Privacy policy

BodyWyse is a food, training and body-weight tracker. This page explains what it stores, why, who helps process it, and how to remove it. BodyWyse has no ads, doesn't sell or rent your data, and doesn't use it for marketing.

What we store

• Account: your email address, used to send sign-in codes and, when you ask for it, the weekly menu.
• What you enter: food diary entries, meal plans, nutrition targets and the profile behind them (sex, birth year, height, activity level, goal, diet notes), workouts and training sessions with any notes you add, and weigh-ins. A meal you describe or photograph for an estimate isn't stored; only the entry you log is.
• Apple Health (iPhone app) or Health Connect (Android app), only if you allow it: daily step counts, workouts recorded by other apps and devices (type, time, duration, active energy and the recording app's name) and body-weight readings, for the last 30 days and going forward. BodyWyse can also save the weigh-ins, training sessions (with the time and distance of runs, walks and rides) and food diary entries you log there. You choose each type on the phone's permission screen and can change it any time in the Health app or Health Connect's settings.
• Apple Watch, if you log strength sessions on it: your heart rate as you log each set and at the end of the rest after it, and the session's average and peak heart rate and active energy. These are stored with the session, and the workout is saved to Apple Health.
• AI credits: your credit balance and its history: what credits were spent on, and credit packs you bought or were refunded, with the store's transaction number. Payment is handled by Apple or Google; BodyWyse never sees your card or payment details.

How it's used

Only to run the app for you: your diary, targets, trends, training history and the activity shown next to them. Health data is used for nothing else, is never used for advertising or marketing, and is never shared with data brokers. The one other use is the AI usage records described below, which hold none of your content and are used to set credit prices.

Who processes it

• Supabase hosts the database and sign-in. Everything above is stored there.
• Anthropic (the Claude API) estimates nutrition when you describe a meal or add a meal photo, and writes meal plans from your targets and diet notes. Only what each request needs is sent. Photos are passed through and not stored by BodyWyse. Under its commercial terms, Anthropic doesn't train its models on what it's sent and keeps it only for a limited time. Apple Health, Health Connect and Apple Watch data is never sent.
• Resend delivers the weekly menu email, only when you ask for it.
• Apple (App Store) and Google (Google Play) process credit pack purchases. BodyWyse asks them to confirm each purchase before adding the credits, and they tell us about refunds.
• Our web host serves the app and handles requests to it.

We share your data with no one else, except where the law requires it.

Cookies

BodyWyse sets a sign-in cookie and a cookie with your timezone, so dates match your day. There are no analytics or advertising trackers.

Keeping and deleting it

Your data is kept until you delete it or your account. You can delete any entry in the app, and delete your whole account under Account, which removes everything listed above right away (it may linger in our providers' backups for a short time before they expire). Data BodyWyse saved to Apple Health or Health Connect stays there until you remove it.

For each AI request we also keep a usage record (the feature, the AI model, the request's size, its cost and how long it took), never what was sent. It's how credit prices are set. When you delete your account, these records are kept with nothing linking them to you.

Security

Data travels over HTTPS and is stored with access rules that limit every record to its owner. Sign-in uses one-time codes, so there's no password to leak.

Children

BodyWyse isn't meant for anyone under 16.

Changes and contact

If this policy changes, the date above changes with it. Questions or requests about your data: privacy@bodywyse.io.