Bodyvault Privacy Policy
Local-first by design
Bodyvault stores your data on your iPhone. Your workouts, food logs, body measurements, Apple Health imports, lab results and everything else you record stay on your device. Bodyvault has no accounts and does not send your data to us, unless you choose to do one of the two things below.
If you use Ask Coach or other AI features with your own API key, those requests go directly from your iPhone to the AI provider you chose, under that provider's terms. Bodyvault's servers are not involved.
1. The Research Program (optional)
If you join the Research Program, a copy of your Bodyvault data is sent to Bodyvault's own servers, linked to a random participant ID. You can leave at any time. The full program terms are reproduced below and at /research.
Connected assistants (optional, members only). If you connect Claude or ChatGPT to your shared data, Bodyvault's server sends that assistant the data it asks for, and the company behind it (Anthropic or OpenAI) handles it under its own terms. You can revoke an assistant in the app at any time, and leaving the program revokes all of them. Entries an assistant adds are queued for your iPhone and shown under "From assistants". Details are at /research.
2. Feedback (optional)
When you send feedback from the app, we receive what you wrote, the category you chose, the app version and build, a random install identifier, and — only if you attach them — a screenshot and diagnostic information. If you are a Research Program member, the feedback is also linked to your device's participant token. Please don't include personal details in feedback text or screenshots that you don't want us to see.
What we never collect
Your name, email address, Apple ID, device name, photos, lab report files, Ask Coach conversations, API keys or precise location. We don't use advertising or tracking SDKs, and we never sell data or share it with data brokers.
Security
Data is encrypted in transit (HTTPS). Access to the servers and the stored data is restricted to the Bodyvault team. Device tokens are stored only as one-way hashes.
Retention
- Research data is kept while you're a member. When you leave, it is anonymised (see below) and kept in anonymised form for research.
- Consent records (which version you agreed to and when you joined or left) are kept as proof of consent. They contain no health data.
- Feedback is kept for as long as it is useful for improving the app, and deleted on request where we can identify it.
Anonymisation when you leave
When you leave, your shared data is unlinked from your participant ID and moved to a new random ID that is stored nowhere else. Identifiers inside your data are replaced using a one-time secret that is discarded immediately, anything you typed (notes, custom food and exercise names, lab report text and similar) is deleted, your birth year becomes a 5-year range, all dates are shifted by the same random 1–3 days forwards or backwards, and your time zone and locale are removed. Your device's access token is deleted. After this, the data can't be linked back to you — so it can't be retrieved or deleted for you afterwards.
Your rights
- See what you've shared: download a copy from Settings → Research Program at any time.
- Stop sharing: leave the Research Program in Settings → Research Program; sharing stops immediately.
- Cycle and reproductive health data is shared only if you turn it on; turning it off deletes what was shared.
- Depending on where you live (for example under the GDPR or India's DPDP Act) you may have further rights such as access, correction, erasure and complaint to a supervisory authority. Contact us to exercise them while you are still a member; after anonymisation we can no longer identify your data.
Contact
Research Program terms
What it is
An optional program. You share your Bodyvault data with the Bodyvault team to help improve Bodyvault and to research patterns in training, nutrition and health. While you're a member, Bodyvault Pro is unlocked for free.
What is shared
Profile basics (sex, birth year, height, goal, training experience, country and units — never your name). Body measurements. Workouts, sets, training plans and cardio sessions. Food and water logs, recipes and nutrition targets. Health data Bodyvault has imported from Apple Health (samples, daily totals, sleep). Readiness scores. Supplements and medications. Lab results. Glucose readings and Meal Impact results. Coach insights, nudges and how you responded to them. Daily check-ins: how you feel and any symptoms you report (your notes and body-area text are deleted if you leave). Optional, off unless you turn it on: cycle and reproductive health (period and symptom logs, cycle settings, pregnancy/breastfeeding status).
Never shared
Your name, email address, Apple ID, device name, photos, lab report files, Ask Coach conversations, API keys or precise location.
How it's linked
Your data is linked to a random participant ID, not to your name, email or Apple ID.
Where it goes
Encrypted in transit (HTTPS) to Bodyvault's own servers.
Who can see it
Only the Bodyvault team. It is never sold, never used for advertising and never shared with data brokers. Research findings are only ever published in aggregate.
The deal
Bodyvault Pro stays unlocked for as long as you're a member.
Leaving
Leave any time in Settings → Research Program. Sharing stops immediately and Pro ends (unless you bought it). Data you already shared is kept but anonymised: it's unlinked from your participant ID, anything you typed (notes, custom food and exercise names, lab report text) is deleted, your birth year becomes a 5-year range, dates are shifted by a random few days and your time zone is removed. Anonymised data can't be linked back to you, so it can't be retrieved or deleted for you afterwards.
Your copy
You can download a copy of what you've shared from Settings → Research Program at any time.