Privacy policy

The short version

• Your data stays on your device, in an encrypted database. There is no Bodyvault account and no advertising. The app doesn’t send your data to us, so we never have it.
• Reports are optional: if you say yes, the app sends anonymous crash, speed and usage reports to Google Firebase. They never include your workouts, food, health or cycle data, and you can turn them off at any time.
• You decide when anything leaves your phone: an export, a backup to your own Google Drive, a request to an AI provider you set up with your own key, or the reports above.
• We never sell data, and health data is never used for advertising.

What stays on your device

Everything you record or import: workouts and sets, food and water logs, meal plans, body measurements, sleep and heart data from Apple Health or Health Connect, check-ins, labs, supplements and medications, cycle and glucose data, photos you log and your settings. Bodyvault keeps it in an encrypted database on your phone. The Apple Watch app exchanges data directly with your iPhone, and devices you connect over Bluetooth send their readings straight to your phone.

Apple Health and Health Connect

Bodyvault reads, and writes where you allow it, only the data types you grant in Apple Health on iPhone or Health Connect on Android. This data stays on your device. It is never used for advertising or marketing, never sold and never given to data brokers. It leaves your device only when you choose, as described below. You can change or withdraw access at any time in the Health app or in Health Connect.

When data leaves your phone: only when you choose

Exports

You can export an encrypted .bodyvault backup file, or CSV files. They go wherever you save or share them. CSV files are not encrypted, so keep them somewhere safe.

Backup to your own Google Drive (optional)

If you turn it on, your phone encrypts the backup with a passphrase you choose, then uploads it directly to your own Google Drive. It goes straight between your phone and your Google account: Bodyvault’s servers are never involved, and neither we nor Google can read what is inside. Google stores the file under its own terms. Keep your passphrase safe, because without it nobody, including us, can open the backup. You can delete these backups in Google Drive at any time.

When you connect Google Drive, Bodyvault asks Google only for access to the files it creates (a “Bodyvault Backups” folder), so it can’t see anything else in your Drive, and for your account’s email address, to show which account is connected. Both stay on your phone and are used only for your backups. Bodyvault’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

AI with your own key (optional)

In Settings → AI you can add your own API key for an AI provider. Ask Coach and AI meal logging then send each request (your question with the data it needs, or a meal photo) directly from your phone to that provider, which handles it under its own terms and your settings with it. The request never passes through Bodyvault’s servers, and your key stays on your device.

On-device AI: Apple Intelligence and Gemini Nano

On iPhones that support it, Bodyvault uses Apple Intelligence, which runs on your iPhone or, for some requests, on Apple’s Private Cloud Compute under Apple’s privacy terms. On Android phones that support it, Bodyvault uses Gemini Nano, which runs on the phone. Nothing is sent to Bodyvault.

Apart from these, your health data never leaves your device.

Crash, speed and usage reports (optional)

The app asks you once, when you set it up, whether to send reports, and they stay off until you say yes. You can change your choice at any time in Settings → What leaves my phone, and turning a report off stops it straight away and deletes what hasn’t been sent yet.

• Crash and speed reports (Firebase Crashlytics and Firebase Performance Monitoring): when the app crashes or runs slowly, it sends the phone model, operating system and app version, random installation and session IDs, and the technical details of what went wrong, such as the part of the code that failed or how long the app took to start or to open its database. Google uses the IP address to find the country, then drops it.
• Usage statistics (Google Analytics for Firebase): which of the app’s screens you open (the tabs and screens such as a workout, adding food, meal plans, Ask Coach, the device hub, backups, Settings, onboarding and the Pro screen); which features you use, such as starting or finishing a workout, logging a meal and how (search, barcode, photo or a plan), starting a meal plan, asking Coach, connecting a device or making a backup, but never what you logged; how far you get through onboarding (its stages, never your answers); whether you allowed Apple Health or Health Connect; and the Pro screen, trials and purchases, with your Pro plan. They come with a random app instance ID, your phone’s model, language and operating system, and your approximate location. Google Analytics doesn’t store IP addresses. Cycle, glucose, lab, supplement and medication, check-in, sleep and body measurement screens send nothing.

Reports never include your workouts, food, health, cycle, lab or glucose data, your name or email address, or an advertising identifier, and we don’t link them to you. Google processes them for us as our service provider, under the Firebase Data Processing and Security Terms, and may process them outside your country. We use them only to fix problems, make the app faster and see which features people use. Crash reports are kept for 90 days, speed reports for up to 60 days and usage statistics for up to 14 months.

Purchases

Bodyvault Pro is sold through the App Store and Google Play. Apple or Google processes your payment and manages your subscription; we never see your name, email address or payment details. The app checks your purchase with the store on your device. We only see the stores’ anonymous sales reports, such as how many purchases were made in a country on a day, which don’t tell us who you are.

This website

This website has no cookies, no analytics, no advertising and nothing loaded from other companies. It has no sign-up form and doesn’t count visitors. Its request log records the page, the response code and how long the response took, without your IP address. If you email us, we use your message and address only to reply, and delete them when you ask.

The Research Program, beta and cloud backup have ended

Test versions of Bodyvault offered a Research Program, a TestFlight beta sign-up, Sign in with Apple accounts with encrypted cloud backup on our server, a Claude and ChatGPT connector, and in-app feedback. They have all ended, and the app no longer sends anything to Bodyvault’s servers. The data held for them (research data, including anonymised data, consent records, beta sign-ups, accounts, encrypted backups and feedback) is being deleted from our servers. Read more on the Research Program page.

Children

Bodyvault doesn’t collect personal data that identifies anyone, including children. The optional reports are anonymous and off until someone turns them on.

Deleting everything

Your data is on your device, so you delete it there:

1. Delete any backup and CSV files you exported, and the Bodyvault backups in your Google Drive.
2. Use Delete all data in the app’s Settings, or delete the Bodyvault app from your phone (and your Apple Watch, if you use it). Either removes its encrypted database.
3. Data Bodyvault wrote to Apple Health or Health Connect stays there until you remove it. On iPhone, open the Health app, tap your profile picture, then Apps, Bodyvault and Delete All Data. On Android, open Health Connect, choose App permissions, then Bodyvault, and delete its data.
4. Deleting the app doesn’t cancel a Pro Monthly subscription: cancel it in your App Store or Google Play subscriptions.

Your rights

Wherever you live, you can ask us what personal data we hold about you and ask us to delete it. Bodyvault holds none from the app that identifies you: the optional reports are tied only to random IDs on your phone, so we can’t find yours, but you can stop them at any time in Settings. If you took part in the Research Program or the beta and want confirmation that your data has been deleted, or have any other privacy question, email us. Depending on where you live (for example under the GDPR or India’s Digital Personal Data Protection Act) you can also complain to a data protection authority.

Changes

If the app or this website changes how data is handled, we will update this page and its date.

Contact

Bodyvault is made by Lapaas in India. Email lapaasindia@gmail.com.