Privacy Policy

Bodiivo is operated by Isaac Mineo, contactable at isaacmineo@gmail.com. That is the data controller for everything described here.

Account information. Your email address and password, and a first name if you give one. The password is stored only as a hash, by our authentication provider; Bodiivo never sees or stores it in readable form.

What you tell it directly. Your training goal and target date, height, weight, age, biological sex, ordinary daily activity level, training experience, available equipment, days and session lengths you can train, and any limitation or injury you ask it to work around. Every one of these is optional except the goal, and each is asked with the reason it is asked shown beside it.

What you log. Completed sets — load, repetitions, effort and any note you write — cardio and mobility sessions, body weight, food and drink, and answers to questions the app asks you.

Apple Health (iOS app only). With your explicit permission, and only the categories you allow, Bodiivo reads: workouts, step count, active energy, exercise minutes, sleep analysis, body mass, and dietary energy, protein, carbohydrate and fat. It reads these and nothing else. Bodiivo never writes to Apple Health. You can withdraw any of it at any time in the Health app, and Bodiivo will simply stop receiving it.

The camera (iOS app only). Used solely to read a barcode on food packaging so the item can be looked up. No photograph or video is stored, transmitted, or retained — the frames are processed on your device and discarded.

Bodiivo does not collect your location, contacts, photos, advertising identifier, or browsing activity on other sites, and contains no third-party advertising or analytics SDKs.

Every use of your data is one of the following, and there are no others:

To build and adapt your training plan. Your goal, capacity, equipment and stated limitations decide what is prescribed. What you actually log then decides what changes — the load on an exercise, the length of a run, the reps in a progression — and the reasoning behind each change is shown to you before it is applied.

To estimate energy and nutrition. Height, weight, age, sex and activity level produce a maintenance estimate, which becomes a calorie and macronutrient target for your goal. Bodiivo labels these as estimates and shows the arithmetic.

To show you your own history and progress.

To operate and secure the service — signing you in, keeping your data separated from every other account, and diagnosing faults.

Health and fitness information is never used for advertising, marketing, product promotion, market research, or data mining, by us or by anyone else. It is never sold, rented, or traded. It is never shared with data brokers.

Your data is stored in a Postgres database hosted by Supabase (United States), with row-level security enforced by the database itself so that one account cannot read another's rows. The application is hosted by Vercel.

Bodiivo does not store personal health information in iCloud.

Beyond hosting, data is sent to these processors, for these purposes only:

Anthropic and OpenAI. Bodiivo's coaching explanations are drafted by a language model. When you use those features, the relevant context — which can include training and nutrition figures from your account — is sent to the provider to produce the text. Both providers are used under their API terms, which do not permit training their models on this data. The model never decides a training or nutrition change on its own: every numeric change is computed by Bodiivo and governed by rules you control.

USDA FoodData Central and FatSecret. Used to look up food and barcode information. Only the search term or barcode is sent. No personal or health data is sent to either.

These processors act on our instructions. None of them is permitted to use your data for their own purposes.

Your data is kept for as long as you have an account. You can delete your account at any time from Settings, or by emailing isaacmineo@gmail.com. Deletion removes your account and the data associated with it from the live database; backups roll off within 30 days.

Deleting the iOS app removes Apple Health access immediately. It does not by itself delete data already synced to your Bodiivo account — use account deletion for that.

You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to a particular use. Email isaacmineo@gmail.com and you will get a response within 30 days. If you are in the UK, EU, or a US state with a comprehensive privacy law, these rights are statutory and are honoured as such.

All traffic is encrypted in transit with TLS. Data is encrypted at rest by the database provider. On iOS, the credential that keeps you signed in is held in the system Keychain rather than in preferences, because a refresh token is a long-lived key to your health data. Access to production data is limited to the operator named above.

No system is perfectly secure. If a breach affects your data, you will be told promptly and told what was affected.

Bodiivo is not intended for anyone under 16 and is not directed at children. If you believe a child has created an account, email us and it will be removed.

Bodiivo is a training and nutrition planning tool, not a medical device, and it does not diagnose, treat, or prevent any condition. Its nutrition figures are explicitly labelled estimates. Talk to a qualified professional before starting a new training or nutrition programme, particularly if you have an existing condition or are pregnant.

If this policy changes materially, the date above changes and you will be told in the app before the change takes effect. Continuing to use Bodiivo after that means you accept the revised policy.