Privacy Policy

BodyMog (“BodyMog”, “we”, “us”) provides an AI-powered physique scanning service. This policy explains what we collect, why we collect it, and the choices you have. We’ve tried to keep it plain. If anything is unclear, email support@bodymog.com.

1. What we collect

Account information

When you create an account we store your email address and a hashed, salted password. We never see or store your password in plain text.

Photos you upload

To run a scan we receive the image you submit. The image is sent to our AI provider for analysis and is auto-deleted from our servers once the report is generated. We do not use your photos to train models, we do not post them publicly, and we do not sell or share them with advertisers.

Scan results

The structured report produced from your scan (scores, body-fat estimate, weak points, plan, etc.) is stored against your account so you can return to it. You can delete a scan at any time from your dashboard.

Billing data

Subscriptions are processed by PayPal. We never see or store your card details — PayPal returns a subscription identifier and status to us, which we use to grant access.

Notification preferences

If you opt in to email or browser push notifications we store the delivery target (your email, or your browser’s push subscription) and your preferences (frequency, time-of-day) so we can send the nudges you asked for.

Basic technical data

Standard server logs (IP address, user-agent, timestamps) are kept short-term to keep the service reliable and to detect abuse.

2. How we use your data

• To run scans and return your reports.
• To create and authenticate your account.
• To process subscription payments and grant access.
• To send the notifications you opted into — and only those.
• To keep the service secure, prevent abuse, and fix bugs.

We do not sell your personal data. We do not run third-party advertising trackers on the app.

3. Service providers we share data with

We rely on a small number of processors to run BodyMog. Each receives only the data they need to do their job:

• OpenAI — receives the image you upload to produce the physique analysis. Images are not retained by us after processing.
• PayPal — processes subscription payments. They handle card data directly under their own privacy policy.
• Email provider — delivers transactional email (account, billing) and any nudges you opted into.
• Web push service — delivers browser push notifications via your browser vendor’s standard push service.
• Hosting & database — runs the app and stores your account, scans, and preferences.

4. Cookies and similar tech

We use a small number of first-party cookies that are required to keep you signed in and to remember basic preferences. We don’t use advertising cookies and we don’t embed cross-site tracking pixels.

5. Your choices and rights

• Access & export — you can see your scans and account info from the dashboard. Email us if you need a full export.
• Deletion — you can delete individual scans, or request full account deletion by emailing support@bodymog.com. We will remove your account, scans, and notification subscriptions.
• Notifications — every email has an unsubscribe link; push can be turned off from your browser or from the in-app settings.
• Cancel subscription — cancel any time from the billing page; access remains until the end of the paid period.

If you’re in a jurisdiction with extended data rights (e.g. the EU/UK, California), you have the right to ask what we hold, to correct it, to restrict processing, and to lodge a complaint with your local regulator. We honor these requests for everyone, regardless of location.

6. Data retention

Photos: deleted from our servers immediately after the report is generated. Reports and account data: kept as long as your account is active. When you delete your account we remove your data within 30 days, except for the minimum we’re required to keep for tax, legal, or fraud-prevention reasons.

7. Security

Data is transmitted over HTTPS, passwords are hashed and salted, and access to production systems is restricted. No system is perfectly secure — if you spot a vulnerability, please report it to support@bodymog.com.

8. International transfers

Our service providers may process data in the United States and other countries. By using BodyMog you consent to those transfers, subject to the safeguards each provider has in place.

9. Children

BodyMog is intended for users 16 and older. We do not knowingly collect data from anyone younger. If you believe a child has created an account, contact us and we will remove it.

10. Changes to this policy

If we make material changes we’ll update the “Last updated” date above and, where appropriate, notify you in-app or by email before the change takes effect.

11. Contact

Questions, requests, or complaints: support@bodymog.com.