Scan photos
A scan is three guided photos (front, side, back). They are checked on device, uploaded over HTTPS to temporary storage, read once by our analysis backend to produce your report, and then deleted from storage. BodyForm does not keep a server-side library of your photos, and photos are not used to train models by us. The analysis is performed via the OpenAI API under its API data controls; OpenAI states API data is not used for training unless the customer opts in, and may be retained briefly for abuse monitoring under its policies.
Your account and reports
BodyForm requires sign-in with Apple or Google. Your profile (like height, weight, and goals) and your scan reports are stored in our database under your account, readable only by you through the app; back-end writes are restricted to the trusted analysis service. Reports contain structured numbers and text — not your photos.
Computed on your device
Health context — waist-to-height, waist-to-hip, body-fat category bands, FFMI, BMI, and trend insights — is computed locally on your device from your report numbers.
Service providers
BodyForm runs on Google Firebase (authentication, database, temporary storage, functions, and app analytics) and uses RevenueCat to manage subscriptions and credits, and the OpenAI API for analysis. These providers process data on our behalf under their own terms. Basic usage analytics help us understand feature use and crashes; they do not include your photos or report contents.
Purchases
Subscriptions and credit packs are billed by Apple through your App Store account. We receive purchase state (via RevenueCat), never your payment details.
Retention and deletion
Reports remain in your account until you delete them or delete your account. Deleting your account removes your profile and reports from our database. Scan photos are already deleted after each analysis as described above.
Not medical advice
BodyForm is informational and does not provide medical advice, diagnosis, or treatment.
Changes
We may update this policy as BodyForm changes. The effective date above identifies the current version.
Contact
For privacy questions or requests, contact XYK LLC at hi@xyklabs.com.