Privacy Policy

2.1 Information You Provide

• • Account information: name, email address, password
• • Health and fitness data: height, weight, age, biological sex, activity level, body fat percentage, waist circumference, fitness goals, and target body areas
• • Activity and nutrition data: workout logs (exercises, sets, reps, and weights), food and nutrition logs, body measurements, and daily step counts
• • Physique photos: front- and side-view photos you choose to submit for AI body analysis (see Section 2.4)
• • Referral information: if you sign up or subscribe using a referral or discount code, we record the code used and which partner referred you

2.2 Information Collected Automatically

• • Device and connection information (such as IP address and device type), processed by our infrastructure providers to operate the service, secure accounts, and prevent abuse
• • Purchase and subscription transaction data when you subscribe: product purchased, price, currency, country, and transaction identifiers
• • Service logs: timestamps of certain requests (such as AI analyses and data-export requests), kept for rate limiting and abuse prevention

We do not use third-party advertising or analytics SDKs in the App, and we do not track you across other companies' apps or websites.

2.3 Sensitive Health Data

Health and fitness information (weight, body fat %, waist circumference, fitness goals, physique photos) is classified as sensitive personal data. We collect this solely to provide and improve your personalized experience within the App. We do not sell or rent your health data to third parties, and we never use it for advertising.

2.4 AI Body Analysis Photos

When you use the AI body analysis feature, the photos you submit — together with measurements you provide (such as waist, height, weight, and biological sex) — are transmitted securely to our AI service provider (OpenAI) to generate a body fat estimate. These photos are processed for this sole purpose and are not stored on our servers, and under our provider's API terms they are not used to train AI models. Only the resulting estimate is saved to your profile. AI-generated estimates are approximations, not clinical measurements.

2.5 Apple Health (iOS)

If you choose to connect Apple Health, the App reads your step count and weight, and may write weight entries back to Apple Health, only with the permissions you grant through iOS. Data obtained from Apple Health is used solely to provide App features (such as step tracking and weight trends) and is stored alongside your other fitness data. We never use Apple Health data for advertising or marketing, never sell it, and never share it with third parties except as needed to provide the service. You can disconnect Apple Health at any time in the App or in iOS Settings.

2.6 Website Mailing List

If you enter your email address into the mailing list form on figurabody.com, we store that address so we can tell you when the App becomes available. The form collects nothing else. That address is held by us and by Resend, our email provider, and is used only for launch and App news announcements; it is never sold, rented, or shared with anyone else, and it is not linked to any App account. Every email we send includes an unsubscribe link, and you can ask us to delete your address at any time by emailing privacy@figurabody.com. We also record a one-way hash of your IP address alongside the signup, solely to stop automated abuse of the form. We do not store the IP address itself.

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating the App, and only the data each provider needs to perform its function:

• • Supabase (database, authentication, and secure file storage)
• • OpenAI (AI body analysis — processes the photos and measurements you submit, as described in Section 2.4)
• • Resend (email delivery, including your data exports)
• • RevenueCat (subscription and payment management)
• • Apple App Store / Google Play (payment processing)

If you signed up through a referral partner, that partner may see aggregate referral statistics (such as the number of sign-ups and commission totals). Partners never receive your name, email, health data, or photos.

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity. We will notify you via email or in-app notice of any such change and any choices you may have.

5.4 No Sale of Personal Data

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

9.1 Access and Correction

You may access and update most of your personal information directly within your account settings.

9.2 Deletion

You can permanently delete your account and all associated data at any time directly in the App: go to Profile → Delete Account. Deletion is immediate and irreversible.

You may also request deletion by contacting us at privacy@figurabody.com; we will process such requests within 30 days, subject to legal retention obligations (see Section 6).

9.3 Data Portability

You can download a complete copy of your data at any time directly in the App: go to Profile → Privacy & Security → "Request My Data", and a machine-readable export will be emailed to your account email address.

9.4 Opt-Out of Marketing

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or adjusting notification settings within the App.

9.5 California Residents (CCPA)

If you are a California resident, you have the right to:

• • Know what personal information we collect and how it is used
• • Request deletion of your personal information
• • Opt out of the sale of your personal information (we do not sell personal data)
• • Non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@figurabody.com.