Privacy policy

The short version

• Your health data is private to your account. Nobody else can read it, and we do not look at it.
• BodyProof only reads from Apple Health and Health Connect. It never writes to them.
• On Android, if you turn it on in Settings, BodyProof can read last night's sleep, heart rate variability and resting heart rate from Health Connect while the app is closed, so it can tell you how the night went. This happens on your phone only. Nothing is sent anywhere by this, and you switch it off in Settings or in Health Connect at any time.
• On iPhone, if you turn it on in Settings, BodyProof can be woken by Apple Health when new sleep, heart rate variability or resting heart rate arrives from your watch, and read them to tell you how last night went. This happens on your phone only. Nothing is sent anywhere by this, and you switch it off in Settings at any time.
• We never sell your data, never use it for advertising, and never share it except as described below.
• AI reads (meal snaps, Ask and the like) go to Anthropic's Claude only after you allow them.
• Anonymous usage statistics are off unless you switch them on, and never include health data.

What we hold

• Your account: your email address, and a password if you set one.
• Health data you connect: with your permission, BodyProof reads sleep, heart rate, heart rate variability, resting heart rate, weight, steps, energy, workouts and blood pressure from Apple Health or Health Connect.
• What you log or import: food and meal photos, weigh ins, medications and doses, drinks, how you feel, notes, progress photos, a profile picture or emoji if you choose one, and files you choose to import (for example an Apple Health or MyFitnessPal export).
• Your settings: goals, the modules you use, the devices you say you wear.

Where it is kept, and who can see it

Your data is stored with Supabase, our database provider, and the app is served by Vercel. Every row and every photo is tied to your account, and the database itself refuses any request that is not signed in as you. Progress photos sit in a private store and are hidden on screen until you choose to show them.

We do not look at anyone's health data. The only view we have of accounts lists sign up dates, how far setup got, which devices were named, whether readings are arriving, and how many AI reads were used. It never shows readings, food, medicines, feelings or notes.

AI reads

Some features ask an AI model to read something for you: a meal photo or description, a menu, a medicine label, a gym machine's screen, two progress photos you pick, a question you ask about your own data, or this morning's figures so we can write Your morning. These go to Anthropic's Claude. Before the first one, BodyProof asks for your OK, and you can withdraw it in Settings.

Only what that read needs is sent. Anthropic does not use it to train its models. Nothing else in your account goes to Anthropic.

Apple Health

Data from Apple Health is used only to show you your own readings and the reads built on them. It is never used for advertising or marketing, never sold, and never shared with anyone except Anthropic when you ask for an AI read that needs it. BodyProof does not write anything to Apple Health.

Food search

When you search for a packaged food, the words you type are sent from our server to Open Food Facts to find matching products. They are not linked to your account.

Usage statistics

If you switch on Share anonymous usage (in setup or in Settings), BodyProof sends PostHog, hosted in the European Union, which screens and features you use and where setup stops, under a random id that is not your email. It never sends a reading, a food, a medicine, a symptom or anything you type, and never records your screen. It is off unless you switch it on, and switching it off stops it at once.

Separately, our server counts what running BodyProof costs us, with no link to you: each AI read's size and price by kind (never what was sent or answered), and each day's number of new accounts, sign ins and AI reads. These go to the same PostHog as totals, not as a person.

Your choices and rights

• Export: download everything your account holds, any time, from Settings, Export your data.
• Delete: Settings, Delete account removes your account and everything in it straight away, progress photos included. If you can't reach it, email privacy@mnemolabs.app from your account's address and we delete it within 30 days.
• Access, correction and objection: you have these rights under UK, EU and Australian privacy law; write to us and we will answer within a month.
• Permissions: you can change what BodyProof reads from Apple Health in the Health app, or from Health Connect in its settings, at any time.

Not medical advice

BodyProof shows information about your own data. It is not a medical device and does not diagnose, treat or prevent any condition. Talk to your doctor or pharmacist about your health and your medicines.

Children and changes

BodyProof is not meant for anyone under 16. If this policy changes in a way that matters, we will say so in the app before it takes effect.