This Privacy Policy applies to the services, website and mobile application of Body Recode ("we", "us", "our"). Our gym, fitness and coaching services are delivered through the Trainera platform, developed and operated by TRAINERA.FIT LLC ("Trainera", "the Platform"), including its iOS and Android applications and associated services.

Body Recode is the provider of your coaching and fitness services; Trainera is our technology provider and processes data on our behalf on secure infrastructure. This policy explains how your information is collected, used, disclosed and safeguarded across both, including our integration with Google, Facebook, Apple and other third-party services for authentication and optional fitness data access.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Authentication Methods

You can create an account and sign in in several ways. Here is what data each method involves:

Google Sign-In - scopes requested: openid, email, profile. We receive and store your email, name and profile picture.
Facebook Sign-In - scopes requested: email, public_profile. We receive and store your email, name and profile picture.
Apple Sign-In - scopes requested: email, name. We receive your email (which may be a private relay address) and name (provided on first sign-in only), and store your Apple user identifier, email and name.
Email & password - we collect your email address, name and password. Passwords are hashed with bcrypt and never stored in plain text.
Phone number verification - we collect your phone number and a verification code. SMS codes are delivered via Twilio, which receives your phone number for that purpose.

These sign-in methods are used for authentication and account creation only. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. No other Google API scopes (such as Google Drive, Gmail or Google Photos) are requested or used.

2. Optional Health & Fitness Integrations

The app can optionally connect to health platforms to display your health and fitness data alongside your training. Every integration below is completely optional, must be enabled manually, and can be disconnected at any time without affecting any core functionality (workouts, coaching, nutrition tracking).

Apple HealthKit (iOS)

With your explicit permission, the app may request read access to: steps, active energy burned, basal energy burned, heart rate (during workouts), resting heart rate, walking/running distance, flights climbed, exercise minutes, stand hours, workout sessions, sleep analysis, body mass, body fat percentage, lean body mass, blood pressure, blood oxygen saturation (SpO2), respiratory rate, body temperature, water intake and mindful minutes.

Synced HealthKit data is retained on the Platform's servers for up to 30 days to provide progress charts, analytics and historical comparisons; older data is automatically deleted.
HealthKit data is NOT shared with third parties, AI services, advertisers or data brokers, and is never used for advertising or marketing.
Trainers and staff do NOT have access to your HealthKit data unless you explicitly share specific metrics.
When you disconnect Apple Health, all synced HealthKit data is deleted from the servers.

Google Fit

Read-only scopes: fitness.activity.read (steps, distance, calories, active minutes), fitness.body.read (weight, height, body composition), fitness.heart_rate.read (heart rate) and fitness.location.read (workout routes, if logged in Google Fit).

Read-only access - your Google Fit data is never written, modified or deleted.
Data is fetched in real-time for display and not permanently stored; temporary caches are deleted within 24 hours.
Trainers and staff do NOT automatically see your Google Fit data.
You can disconnect anytime in account settings or revoke access at Google Account Permissions; all cached data is then immediately deleted.

Huawei Health Kit

Read-only access to activity data (steps, distance, calories), sleep data and basic body measurements, used only to display your health information inside the app.

Only a single historical data record is requested when you grant permission, to initialize your health overview.
No background, continuous or cross-device data synchronization is performed, and no medical diagnosis or health analysis.
Huawei Health Kit data is not permanently stored, not shared with trainers or third parties, and not transmitted back to Huawei by the app.

Smartwatch Heart Rate Monitoring

With explicit permission on your smartwatch (Apple HealthKit heart rate / Android BODY_SENSORS), the app captures real-time heart rate during active workouts for per-set tracking and intensity analytics.

Heart rate is read ONLY while a workout is in progress - never in the background.
Per-set and session heart rate samples are saved as part of your workout progress data and may be visible to the trainer working with you.
You can deny the permission at any time; workouts function normally without heart rate data.

Google Calendar

Optional sync of your scheduled training sessions to your personal Google Calendar (scope: calendar.events).

Only events created by the app are created, updated or deleted - your other calendar events are never read or modified.
Only calendar event IDs are stored to track synced sessions; no calendar content is stored on the servers.
Trainers and staff have no access to your Google Calendar data.
When disconnected, synced events remain in your calendar but are no longer updated.

3. Information We Collect

Account and Profile Information

Name and email address.
Phone number for account verification and contact.
Profile information: age, gender, fitness goals, experience level, profile and cover photos.
Medical conditions and allergies - special category data you provide voluntarily so training and nutrition can be adjusted safely.

Health and Fitness Data

Body measurements (weight, height, body fat percentage, muscle mass, circumference measurements).
Progress photos (before/after images you upload).
Workout data (exercises, sets, reps, weights, duration, sessions) and training/nutrition plans assigned to you.
Nutrition data (meal logs, calorie tracking, macronutrients, water intake).
Data from connected health providers and smartwatch heart rate.

Communication Data

Direct messages between you and our trainers and staff (text, images, files) and group chat messages.
Support communications and AI Coach chat conversations.
Transactional emails and notifications.

Payment and Financial Data

The data collected depends on the payment method used. Card details are never stored on the servers.

Apple App Store / Google Play: purchase confirmation data only.
Stripe: Stripe customer ID, subscription ID, payment status and transaction metadata.
PayPal: transaction ID, payment status and payer email.
Bank transfer: IBAN, SWIFT/BIC, account holder name and bank name, used solely to verify payments and process refunds.
Cash payments: amount, date and confirmation status.

Location, Usage and Technical Data

IP-based geolocation for content localization and security.
GPS location only when explicitly permitted for finding nearby gyms and trainers.
Device information, usage patterns, cookies and session tokens.
Push notification tokens, error logs, crash reports and login history retained 90 days for security auditing.

AI-Related Data

Food photos submitted for AI nutritional analysis.
Chat messages sent to the AI Coach.
Anonymized fitness context data used for AI-generated training and nutrition plans.

4. How We Use Your Information

Provide personalized training and nutrition plans, progress tracking and communication.
Create and authenticate your account and process payments.
Display health data from connected providers and generate progress charts and analytics.
Provide AI-powered insights and plan generation and send notifications.
Ensure security, prevent fraud and comply with legal obligations.

Your data is not used for third-party advertising, and your personal information is never sold.

5. Data Storage, Retention and Deletion

Account data is stored securely while your account is active and deleted or anonymized within 90 days of account deletion. Backups are kept for 30 days for disaster recovery.
Apple HealthKit data is retained up to 30 days and deleted immediately on disconnect.
Body measurements, progress photos, workout and nutrition logs are deleted upon account deletion.
Chat messages are retained while your account is active and for 30 days after deletion.
Payment transaction records are retained for the legally required period, typically 7 years.

You can delete your account and data at any time using the account deletion option in settings, or by contacting us or [email protected]. Requests are processed within 30 days.

6. Data Sharing and Third Parties

Your personal information is never sold, rented or traded for marketing purposes. Data is shared only with:

Trainers and staff at Body Recode who work with you directly.
TRAINERA.FIT LLC as the platform operator and data processor.
Service providers necessary to operate the service, including Google, Meta, Apple, Stripe, PayPal, Twilio, Sentry, OpenAI, Anthropic, Firebase, Expo and Huawei.
Authorities when required by law.

7. Your Rights and Control

You can access and update your information, request a copy of your data, and request account and data deletion. You can also revoke integrations through account settings and through the relevant provider.

8. Security Measures

Encryption in transit and at rest.
Passwords hashed with bcrypt and never stored in plain text.
Role-based access control, secure OAuth 2.0 implementation, rate limiting and security monitoring.

9. AI-Powered Features

Optional AI features include food photo analysis, personalized fitness insights, AI-assisted training and nutrition plan generation, and an AI Coach chat.

Food photos are processed in real-time and are not permanently stored.
AI Coach messages may be sent to OpenAI or Anthropic Claude to generate responses.
Your identity data is NOT included in AI requests, and your private trainer messages are NOT processed by AI.
You can opt out of AI features at any time in account settings.

10. Health Disclaimer

The fitness and nutrition information provided through our services is not medical advice. Always consult a physician before starting a new training or nutrition program.

11. Children's Privacy

Our services are not intended for children under 16, and personal data of children under 16 is not knowingly collected.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own, whose data protection laws may differ. Appropriate safeguards are applied where required.

13. Cookies

Essential cookies required for the site to function.
Functional cookies for preferences and interface settings.
Analytics cookies such as Google Analytics (GA4).

14. Changes to This Policy

This policy may be updated to reflect changes in practices, technology or legal requirements. The "Last updated" date shows the current version.

15. Contact

You can reach Body Recode directly at [email protected], or by messaging us through the app.

For technical questions about the underlying platform, contact TRAINERA at [email protected].