on the jurisdiction and purpose, we process data because it is necessary to provide the requested service, comply with law, protect security, pursue balanced legitimate interests, or because you consented. When we process body photos, health data, or data revealing health information, we request explicit consent or another valid legal basis where required. You can withdraw consent in Settings or by contacting support; withdrawal does not affect prior processing and some features may stop working.
Bodia and its providers may store or process information in countries other than yours, including the United States. Where required, we use adequacy decisions, contracts, standard contractual clauses, or other safeguards recognized by applicable law. You may request information about transfer safeguards at hello@bodia.app.
The site or app may use technical identifiers, logs, cookies, or equivalent technologies for sign-in, security, performance measurement, error detection, and service understanding. We do not use health data, scans, or conversations for targeted advertising. If personalized advertising is introduced, we will request required permissions or consent and provide applicable opt-out controls.
Bodia may use automated systems to generate workout recommendations and fitness estimates. These outputs are not intended to produce legal or similarly significant effects on their own, and they are not medical diagnoses or medical decisions. You may stop using an AI feature, request human review of a privacy request, or report an inaccurate output at hello@bodia.app.
We use reasonable technical and organizational measures, including access controls, encryption in transit, service separation, and data minimization. No internet service can guarantee absolute security. If an incident requires notice, we will notify people or authorities within the time required by applicable law. Do not post medical information, credentials, or another person’s data in social areas.
Depending on where you live, you may have rights to access, copy, correct, delete, object, restrict, port, withdraw consent, and complain to a data-protection authority. California and other U.S. states may provide additional rights concerning sensitive personal information, sale or sharing, targeted advertising, and preference signals. Bodia does not sell personal data or share health data for advertising. To exercise rights, write from your account email; we will verify identity and respond within the legal deadline.
We retain each category only as long as needed for the stated purpose, then delete, anonymize, or retain it only when required by law, security, fraud prevention, or claim defense. We publish the effective date and material changes on this page. Mandatory local law prevails over any general description in this policy.
Depending on the feature and permissions available, we may receive IP address, device type, operating system, technical or advertising identifiers you allow, crash logs, and interaction data. We use them for security, authentication, diagnostics, performance, and service improvement. We do not use them to sell personal information or target advertising based on health data.
For purchases and subscriptions, we may receive confirmations, transaction identifiers, plan status, and data needed to validate access from Apple App Store, Google Play, or RevenueCat. Bodia does not receive or store your full card number when payment is processed by those platforms. Store terms may also apply.
We may use automated tools and human review to moderate content and handle reports, blocks, and security risks. Exercising privacy rights will not result in discrimination or denial of basic service, except where a difference is necessary and permitted by law. Where allowed, California residents and other individuals may appoint an authorized agent; we verify identity and authorization before responding.