Privacy Policy
Last updated 15 September 2026 · BodyMaker LLC
What this covers
This policy explains what BodyOS collects, why, and what you can do about it. BodyMaker is the operator of the service.
Geographic scope: BodyMaker does not currently offer the service to residents of the European Union, and does not intentionally target EU residents. If you reside in the EU, please do not use the service.
What we collect
Your name, email and phone from the card your provider creates. Your own entries: answers to questionnaires, marks of how you feel, meals, notes and messages. Sleep, movement, heart and weight from Apple Health, if you connect it. Photos, voice messages and documents you send. The notification token of your device.
Why we collect it
Only to run the service: to keep your record, to show your picture, to let your specialist accompany you, to send what you asked to receive, and to keep the service secure. Nothing else.
What we never do
We do not sell your data. We do not pass it to anyone for their own purposes. We do not use it for advertising or for tracking you across other apps and sites. We do not store your health data in iCloud.
Who can see it
You, and the specialists your provider assigns to you. Contracted providers of hosting, communications, security and application support process the data only as needed for the purposes above and under contract. The AI providers named in section 7 process it on the same basis.
Photos of your body
Photos you send for a body scan are sent to fal.ai to build your 3D body model. This runs only after you grant the separate body photo consent. We do not keep the photo itself. Silhouettes derived from it are kept only if you granted that consent as well, and withdrawing it deletes them.
Outside models
BodyOS runs on AI models operated by third parties in the United States: Anthropic, OpenAI, Google and fal.ai. Your messages, voice recordings, photos and documents are sent to them to produce your answers, summaries and body model. They process the data on our behalf, under contract, and do not use it for their own purposes. Before text leaves us, email addresses, phone numbers and links are removed from it. Your first name is sent to the assistant, so it can address you by name. Text printed inside a photo or a document — your name at the top of a lab report, for example — is sent as it is: it cannot be removed from an image.
How long we keep things
Original body photos are deleted once the analysis is finished. Processed silhouettes are kept for 24 months from your last body-scan activity, and only if you opted in to storing them. Food photos are kept for 30 days and then deleted automatically. One exception: if you correct a meal analysis and separately allow us to keep that photo, it is kept for up to 12 months and used only to make the analysis more accurate. You can withdraw that permission at any time and the photo is deleted. Derived metrics and your record are kept for as long as they are needed to run the service for you. This policy describes the resident account flow; if a guest scan flow is offered, it is governed by its own consent notice and guest silhouettes are kept for 12 months.
Your choices
Withdraw consent to health data at any time: Account, Privacy, Health Data. Request a full copy of your data from the app: Account, Privacy, Export my data. Delete your account from the app: Account, Delete account.
What deletion means
When you delete your account, we delete your identifiers and sensitive attachments and permanently disconnect your identity from the history. Where our records cannot be physically erased row by row, the link between you and them is severed instead. A limited set of records may be kept where law, finance or security requires it.
The website
The website bodymaker.us uses no analytics, no advertising pixels and no cross-site tracking. It sets a single technical cookie (bm_consent) that remembers your cookie choice, and only after you make one. Two third-party touchpoints exist: YouTube videos in privacy-enhanced mode appear on the Stories page, and the waitlist form sends your email through Google Apps Script when you submit it. Fonts are served from our own domain — no Google Fonts. This policy covers the website, the BodyOS app and the specialist platform together.