Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how BodyPlus handles information collected through the public website, mobile app, account features, support requests, privacy requests, and related BodyPlus services that link to this policy. In this policy, "BodyPlus" means the BodyPlus product. BodyPlus is operated by Amit Levi under the trading name BodyPlus, at Even Menachem 51, Israel. For service and privacy questions, contact bodyplusxpro@gmail.com.

The current Android and iPhone releases covered by this policy do not request camera or microphone permission. They do not include Live camera coaching, a camera-based repetition counter, raw photo or workout-video capture, technique or medical scoring, or voice recording. Camera, microphone, photo, video, and voice features remain future-only and require updated notice, consent, permissions, and app-store disclosures before release.

BodyPlus is offered in Israel and the United States on Android through Google Play and, where the iPhone app is available, on iPhone through the App Store. The Apple-specific features below apply when you use the iPhone app. A planned feature is not a promise of current availability. Other markets and sensitive-data features require a separate release decision.

1. Information we may collect

The information BodyPlus collects depends on the features you use. It may include:

account and contact information, such as email address and name;

authentication and session information from supported sign-in methods;

profile details, training preferences, settings, units, and goals you provide;

workout plans, workout logs, exercise history, reports, and progress information;

body progress and weight information you enter; body photos, raw media and camera analysis are not included in the current Android and iPhone releases;

no camera frames, pose/body camera signals, microphone audio, or camera-derived repetition count in the current Android and iPhone releases covered by this policy;

nutrition preferences, meal information, or food-related inputs if those features are enabled;

AI coach or chat information when you use those features, including action proposals, confirmations, action status, and identifiers or revisions needed to verify a resulting record; voice remains future-only;

support messages, privacy requests, deletion requests, and related status records;

purchase and subscription information from Google Play and Apple, including product and order references, purchase-verification tokens, purchase and renewal status, refunds or revocations, and account-linked credit and entitlement records;

device, browser, app version, diagnostics, error, security, and operational log information;

website usage information such as page requests, IP address, and browser metadata.

On iPhone, Sign in with Apple and Google sign-in create separate BodyPlus accounts; matching names or email addresses do not link them. To access your existing Android account and data on iPhone, choose the same Google account. If you choose Hide My Email, Apple may provide a Private Relay address instead of your personal email. Keep access to your chosen sign-in method. Purchases and data belong to the BodyPlus account used for them; signing in another way does not transfer them.

2. Information from app stores and third parties

BodyPlus may receive or process information through app stores, authentication providers, hosting providers, email providers, AI or voice providers, analytics or diagnostic tools, and other service providers used to operate the product. Those providers may process information under their own terms and privacy practices.

For the text Coach, BodyPlus sends your question and the limited profile, workout, nutrition, report and current-session context needed for the request to OpenAI. This information can reveal health or fitness details. The app asks for your separate AI-sharing permission before the text Coach sends anything to OpenAI, and you can withdraw that permission in Settings. If you turn on the optional Pro suggestions in the Android app, OpenAI also checks your latest Coach message and the previous Coach answer so the Coach can tell when suggesting Pro fits (see section 6). Publishing this notice does not record your consent or authorize a new use of your information. We may change models or providers as the service develops. Before a change to who receives your information or how it is used takes effect, we update the relevant notice and obtain fresh permission where required. This policy does not authorize undisclosed future sharing. Permission to generate an answer is separate from confirmation to save a Coach Action. Declining optional AI sharing leaves non-AI features available; withdrawing permission stops future AI requests, not processing already completed. AWS hosts BodyPlus account and application services. Google supplies Google sign-in and Android store billing; Apple supplies Sign in with Apple and iPhone store billing. Authentication may provide an account identifier, name and email or Apple Private Relay address. BodyPlus receives transaction references and status, not your full payment-card details. We do not authorize these data for advertising tracking. Provider-specific account, retention and transfer controls govern processing in addition to this notice.

3. Fitness, body, and sensitive information

Google Play handles Android checkout; Apple handles iPhone checkout. BodyPlus uses purchase information to verify transactions, grant and reconcile access and credits, handle refunds and purchase support, prevent fraud, and maintain transaction records. Do not send card details, passwords, or purchase-verification tokens to support. Account deletion and subscription cancellation are separate actions; see our account deletion instructions. Limited transaction records may be retained where required for legal, accounting, fraud-prevention, or dispute purposes after account deletion.

Workout history, body progress, reports, nutrition inputs and health-related Coach text may be sensitive or personal depending on your location and how the feature is used. Voice inputs are future-only in the current Android and iPhone releases covered by this policy. BodyPlus uses this information only for the purposes described in this policy, the app experience, user-selected features, support, safety, security, and legal or platform compliance.

The current Android and iPhone releases covered by this policy do not process camera frames or pose/body camera signals and do not create a camera-derived workout report. BodyPlus is not designed to store raw workout videos or raw audio recordings as account records by default. If a future feature saves, uploads, or keeps raw videos, raw audio, or other media, BodyPlus must update this policy, any required in-app disclosure, and applicable store disclosures before that practice is used.

No body-photo upload, camera analysis, microphone recording, HealthKit or Health Connect processing is offered in these core releases. A future feature requires updated disclosures and the necessary permissions before use.

4. Cookies and website data

The public website processes ordinary technical data such as page requests, browser metadata, IP address and referrer information to deliver and protect the site. Our hosting and security provider may set a strictly necessary security cookie.

Website statistics (Google Analytics). Only if you choose "Accept" in the cookie banner, the website uses Google Analytics, a service of Google, to count visits and learn which pages are useful: pages viewed, how you arrived, approximate location (city, region and country), and device and browser type. Google Analytics sets the cookies _ga and _ga_<id>, which expire about 13 months after your last visit. We keep advertising features, Google signals and data sharing off, we do not use this data for advertising, and we do not link it to your BodyPlus app account. Google Analytics does not log or store IP addresses. User- and event-level statistics are deleted after 14 months; aggregated reports that do not identify you may be kept longer. Google may process the data in the United States; Google LLC participates in the EU-U.S. Data Privacy Framework. The legal basis is your consent. If you choose "Reject", or make no choice, nothing is loaded and the site works the same. You can change your choice at any time with "Cookie settings" at the bottom of every page. If you are in the EU/EEA or the UK, you may also complain to your data protection authority. Learn more: How Google uses information from sites or apps that use its services.

The BodyPlus app does not use Google Analytics.

5. How we use information

We use information to:

provide, maintain, secure, and troubleshoot BodyPlus features;

create and manage accounts, sessions, settings, reports, and support requests;

show workout history, progress, plans, and app content;

provide educational AI-assisted fitness explanations when requested;

prepare supported Coach Action proposals and, only after your explicit confirmation, validate and apply the requested change and show its status or readback;

if you turn on the optional Pro suggestions in the Android app, suggest the Pro subscription in the Coach at a helpful moment, and count, only as totals, whether such suggestions are followed by a subscription (see section 6);

respond to account deletion, export, privacy, and support requests;

detect abuse, protect accounts, debug errors, and improve reliability;

comply with legal, platform, safety, and store requirements.

6. AI-assisted fitness guidance

BodyPlus may use workout, profile, report, nutrition, current-session, or chat context to provide educational fitness guidance and to prepare supported action proposals. Where a Coach Action is offered, the server requires explicit confirmation before committing a supported change, applies account and object authorization, and returns action status or authoritative readback. Action receipts and resulting records may be kept to prevent duplicate writes, support the feature, and protect account integrity. Cancel, delete, or undo is available only where the applicable action supports it.

Coach memory is optional and stays off until you turn it on in the app. When memory is on, OpenAI automatically reviews each new Coach chat message, the previous Coach reply when needed to understand a short answer, and limited current Coach memory to decide whether to add, update, or remove a permitted memory item. For qualifying coaching answers, OpenAI may also review the latest exchange to create or update a short dated follow-up note. These calls are sent with provider storage disabled (`store=false`). BodyPlus uses this information to personalize coaching and improve the service. Active memory items may be sent to OpenAI only to manage that user's memory and produce that user's coaching answers.

Generic Coach memory keeps only coaching or answer style, routine and training-background details, temporary items with an expiry, and short dated follow-up notes. Until a dedicated Training field is available, it may also keep liked exercises. Temporary items expire within no more than 90 days; sleep and energy mentioned naturally in chat may be kept only briefly, for a few days, to adapt that day's training. The outcome of a suggestion may be added to a follow-up note. At most three follow-up notes are kept, and each is deleted after 30 days. Generic Coach memory does not keep injury or physical-limitation details, food likes or dislikes, allergies, mood or mental state. It also does not keep self-harm, eating-disorder, medication, pregnancy, or diagnosis details, and keeps nothing from a turn that crosses a non-training safety boundary.

With the user's explicit yes in chat, or when the user chooses them directly in Profile, BodyPlus may save a closed "areas to protect" list next to the existing limitation yes/no marker and categories. The only available areas are knee, shoulder, lower back, elbow, wrist, ankle, hip, and neck; BodyPlus does not collect a free-text injury story for this field. The Coach reads the selected areas to avoid loading them and choose another exercise. These areas may be sent to OpenAI only to produce that user's coaching answers. If the user reports pain, the Coach stops that movement, says in one sentence that it is not a medical professional, and suggests seeing a doctor or physiotherapist if the pain continues. The areas and workout notes that mention pain may be health information. BodyPlus does not use them to diagnose, treat, or plan rehabilitation. Profile states: "This is not a substitute for a medical check." With the same direct-entry or explicit-confirmation rule, food likes, dislikes, and allergies may be saved in Nutrition preferences. Planned Profile and Training fields also include liked and disliked exercises and preferred workout time. After a workout, the user may optionally provide an effort rating from 1 to 10 and optional workout notes in the user's own words, for example "too easy, add weight" or "my shoulder hurt"; BodyPlus stores them with that workout. The Coach reads them to adjust the next session and to protect an area the user says hurt, and never uses them to diagnose, treat, or plan rehabilitation. Each Coach answer may offer a thumbs-up or thumbs-down rating, which BodyPlus may store to improve the Coach and the service. These Profile, Nutrition, Training, workout, and rating records are not generic Coach-memory items and remain subject to their own view, correction, deletion, export, and retention controls.

The user can view, edit, disable, or delete each generic memory item and can export Coach memory. Turning off automatic Coach memory erases the facts and follow-up notes created under that opt-in, but does not silently delete records the user separately saved in Profile, Nutrition, Training, a workout, or a Coach-answer rating. Previously confirmed answer-style preferences remain separately controllable in Coach memory; using Delete all removes all Coach memory. Account export and account deletion cover Coach memory and the related account records described above. BodyPlus never sells this information or uses it for advertising. Coach memory does not authorize OpenAI to make autonomous account changes. AI-assisted outputs and proposals can be incomplete, inaccurate, delayed, or unsuitable for your circumstances. BodyPlus does not provide medical care, emergency support, diagnosis, treatment, rehabilitation, or clinical nutrition advice.

Optional Pro suggestions (Android app). This is off unless you turn it on, and AI Coach works the same without it. If you turn it on and you do not have Pro, the Coach may suggest the Pro subscription once, after it has helped you, you have said the help was useful and you have asked for ongoing coaching. To notice that moment, your latest Coach message and the previous Coach answer are sent to OpenAI for a short check that returns only yes or no: whether you said the help was useful, whether you asked for ongoing coaching, and whether you said you do not want offers. The result is kept with the conversation. Saying you do not want offers turns Pro suggestions off until you turn them on again in Settings. The Coach remembers that it already suggested Pro through the conversation where it happened; conversations are deleted automatically 30 days after their last message, or after 2 hours if chat history is off, and after that the Coach may suggest Pro once more if the choice is still on. The suggestion only opens the subscription screen, where you decide. The iPhone app does not offer Pro suggestions. To learn whether Pro suggestions lead to subscriptions, we count, only as totals for groups of at least 10 people, how many suggestions were shown and how many of those people started Pro within 7 days. We use the conversation and subscription records we already keep, and these totals are not used to decide who sees a suggestion.

זיכרון המאמן הוא אופציונלי ונשאר כבוי עד שמפעילים אותו באפליקציה. כשהזיכרון פעיל, OpenAI בוחנת אוטומטית כל הודעת צ׳אט חדשה, ובמידת הצורך את תשובת המאמן הקודמת וזיכרון מצומצם קיים, כדי להחליט אם להוסיף, לעדכן או להסיר פריט זיכרון מותר. לאחר תשובות אימון מתאימות, OpenAI עשויה גם לבחון את חילופי הדברים האחרונים כדי ליצור או לעדכן הערת מעקב קצרה ומתוארכת. הקריאות האלה נשלחות כאשר שמירת התוכן אצל הספק כבויה (`store=false`). BodyPlus משתמשת במידע כדי להתאים את האימון ולשפר את השירות. פריטי זיכרון פעילים עשויים להישלח ל-OpenAI רק כדי לנהל את הזיכרון של אותו משתמש ולהפיק עבורו תשובות אימון.

זיכרון המאמן הכללי שומר רק סגנון אימון או תשובה, פרטי שגרה ורקע באימונים, פריטים זמניים בעלי תאריך תפוגה והערות מעקב קצרות ומתוארכות. עד שיהיה שדה ייעודי באזור האימונים, הוא עשוי לשמור גם תרגילים אהובים. פריטים זמניים פגים בתוך 90 יום לכל היותר; שינה ואנרגיה שמוזכרות באופן טבעי בצ׳אט עשויות להישמר לזמן קצר בלבד, למשך ימים אחדים, כדי להתאים את האימון של אותו יום. תוצאת הצעה עשויה להתווסף להערת מעקב. נשמרות לכל היותר שלוש הערות מעקב, וכל אחת נמחקת לאחר 30 יום. זיכרון המאמן הכללי אינו שומר פרטי פציעה או מגבלה גופנית, העדפות או אי-העדפות מזון, אלרגיות, מצב רוח או מצב נפשי. הוא גם אינו שומר פרטים על פגיעה עצמית, הפרעות אכילה, תרופות, היריון או אבחנה, ואינו שומר דבר מתור שיחה שחצה גבול בטיחות שאינו בתחום האימון.

לאחר ״כן״ מפורש של המשתמש בצ׳אט, או כשהמשתמש בוחר אותם ישירות בפרופיל, BodyPlus עשויה לשמור ליד הסימון הקיים של יש/אין מגבלה והקטגוריות רשימה סגורה של ״אזורים שיש להימנע מהם״. האפשרויות היחידות הן ברך, כתף, גב תחתון, מרפק, שורש כף היד, קרסול, מפרק הירך וצוואר; בשדה הזה BodyPlus אינה אוספת סיפור פציעה בטקסט חופשי. המאמן קורא את האזורים שנבחרו כדי להימנע מהעמסתם ולבחור תרגיל אחר. האזורים עשויים להישלח ל-OpenAI רק כדי להפיק תשובות אימון עבור אותו משתמש. אם המשתמש מדווח על כאב, המאמן מפסיק את התנועה, אומר במשפט אחד שאינו איש מקצוע רפואי, ומציע לפנות לרופא או לפיזיותרפיסט אם הכאב נמשך. האזורים והערות אימון שמזכירות כאב עשויים להיות מידע בריאותי. BodyPlus אינה משתמשת בהם כדי לאבחן, לטפל או לתכנן שיקום. בפרופיל מופיע: ״אין בכך תחליף לבדיקה רפואית.״ לפי אותו כלל של הזנה ישירה או אישור מפורש, העדפות מזון, אי-העדפות ואלרגיות עשויות להישמר בהעדפות התזונה. השדות המתוכננים בפרופיל ובאימונים כוללים גם תרגילים אהובים ולא אהובים ושעת אימון מועדפת. לאחר אימון, המשתמש יכול למסור באופן אופציונלי דירוג מאמץ מ-1 עד 10 והערות אימון אופציונליות במילים שלו, למשל ״היה קל מדי, להוסיף משקל״ או ״כאב לי בכתף״; BodyPlus שומרת אותם עם אותו אימון. המאמן קורא אותם כדי להתאים את האימון הבא ולהגן על אזור שהמשתמש אמר שכאב, ולעולם אינו משתמש בהם כדי לאבחן, לטפל או לתכנן שיקום. בכל תשובת מאמן עשויה להופיע אפשרות אגודל למעלה או למטה, ו-BodyPlus עשויה לשמור את הדירוג כדי לשפר את המאמן ואת השירות. רשומות הפרופיל, התזונה, האימונים, המשוב לאחר אימון והדירוגים אינן פריטי זיכרון מאמן כלליים, וחלות עליהן בקרות הצפייה, התיקון, המחיקה, הייצוא והשמירה המתאימות להן.

המשתמש יכול לראות, לערוך, להשבית או למחוק כל פריט זיכרון כללי ולייצא את זיכרון המאמן. כיבוי הזיכרון האוטומטי מוחק את העובדות ואת הערות המעקב שנוצרו מכוח ההסכמה הזאת, אך אינו מוחק בשקט רשומות שהמשתמש שמר בנפרד בפרופיל, בתזונה, באימונים, באימון שבוצע או בדירוג תשובת מאמן. העדפות סגנון תשובה שאושרו בעבר נשארות בשליטה נפרדת בזיכרון המאמן; האפשרות ״מחיקת הכול״ מוחקת את כל זיכרון המאמן. ייצוא החשבון ומחיקת החשבון כוללים את זיכרון המאמן ואת רשומות החשבון הקשורות שתוארו לעיל. BodyPlus לעולם אינה מוכרת מידע זה ואינה משתמשת בו לפרסום. זיכרון המאמן אינו מסמיך את OpenAI לבצע שינויים עצמאיים בחשבון. תוצרים והצעות של בינה מלאכותית עלולים להיות חלקיים, לא מדויקים, מאוחרים או לא מתאימים לנסיבות המשתמש. BodyPlus אינה מספקת טיפול רפואי, תמיכת חירום, אבחנה, טיפול, שיקום או ייעוץ תזונה קליני.

הצעות Pro אופציונליות (באפליקציית Android). האפשרות כבויה עד שמפעילים אותה, והמאמן עובד אותו דבר גם בלעדיה. אם הפעלת אותה ואין לך Pro, המאמן עשוי להציע את מנוי Pro פעם אחת, אחרי שעזר לך, אמרת שהעזרה הועילה וביקשת ליווי מתמשך. כדי לזהות את הרגע, ההודעה האחרונה שלך למאמן ותשובת המאמן הקודמת נשלחות ל-OpenAI לבדיקה קצרה שמחזירה רק כן או לא: האם אמרת שהעזרה הועילה, האם ביקשת ליווי מתמשך והאם אמרת שאינך רוצה הצעות. התוצאה נשמרת עם השיחה. אם תאמר/י שאינך רוצה הצעות, הצעות Pro נכבות עד שתפעיל/י אותן שוב בהגדרות. המאמן זוכר שכבר הציע Pro דרך השיחה שבה זה קרה; שיחות נמחקות אוטומטית 30 יום אחרי ההודעה האחרונה, או אחרי שעתיים אם היסטוריית הצ׳אט כבויה, ואחרי זה המאמן עשוי להציע Pro פעם נוספת אם האפשרות עדיין פעילה. ההצעה רק פותחת את מסך המנוי, ושם ההחלטה שלך. אפליקציית האייפון אינה מציעה הצעות Pro. כדי לדעת אם הצעות Pro מובילות להרשמה, אנחנו סופרים, רק כסיכומים של קבוצות של 10 אנשים לפחות, כמה הצעות הוצגו וכמה מהאנשים האלה התחילו Pro בתוך 7 ימים. אנחנו משתמשים ברשומות השיחה והמנוי שכבר נשמרות, והסיכומים האלה אינם משמשים להחליט מי יקבל הצעה.

7. Device permissions

The current Android and iPhone releases covered by this policy do not request camera or microphone permission. Future features may request permissions such as camera, microphone, photos, notifications, or network access only after the related disclosures are updated. You can manage app permissions through device settings. Denying a future camera or microphone request does not authorize background capture.

BodyPlus does not use camera or microphone permissions as a hidden background monitoring tool. If a feature needs camera or microphone access, the app should make that feature purpose clear and rely on the permission and consent flow required for that feature.

8. Sharing and disclosure

BodyPlus does not sell personal information or personal health data. We may share information:

with service providers that help operate, host, secure, support, or improve BodyPlus;

with authentication, app-store, AI, voice, email, analytics, diagnostics, or infrastructure providers when their services are used;

when required by law, legal process, platform rules, or to protect rights and safety;

to prevent abuse, fraud, security incidents, or unauthorized access;

at your direction or with your consent.

Service providers that process information for BodyPlus are expected to use that information only for authorized BodyPlus purposes and to protect it in a manner consistent with this policy and applicable law, unless you choose to use a separate third-party service under that provider's own terms.

9. Advertising and tracking

BodyPlus does not use advertising tracking on this website or in the app covered by this policy. The website uses Google Analytics for statistics only with your consent, as described in section 4. If advertising, tracking, or other new analytics practices are added later, this policy and store disclosures must be updated before those practices are used.

10. Retention

We retain account, workout, nutrition and Coach records while needed to provide the features you request and until a valid deletion request is completed, subject to applicable law. Limited transaction, consent, rights-request and security records may be retained where necessary to meet legal obligations, document compliance, address fraud or resolve a specific dispute. Retention is limited to the relevant purpose and period; it is not permission to keep all account data indefinitely for general operational reasons. Different record categories and provider services can have different periods. You may ask us for the retention information applicable to your records.

11. Account deletion and data requests

You can request account deletion or ask a privacy question through the account deletion page. We verify ownership and process requests under applicable law. A request receipt is not confirmation that deletion has finished. Where a record must be retained for a lawful exception, retention is limited to that record and purpose; we explain the outcome and any applicable exception in our response.

Deleted data may remain in backups until scheduled backup expiry. Backup expiry and provider processing can differ from deletion of active account records. These processes do not remove applicable deletion duties. We assess required provider follow-up and backup handling as part of the request and do not report provider deletion as completed solely because local records were removed.

Use Settings and the privacy and data controls in the app to request account deletion; email is an alternative, not the only route. For an Apple-linked account in the iPhone release, follow the fresh Sign in with Apple verification shown in the app so BodyPlus can revoke its Apple authorization as part of deletion. A failed verification or revocation is not reported as completed deletion. This does not delete your Apple or Google account. If you use Private Relay or cannot access the app, contact support and identify the sign-in method; do not send passwords, identity documents or purchase tokens. BodyPlus verifies account ownership through a secure follow-up.

Deleting your BodyPlus account does not cancel an Apple or Google Play subscription. Manage renewal in the store where you purchased.

12. Local device data

Some information may be stored locally on your device to support app functionality. Deleting the app or clearing local device data may remove local data from that device, but it does not by itself delete a BodyPlus account or server-side account data.

13. Security

We use reasonable technical and organizational safeguards for information we control. No website, app, provider, network, or internet transmission can be guaranteed to be completely secure.

14. Legal bases where required

Where privacy law requires a legal basis for processing, BodyPlus may rely on bases such as providing the requested service, user consent, legitimate interests in security and product operation, legal obligations, and protection of rights and safety. The applicable basis can depend on the feature, data type, and user's location.

15. International processing

BodyPlus and its service providers may process information in countries other than where you live. Privacy protections and legal rights may vary by location.

16. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, object to, or limit certain processing of personal information, and to withdraw consent where processing relies on consent. You can manage device permissions through your device settings and contact BodyPlus using the email below. We may need to verify your identity before acting on a request.

17. California, EU/EEA, UK, Israel, and other regional rights

Privacy rights and required disclosures can vary by location. BodyPlus receives privacy requests through the contact and deletion paths described here. Use those paths to submit a request or ask about the rights that apply to your location. This policy does not limit any non-waivable privacy rights you have under applicable law.

18. Marketing communications

If BodyPlus sends optional marketing communications, you can ask to stop receiving them by following unsubscribe instructions where available or contacting BodyPlus. Operational, security, account, legal, and support messages may still be sent when needed.

19. Children

BodyPlus is intended for adults who are at least 18 years old. It is not directed to children or minors. If you believe a child or minor has provided personal information, contact us so we can review the request.

20. Changes to this policy

We may update this Privacy Policy as BodyPlus changes or as legal, platform, or operational requirements change. The updated date shows when this page was last changed.

21. Contact

Privacy questions can be sent to bodyplusxpro@gmail.com.