Summary: We collect only what's necessary to provide the service. Your health data is encrypted and never sold. You can export or delete your data at any time.
Introduction
DataBody ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
Please read this privacy policy carefully. By using DataBody, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (optional)
- Profile photo (optional)
Health and Fitness Data
To provide our nutrition tracking services, we collect:
- Food and nutrition logs (meals, calories, macronutrients)
- Body measurements (weight, body fat percentage)
- Fitness goals and targets
- Workout data (if synced from Apple Health)
- Health metrics (heart rate, sleep, steps - if synced from Apple Health)
Apple HealthKit Data
With your explicit permission, we read and write data to Apple HealthKit:
- Read: Weight, body fat, workouts, active calories, heart rate, HRV, sleep, steps
- Write: Nutrition data (calories, protein, carbs, fat, fiber)
HealthKit data is only accessed with your permission and is never used for advertising or sold to third parties.
AI Conversation Data
When you use our AI Coach feature:
- Chat messages and conversation history
- Photos uploaded for food analysis
- PDF documents uploaded for analysis (recipes, health reports)
Usage Data
We automatically collect:
- Device information (device type, operating system)
- App usage patterns (features used, session duration)
- Error logs and crash reports
How We Use Your Information
We use your information to:
- Provide and maintain the DataBody service
- Personalize your nutrition recommendations and AI coaching
- Sync data with Apple HealthKit (with your permission)
- Analyze food photos and documents you upload
- Send important service updates and notifications
- Improve our app and develop new features
- Respond to customer support requests
How We Protect Your Data
Your health data is sensitive. We take security seriously:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Control: Strict internal access controls limit who can access user data
- Data Isolation: Your data is logically separated from other users
- Regular Audits: We conduct regular security reviews and updates
- Secure Infrastructure: Our servers are hosted on industry-leading cloud platforms with SOC 2 compliance
AI and Machine Learning
Our AI Coach is powered by Claude (Anthropic). When you interact with the AI:
- Conversations are processed securely via Anthropic's API
- Your conversations are not used to train AI models
- We retain conversation history to provide context-aware coaching
- You can delete your conversation history at any time
Data Sharing
We do not sell your personal data. We may share data with:
- Service Providers: Third parties that help us operate the service (cloud hosting, analytics, payment processing)
- Household Members: If you join a household, certain data may be visible to other household members (as configured by you)
- Legal Requirements: If required by law or to protect our rights
Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Export: Download your data in a portable format
- Correct: Update or correct your information
- Delete: Request deletion of your account and data
- Opt-out: Disable HealthKit sync or AI features at any time
To exercise these rights, contact us at privacy@databody.ai.
Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Personal data is deleted within 30 days
- Anonymized, aggregated data may be retained for analytics
- Backups are purged within 90 days
Children's Privacy
DataBody is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.
International Data Transfers
Your data may be processed in the United States. By using DataBody, you consent to the transfer of your data to the US, where data protection laws may differ from your country.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date.
Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
- Email: privacy@databody.ai
- Support: databody.ai/support