Privacy Policy for BodyArc

Effective Date: June 30, 2025

1. Introduction

BodyArc ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

Health and Wellness Data:

• Nutritional information (meals, calories, macronutrients)
• Water intake records
• Physical activity data (steps, exercises)
• Sleep patterns and duration
• Body weight measurements
• Personal health goals and preferences

Account Information:

• Email address
• Username
• Password (encrypted)
• Profile information (optional: age, gender, height)

2.2 Information Collected Automatically

Device Information:

• Device type and model
• Operating system version
• Unique device identifiers
• Mobile network information
• App version

Usage Data:

• App features used
• Frequency and duration of use
• In-app actions and interactions
• Crash reports and performance data

Location Data:

• We may collect location data if you grant permission (for features like outdoor activity tracking)
• You can disable location access in your device settings

2.3 Information from Third-Party Services

If you connect third-party services (fitness trackers, health platforms):

• Activity data from connected devices
• Health metrics from integrated platforms
• Authentication tokens (not passwords)

3. How We Use Your Information

We use your information to:

Provide Core Services:

• Enable health tracking features
• Store and display your health data
• Calculate nutritional information and health metrics
• Provide personalized insights and recommendations

Improve Our Services:

• Analyze app usage patterns (aggregated and anonymized)
• Debug technical issues
• Develop new features
• Enhance user experience

Communications:

• Send account-related notifications
• Provide customer support
• Send optional health reminders (with your consent)

Legal and Safety:

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraudulent or illegal activity

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal health information.

We may share your information only in these circumstances:

4.1 With Your Consent

• When you explicitly authorize sharing
• When you connect third-party services

4.2 Service Providers

We may share data with trusted service providers who assist us in:

• Cloud storage and hosting
• Analytics (anonymized data only)
• Customer support tools
• Payment processing (for premium subscriptions)
• Artificial Intelligence Services (OpenAI) - We use OpenAI's API to provide personalized insights, recommendations, and analysis of your health data. Your data is processed according to OpenAI's privacy policy and data usage terms.

All service providers are contractually required to protect your information and use it only for providing services to us.

4.3 Legal Requirements

We may disclose information if required by:

• Law, regulation, or legal process
• Government authorities or law enforcement
• To protect our rights, privacy, safety, or property

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.5 Aggregated or De-identified Data

We may share aggregated or de-identified data that cannot reasonably identify you for research, marketing, or other purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication protocols
• Regular security assessments
• Limited access controls
• Secure development practices

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as:

• Your account is active
• Necessary to provide you services
• Required for legal, tax, or regulatory purposes

You may request deletion of your account and associated data at any time. Upon account deletion, we will delete or anonymize your information within 30 days, except where retention is required by law.

7. Your Rights and Controls

7.1 Access and Portability

You can access and export your health data through the App settings.

7.2 Correction

You can update or correct your information within the App.

7.3 Deletion

You can delete specific data entries or your entire account through the App settings or by contacting us.

7.4 Opt-Out

You can opt-out of:

• Optional notifications
• Analytics collection
• Marketing communications

7.5 California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Say no to the sale of personal information
• Access personal information
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

7.6 European Privacy Rights

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

8. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the App, you consent to the transfer of information to countries outside of your country of residence.

10. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Effective Date"
• Sending an email notification (for material changes)

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

12. Data Protection Officer

For privacy-related inquiries, our Data Protection Officer can be reached at support@bodyarc.ai.

13. Contact Information

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

BodyArc Privacy Team
Email: support@bodyarc.ai

For EU residents, you may also contact your local data protection authority.

14. Cookie Policy

The App does not use cookies in the traditional web sense. However, we may use similar technologies like local storage to:

• Remember your preferences
• Maintain your session
• Store information for offline use

You can clear this data through your device settings.

15. Biometric Data

If you use features that involve biometric data (such as fingerprint or face authentication), this data is processed locally on your device and is never transmitted to or stored on our servers.

16. Artificial Intelligence and Data Processing

We use artificial intelligence services, specifically OpenAI's API, to enhance your experience by:

• Analyzing your health patterns
• Providing personalized recommendations
• Generating insights from your tracked data
• Answering health-related questions

When you use the App:

• Your health data may be sent to OpenAI for processing
• OpenAI processes data according to their privacy policy
• We do not control how OpenAI handles data once received
• AI-generated insights should not replace professional medical advice

By using BodyArc, you consent to the processing of your data by artificial intelligence services as described above.

By using BodyArc, you acknowledge that you have read and understood this Privacy Policy.