BodycompPrivacy policy
- We store your account and the measurements you enter so the app can show your progress.
- Your measurements are health data. We only store them with your explicit consent.
- Your data is stored in Sweden (EU). We don’t show ads, don’t track you and never sell your data.
- You can download all your data or delete your account at any time in the app (Settings → Your data).
Who we are
Bodycomp is run by Daniel Wijk, Sweden, who is the data controller for the personal data described here. Questions or requests about your data: zenjaran@gmail.com.
This policy covers the Bodycomp apps for Android and iPhone, the Bodycomp web app and this website.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address and password (stored only as a secure hash) | To create your account and let you sign in | Contract (art. 6.1.b) |
| Settings and profile: units, and optionally sex and height | To show values in your units and calculate things like waist-to-height | Contract (art. 6.1.b) |
| Body measurements, check-in dates and notes, the measurements you track, and your goals | The core of the app: storing your measurements and showing how they change | Your explicit consent (art. 9.2.a and 6.1.a), given when you start using the app |
| When you gave consent and when you completed setup | To be able to show that we have your consent | Legal obligation (art. 6.1.c) |
| Technical data when you use the service: IP address, device and app version, sign-in events | To deliver the app and updates, keep the service secure and prevent abuse | Legitimate interest (art. 6.1.f) |
| Feedback emails you send us, including the app details the app adds to them | To answer you and fix problems | Legitimate interest (art. 6.1.f) |
We don’t use your data for advertising, don’t build marketing profiles, don’t use analytics or tracking tools, and don’t make automated decisions about you. Measurements and values shown in the app are for your own information and are not medical advice.
Where your data is stored and who processes it
Your account and measurements are stored in a database in Stockholm, Sweden. We use these service providers, each under a data processing agreement and only to provide the service:
- Supabase: database, sign-in and account emails. Data is stored in the EU (Stockholm).
- Expo (650 Industries): builds the apps, delivers app updates and hosts the web app. It receives technical data (such as IP address and app version) when the app checks for updates or you open the web app, but not your measurements.
- Cloudflare: hosts this website and receives technical data when you visit it.
- Google and Apple: when you download the app from Google Play or the App Store, their own privacy policies apply to that.
Some of these companies are based in the United States and may access data from there, for example for support. Such transfers are protected by the EU’s standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
- Your account, settings and measurements: until you delete them or your account. Deleting your account removes everything immediately from our database.
- Backups made by our database provider are overwritten automatically, so deleted data is gone from backups within 30 days.
- Security and sign-in logs: up to 90 days.
- Feedback emails: as long as needed to handle your feedback, at most two years.
Your rights
You have the right to:
- Access and portability: download all your data as a file in Settings → Your data → Download my data.
- Correct your data: edit or delete any check-in, goal or setting in the app.
- Erasure and withdrawing consent: delete your account in Settings → Your data → Delete account. This removes all your data.
- Object to or restrict processing based on legitimate interest.
You can also email us to use any of these rights, and we’ll answer within one month. If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the data protection authority where you live.
Security
All data is sent encrypted (HTTPS). Passwords are stored only as secure hashes. Access rules in the database make sure each account can only ever read and change its own data.
Children
Bodycomp is not meant for children. You must be at least 16 years old to create an account.
Payments
Bodycomp is currently free. If we introduce paid subscriptions, payments will be handled by Google Play or the App Store, and we will update this policy before then.
Changes to this policy
If we make important changes, we’ll tell you in the app before they take effect. The date at the top shows when this policy was last updated.