Consumer Health Data Privacy Notice

Last updated: September 29, 2026

BodyPlus is operated by Amit Levi under the trading name BodyPlus, based in Israel. Contact bodyplusxpro@gmail.com for privacy questions or requests. This notice explains our handling of consumer health data and supplements the BodyPlus Privacy Policy. It does not limit rights provided by applicable law. BodyPlus is offered in Israel and the United States on Android through Google Play and, where the iPhone app is available, on iPhone through the App Store.

1. Information and sources

Depending on the features you choose, we process profile and body information such as age, height and weight; workout and activity records; nutrition entries; fitness goals and progress; and health or fitness information you include in text Coach requests or support messages. Sources are information you provide, records produced while you use BodyPlus, and fitness-related inferences generated from those records. Account identifiers connect these records to your BodyPlus account. The covered release does not collect body photos, camera recordings, microphone recordings, precise location, HealthKit or Health Connect data.

2. Purposes and choices

We use this information to provide the records, plans, progress views and answers you request, respond to support and privacy requests, and protect the service. AI Coach is optional; the permission controls are explained in section 4. Two more uses are optional and off until you turn them on: Coach memory, which keeps permitted coaching details to personalize your answers, and, in the Android app, Pro suggestions, where a short check of your latest Coach message decides whether the Coach may suggest the Pro subscription once. To learn whether Pro suggestions lead to subscriptions, we count only totals for groups of at least 10 people; the totals are not used to decide who sees a suggestion. We do not sell consumer health data or authorize its use for advertising tracking. Additional categories or purposes require an updated disclosure and any permission required before that processing begins.

3. Processing and recipients

AWS supplies hosting and storage for BodyPlus account and application records. When you use text AI Coach, OpenAI receives your question and the limited profile, workout, nutrition, report and current-session context needed for the answer. If you turn on Coach memory, OpenAI also reviews new Coach messages and limited current memory to manage your memory items. If you turn on Pro suggestions in the Android app, OpenAI also receives your latest Coach message and the previous Coach answer for a short check that returns only yes or no. These requests are sent with provider storage disabled. BodyPlus support receives information you choose to include in a support or privacy request through the service mailbox. Avoid sending unnecessary health details. Google and Apple provide their respective sign-in and store services; BodyPlus does not send your workout, nutrition or Coach content to them for payment verification. BodyPlus does not authorize consumer health data sharing with an affiliate or an additional provider that is not disclosed here. If legally required disclosure applies, we limit the disclosure to the applicable requirement.

4. AI sharing permission

The app asks for your separate AI-sharing permission before the text Coach sends anything to OpenAI. The permission notice describes the information and purpose before sharing; you can decline and continue using non-AI features, or withdraw permission for future AI requests in Settings. Coach memory and Pro suggestions are separate choices that you can turn off in the app at any time; saying you do not want offers also turns Pro suggestions off. Permission to generate an answer is separate from confirming a Coach Action that saves a change. Withdrawal does not reverse processing already completed. Publishing this notice does not record your consent or authorize a new use of your information. A future provider is not pre-authorized by this notice; material recipient or processing changes require an updated notice and fresh permission where required.

5. Access, withdrawal and deletion

You can ask whether we process your consumer health data, request access and deletion, withdraw collection or sharing permission where applicable, and ask for the recipients of your data and a way to contact them. Use the in-app Privacy and data controls, the Account deletion page, or bodyplusxpro@gmail.com. You do not need to create a new account to make a request. We verify ownership using information reasonably needed for the request. We do not require subscription cancellation before an account-deletion request; deleting a BodyPlus account does not cancel an Apple or Google subscription.

6. Responses and appeals

We handle requests without undue delay and within the applicable legal deadline. Where Washington consumer health data law applies, the response period is 45 days from receipt; a permitted extension requires notice and an explanation within that period. Where Nevada consumer health data law applies, its request deadlines apply. If we decline a request, we explain the decision and how to appeal. You can appeal by replying to that response or contacting bodyplusxpro@gmail.com with "Privacy appeal". We provide a written appeal decision and, if denied, the applicable state Attorney General complaint route. We will not unlawfully discriminate against you for exercising your privacy rights. Any legally permitted fee or exception must be explained; submitting a request is free.

7. Retention and deletion handling

We keep information only for the relevant service or lawful purpose. A request receipt is not a statement that deletion has finished. We assess active records, service-provider follow-up and backups, notify recipients where required, and explain any lawful exception. We do not treat removal of local records as proof of provider deletion. Where Washington consumer health data law applies, a delay for archived or backup systems must not exceed its six-month limit after authenticating the deletion request. Other applicable deletion limits continue to apply.

8. Updates and contact

The version and date identify this notice. Changes do not retrospectively authorize new collection or sharing. Read the Privacy Policy for wider account, security and transfer information. For this notice or a privacy request, contact bodyplusxpro@gmail.com. You may also contact the Washington State Attorney General or Nevada Attorney General where their jurisdiction applies.