BodyNorth Privacy Policy

Effective: 3 September 2026

BodyNorth is a general-wellness meal, workout, calorie, and sleep diary for adults. We minimize server data and do not use advertising trackers.

Data kept on your iPhone

Your profile, body measurements, birthday, calorie guide, meal history, meal locations, workout plans and logs, reports, sleep summaries, saved meal thumbnails, and AI Workout Coach workflows are stored locally with Apple SwiftData. A coach workflow can contain the profile snapshot used, exact baseline plan, paraphrased intent, proposal, server job identifier, and timestamped status events so approval, generation, or a proposal can resume after relaunch. It contains no audio or verbatim transcript. Historical summaries remain visible locally but are not silently used for future requests. BodyNorth does not synchronize this diary through iCloud.

AI meal analysis

Only after your one-time app-wide AI consent, the app sends one resized, metadata-stripped meal photo through our Cloudflare service to OpenRouter and its selected model provider (currently Google). The service asks the model to identify visible food, estimate portion scale automatically from scene context and typical container dimensions, and return gram and calorie ranges, assumptions, warnings, and confidence.

The full-resolution source photo is not uploaded. The BodyNorth Worker does not persist analysis images, prompts, or meal results. OpenRouter requests require zero-data-retention routing and deny provider data collection. Cloudflare, OpenRouter, and the selected model provider necessarily process the request to return the result under their service terms. AI can be wrong, including about foods, portions, ingredients, oil, sauces, preparation, and calories. Results are saved automatically on your iPhone and remain editable and deletable.

Pending jobs stay on the iPhone and may contain one resized JPEG and a small thumbnail. Payloads are removed after success or dismissal; abandoned retryable jobs expire after 24 hours.

Workout plans

Manual and deterministic workout plans and active-calorie ranges are created on your iPhone. The optional voice-only AI Workout Coach is covered by the same one-time app-wide AI consent and also requires microphone permission. If you use it, the app sends one completed 16 kHz mono 16-bit WAV recording of at most 60 seconds; computed age, calculation sex, height, weight, activity level, and calorie goal; current workout schedule, experience, venues, equipment, limitations, and More/Less/Never preferences; and an exact baseline plan. It does not send your birthday, account identifiers, meals, sleep, or workout-performance history.

After Stop, the service returns a paraphrased summary of what it understood—not the transcript. You can approve it before any plan is built or record up to two additional notes. The app deletes each temporary recording after interpretation, cancellation, or failure. If profile settings change while approval is pending, the approval is cleared and the request must be interpreted again with current settings.

The Worker processes audio and transcripts only in request memory and never stores or logs them. After you approve background generation, the service temporarily stores the approved profile context, baseline, structured intent, and generated proposal encrypted in its database. These contents expire at most 24 hours after submission and are deleted earlier when your iPhone confirms saving the result, when you cancel, or when you delete your account. Expired results cannot be retrieved. Durable jobs carry content-free identifiers; plaintext requests, transcripts, and plans are not written to job logs or workflow step history. Your diary remains on your device. Separately, the service records content-free workflow/job phase/revision and per-provider-call metadata such as model identifiers, recording duration, token counts, latency, generation identifiers, provider cost, quota use, and non-content error codes. OpenRouter calls require zero-data-retention, no-data-collection routes and fail closed when none is available; Cloudflare, OpenRouter, and the selected providers necessarily process the request to return the result under their terms.

AI proposals use registered exercises and are validated against equipment, experience, schedule, time, and Never preferences. They can still be unsuitable or wrong. BodyNorth does not provide medical diagnosis, rehabilitation, supplement, meal-planning, or individualized clinical programming. Review every proposal before use.

Apple Health sleep data

If you choose to connect Apple Health, BodyNorth requests read-only access to sleep analysis. Sleep records are summarized locally and are not uploaded to the BodyNorth service or AI providers. Disconnecting stops app access; deleting BodyNorth data does not delete source records from Apple Health.

Meal location

With foreground permission, BodyNorth can attach a location to a scanned meal. Coordinates are converted into a short place label and stored only with the local meal. Coordinates and place labels are not sent to the BodyNorth service, OpenRouter, or the model provider. Location failure never blocks analysis.

Account and operational data

When you use an AI feature, Sign in with Apple provides an app-specific identifier and, if available, an email or private-relay email. We store that identifier, email, hashed session credentials, the current app-wide AI consent state, separate daily meal and workout usage, model and token counts, workout recording duration, latency, provider generation identifiers, provider cost, and limited non-content operational errors for authentication, quota enforcement, security, support, and operation. We do not store raw session tokens.

Subscriptions and purchases

Apple processes payments and payment-card information. BodyNorth does not receive or store your payment-card details. To provide and restore Pro access, Apple gives the app a signed transaction and subscription status. The app sends that signed transaction to the BodyNorth service for verification. We store limited purchase information linked to your app account, including product identifier, original transaction identifier, expiration, environment, and revocation status. You can manage or cancel a subscription in your Apple Account subscription settings.

Sharing and tracking

We do not sell personal data, track you across other companies' apps or websites, or use meal photos, results, or workouts for advertising. AI request processing uses Cloudflare, OpenRouter, and the selected model provider. Apple processes Sign in with Apple, subscriptions, and optional Apple Health permissions under your Apple settings.

Retention and deletion

You can delete your account in You. This revokes server sessions and Apple authorization, deletes account-linked service records, and removes local meals, plans, sessions, logs, profiles, sleep summaries, pending jobs, and AI Workout Coach workflows/status history. The local coach log is otherwise retained until you clear local/account data or remove the app. Anonymous aggregate cost totals may remain without an account link. Removing the app also removes its local container, subject to iOS backup and device-management behavior.

Your choices

Meal location, Apple Health sleep access, meal-photo AI, and voice workout AI are optional. BodyNorth asks once during account setup for app-wide consent covering both AI features and does not ask again unless the terms, providers, or data uses materially change. You can decline, deny or revoke microphone permission, cancel before or during recording, ignore workout proposals, edit meal AI results, adjust deterministic workouts, delete meals, dismiss pending jobs, disconnect Apple Health, sign out, or delete app and account data from You. The app requests microphone access only when you choose to record a workout request. It does not request Apple's Speech Recognition permission because transcription occurs through the service.

Children

BodyNorth is intended for adults age 18 and older and is not directed to children.

Contact

For privacy questions or support, email [email protected] or visit the support page. Please do not include sensitive health, meal, or workout information unless necessary. See also the Terms of Use and Methodology & Limitations.