Privacy policy

1. The app: your health data never reaches us

Lab results, metrics and any note you record in BodyBlok are written to a database on your iPhone. We operate no server that receives them, so we hold no copy and could not produce one if asked.

If you turn on sync, your records are copied to your own iCloud account under your Apple ID, governed by Apple’s terms. That is between you and Apple; we have no access to it.

Apple Health access is read-only and optional. If you connect it, the app reads metrics such as steps, sleep and heart rate to give your lab results context, and writes nothing back.

If you supply your own OpenAI or Anthropic key, your document or question goes from your device directly to that provider under your own account and their privacy terms. The key is stored in the iOS Keychain and is never transmitted to us.

2. This website: what we collect

Waitlist email. If you submit the form, we store your email address, your chosen language and the time of signup with Brevo, our email provider, for the sole purpose of telling you when the app launches and occasionally what we are building.

Consent choice. Your cookie decision is stored in your browser’s local storage. It never leaves your device and is not a tracking identifier.

Server logs. Our hosting provider records standard request logs, including IP address and user agent, to serve the site and defend against abuse. We do not combine them with anything else.

3. Analytics, only after you allow them

Google Analytics 4 and Microsoft Clarity load only after you accept analytics in the cookie banner. Until then, no request is made to either service and no cookie is set by them.

When enabled, Google Analytics records aggregate usage: pages viewed, approximate location from a truncated IP address, device type and referrer. Microsoft Clarity records how the page is used, such as clicks and scrolling, to produce heatmaps and session replays of this marketing site.

Neither service ever receives health data, because this website never has any. You can withdraw consent at any time using the "Cookie settings" link in the footer; scripts stop loading on your next page view and you can clear existing cookies in your browser.

4. Why we may process this, and for how long

Your waitlist email is processed on the basis of your consent, and we keep it until you unsubscribe or ask us to delete it, and in any case no longer than needed to announce the launch.

Analytics are processed on the basis of your consent and retained according to the provider’s default retention, which is up to 14 months for Google Analytics and up to 30 days of recordings for Microsoft Clarity.

Server logs are kept for a short operational period by our host and then rotated out.

5. Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, withdraw consent, or object to processing. Because the only data we hold is your waitlist email, most requests are satisfied by a single deletion.

Every email we send includes a one-click unsubscribe link, which also removes you from the list. To ask for anything else, write to hello@bodyblok.app and we will answer within 30 days.

If you are in the EU or UK and believe we have handled your data badly, you may complain to your national data protection authority.

6. Who processes data for us

Brevo (Sendinblue), France — stores your waitlist email and sends the launch announcement.

Google Ireland Limited — Google Analytics 4, only with your consent.

Microsoft Ireland Operations Limited — Microsoft Clarity, only with your consent.

Vercel Inc., United States — hosting and request logs for this website.

7. Children

This website is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has submitted an email address, contact us and we will delete it.

8. Changes and contact

If this policy changes materially, we will update the date at the top of this page and, where the change affects data we already hold, tell waitlist subscribers by email.

Questions about this policy: hello@bodyblok.app.