PRIVACY POLICY
Your progress. Your privacy.
Bodilo is a personal photo and measurement journal. This policy explains what this pilot collects and the choices you have.
What we collect
We store your account identifier, email address, display name, registration time, and the policy versions and consent you accepted. When you save a day, we store the photos, dates, weight, measurements, and notes you choose to enter. We also keep the links you create and their expiry dates. Support requests contain your message, topic, account identifier, and submission time. Short-lived session, login-flow, and network-based rate-limit records help protect access to the service.
Why we use it
We use this information to identify your account, keep your journal separate from other accounts, show your flipbook and trends, restore your journal on another device, manage sharing, and respond to support and privacy requests. We do not use your photos to recognize your face, identify you, or train an AI model.
Private by default
Your account journal is available through authenticated app endpoints. Other users cannot browse it. We do not sell your personal information or use advertising trackers in the app. Browser preferences, such as your chosen speed and units, may be stored on your device. Authentication uses necessary session storage or cookies.
Sharing is your choice
Creating a share link uploads a separate snapshot of the selected photos and captions. Weight is excluded unless you choose to include it. Notes and body measurements are excluded. Anyone with that link can view, save, or forward the snapshot without signing in. Links expire after the duration you select, and you can revoke them. Revoking a link cannot remove copies someone already saved.
Service providers and security
The online pilot uses OpenAI Sites and Cloudflare infrastructure for hosting, ChatGPT authentication integration, database storage, journal metadata, recovery copies, and shared snapshots. Amazon Web Services provides private photo storage, Cognito email authentication, support email delivery, and protected Apple authorization storage and revocation. If you choose Apple sign-in, Apple verifies your identity and provides your chosen verified email address, which can be an Apple private relay address. Bodilo stores an Apple authorization token in a private encrypted AWS table so it can revoke the connection when you close your account. We do not store your Apple password. These services may process technical request information, such as IP address and browser details, to operate and protect their services. Online requests use HTTPS. Account access is checked on the server. We do not claim end-to-end encryption, and authorized service operators may access data when needed for maintenance or support.
Your camera and photos
Camera access is requested only when you choose Open camera. You can upload an existing image instead. The app resizes selected images before storage; a captured image is stored only when you save the day. We do not request your contacts or location.
Retention and deletion
Journal entries remain until you delete them or close your account. Deleting an entry removes it from your active journal but does not change a previously shared snapshot; revoke that link separately. Closing your account removes its active journal and account-owned shared snapshots, revokes its Apple sign-in connection, and removes any email/password profile from the dedicated Bodilo AWS user pool. Expired links stop serving their content; stored snapshots are removed by scheduled maintenance or when accessed after expiry. Previous journal saves are kept as recovery copies for up to 30 days, and photos used by those copies may remain during that period. AWS object versions can remain for up to 30 days after deletion. Provider-managed backups or technical logs may follow the provider’s retention schedule, and information may be retained where required by law.
Access and choices
Export a journal backup from your account. You can edit or delete individual days, revoke links, and request deletion through your account controls. If you need help with access, correction, deletion, or another privacy request, use the Help page. Signing out of Bodilo does not close your authentication-provider account.
Age and policy changes
This pilot is for adults aged 18 and over. Do not upload children’s information. We will update the policy date when these practices change and seek a fresh choice for materially different collection or sharing.
Operator and contact
Bodilo is operated by Fitness Paws LLC, registered in Texas. Email support@fitnesspaws.com for support, Michael.Krepelka@fitnesspaws.com for privacy requests, or use Help.