Privacy policy

1. The app: your health data never reaches us

Lab results, metrics and any note you record in BodyBlok are written to a database on your iPhone. We operate no server that receives them, so we hold no copy and could not produce one if asked.

iCloud sync is optional and off by default. Your records stay on this device alone until you explicitly turn sync on, during onboarding or later in Settings. Once on, they are copied to your own iCloud account under your Apple Account, governed by Apple’s terms — that is between you and Apple, and we have no access to it. You can turn sync off again at any time.

Apple Health access is read-only and optional. If you connect it, the app reads metrics such as steps, sleep and heart rate to give your lab results context, writes nothing back, and never syncs that data through iCloud. If you use the Assistant with your own AI provider, recent averages from it are sent to that provider (see below).

If you supply your own OpenAI or Anthropic key, the app asks for your consent before the first request to that provider, naming the provider and listing what will be sent: document text, lab values, report photos when image upload is needed, the health context used by the Assistant (including recent Apple Health averages such as steps, sleep and heart rate), and any unmatched test names. From then on, that data goes from your device directly to the provider under your own account and their privacy terms; your key is stored in the iOS Keychain and is never transmitted to us. You can review or withdraw consent for each provider separately in Settings.

Your health data is never used for advertising and is never sold, whether or not you enable iCloud sync or a BYOK provider.

Subscription purchases are processed by Apple through the App Store; we do not receive or store your payment details.

Crash and performance diagnostics come from Apple's MetricKit, are kept on your device, contain no health data, and reach us only through Apple's App Store Connect crash reports, or if you choose to export and send them.

2. This website: what we collect

Waitlist email. If you submit the form, we store your email address, your chosen language and the time of signup with Brevo, our email provider, for the sole purpose of telling you when the app launches and occasionally what we are building.

Consent choice. Your cookie decision is stored in your browser’s local storage. It never leaves your device and is not a tracking identifier.

Server logs. Our hosting provider records standard request logs, including IP address and user agent, to serve the site and defend against abuse. We do not combine them with anything else.

3. Analytics, only after you allow them

Google Analytics 4 and Microsoft Clarity load only after you accept analytics in the cookie banner. Until then, no request is made to either service and no cookie is set by them.

When enabled, Google Analytics records aggregate usage: pages viewed, approximate location from a truncated IP address, device type and referrer. Microsoft Clarity records how the page is used, such as clicks and scrolling, to produce heatmaps and session replays of this marketing site.

Neither service ever receives health data, because this website never has any. You can withdraw consent at any time using the "Cookie settings" link in the footer; scripts stop loading on your next page view and you can clear existing cookies in your browser.

4. Why we may process this, and for how long

Your waitlist email is processed on the basis of your consent, and we keep it until you unsubscribe or ask us to delete it, and in any case no longer than needed to announce the launch.

Analytics are processed on the basis of your consent and retained according to the provider’s default retention, which is up to 14 months for Google Analytics and up to 30 days of recordings for Microsoft Clarity.

Server logs are kept for a short operational period by our host and then rotated out.

5. Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, withdraw consent, or object to processing. Because the only data we hold is your waitlist email, most requests are satisfied by a single deletion.

Every email we send includes a one-click unsubscribe link, which also removes you from the list. To ask for anything else, write to hello@bodyblok.app and we will answer within 30 days.

If you are in the EU or UK and believe we have handled your data badly, you may complain to your national data protection authority.

6. Who processes data for us

Brevo (Sendinblue), France — stores your waitlist email and sends the launch announcement.

Google Ireland Limited — Google Analytics 4, only with your consent.

Microsoft Ireland Operations Limited — Microsoft Clarity, only with your consent.

Vercel Inc., United States — hosting and request logs for this website.

7. Children

This website is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has submitted an email address, contact us and we will delete it.

8. Changes and contact

If this policy changes materially, we will update the date at the top of this page and, where the change affects data we already hold, tell waitlist subscribers by email.

Questions about this policy: hello@bodyblok.app.