Privacy policy
BodyTrack is an app for tracking your weight, body composition and other health measurements. This policy explains what data it handles, why, and who it is shared with.
Data controller: Insodia LLC. Contact: insodia.com@gmail.com.
1. What we process
- Health measurements you enter: weight, BMI, body fat, muscle mass, body water, bone mass, basal metabolism, metabolic age, visceral fat, blood pressure, heart rate, glucose and blood oxygen, plus any custom metric you create, with their date, time and notes.
- Profile: name or nickname (optional), height and preferred units.
- Account: email address and optional name; the user identifier returned by Google or Apple if you use them to sign in; or an anonymous Firebase identifier if you use guest mode.
- Health (iOS) and Health Connect (Android): if you grant permission, the app reads your weight, BMI, body fat, waist circumference, blood pressure, heart rate, blood oxygen and glucose from Health or Health Connect and stores them as your measurements. It does so automatically when you open the app (you can turn this off in Profile). It also writes the measurements of those types that you log in BodyTrack, so your other health apps can see them. BMI and waist are only synced on iOS. It reads and writes nothing else. This data is never used for advertising, never shared with advertisers and never sold. You can revoke the permission at any time: on iOS in Settings › Privacy & Security › Health › BodyTrack; on Android in the Health Connect app.
- Progress photos: photos taken with the app's camera are stored only on your device, in the app's private folder. They are never uploaded to our servers, never synced to your account, never shared and never used for advertising. Deleting the app deletes them. Your phone's own backup may include them, like any other app file.
- Collected automatically: crash reports (device model, OS and app version, stack trace); usage events (screen views, saving a measurement, exporting data) with an installation identifier.
2. Why we process it
To provide the service (storing, showing and syncing your measurements and calculating your BMI); to send the daily reminder you opt into; to find and fix crashes; and to understand usage and improve the app. Legal bases under the GDPR are performance of the contract, your consent (reminders, analytics) and our legitimate interest (crash reporting).
Your health data is never used for advertising and never sold.
3. Who we share it with
Only with the providers needed to run the app, acting on our behalf: Google Firebase (Authentication, Cloud Firestore, Crashlytics, Analytics). We may also disclose data where legally required.
4. Storage and retention
Measurements are stored in Cloud Firestore (Google servers; international transfers rely on the European Commission's standard contractual clauses) and cached on your device. They are kept while your account exists. Deleting your account erases them permanently; backups are overwritten within 30 days. In guest mode the data lives on your device and in the anonymous record tied to that installation — uninstalling the app or clearing its data loses it irreversibly.
5. Your rights
- Delete your account and all your data: in the app, under Profile → Delete account. It is immediate and irreversible. You can also request it at insodia.com@gmail.com.
- Export your data: under History → Export, as CSV or PDF.
- Access, rectification, objection and restriction: by writing to the contact address.
- Withdraw consent: notification, Health and Health Connect permissions can be revoked in your system settings.
- Complain to your national data protection authority.
6. Children
BodyTrack is not directed at children under 16 and we do not knowingly collect their data. Contact us if you believe a child has provided data and we will delete it.
7. Security
Firestore security rules restrict access to the documents belonging to your own authenticated user, and all traffic to our servers is encrypted with TLS.
8. Important notice
BodyTrack is a personal tracking tool, not a medical device. It does not provide diagnoses or medical advice. Always consult a healthcare professional before acting on this data.
9. Changes
If this policy changes we will update the date above and, for significant changes, notify you in the app.