Privacy Policy
1. Who we are
BodyVisionAI is a fitness app that uses your phone camera to count repetitions and give feedback on your form in strength, HIIT and dance workouts. This policy covers the mobile app (Android and iOS), the website bodyvisionai.com and the BodyVisionAI TV apps (Google TV, Fire TV, Samsung and LG).
The company responsible for your information is ALLTECH CONSULTORIA DE TECNOLOGIA LTDA, R. Odilon Dantas Cortez, 98, Casa 2, Jardim Cristina, São Paulo, SP, 02324-050, Brazil («BodyVisionAI», «we»). Privacy questions and requests: contact@bodyvisionai.com.
2. The short version
- The camera video never leaves your phone. Pose detection runs on the device; we receive numbers about your sets, not images.
- We do not sell your personal information for money.
- Advertising cookies only with your consent, and only on the website.
- Health-related information (such as pain or injury notes) is used only to build your workout, with your consent.
- No one under 13. Account holders are adults; teens 13 to 17 use a profile inside an adult’s account, with extra protections.
- You can delete your account in the app or on the website at any time.
3. Information we collect
- Account and identifiers: email, username, name, password (stored only as a hash), and the account ID from Google, Apple or Facebook if you sign in with them. For fraud prevention we also keep the IP address and a device identifier from sign-up.
- Profile: optional photo, bio, profile names and avatars of the profiles in your account, and whether a profile belongs to a teen (with the account holder’s confirmation).
- Training profile: age, gender (optional), goal, level, available days and minutes, equipment, muscle focus and, if you choose to tell us, notes about pain or injuries.
- Workout and form data: exercises, sets, repetitions by zone (green, yellow, red), scores, points, XP, streaks, goals and badges. With each set the app sends numbers it computes on your device: the smallest and largest angle of each repetition, arm and leg spread in exercises such as the jumping jack, repetitions that were not counted and why, the pose model used, the device model, the frame rate, and the smoothness, tremor and visibility of the body during the set. When a set you started is not saved, we keep the reason, the repetitions and the time up to that point.
- Camera: processed on your device to find body points; the video and the body points are not sent to us or stored by us. In Replay mode, short clips stay on your device only for that set’s feedback.
- Location (optional): for the regional ranking you can share an approximate location; in Brazil the app stores state, city and neighborhood (from your postal code or approximate location). You can also save training places (a name and, if you add it, a map position). The app does not ask for precise background location.
- Payments: plan, subscription status and dates, and payment identifiers from Stripe, Apple or Google. Card numbers stay with the payment provider; we keep a card fingerprint from Stripe to prevent referral fraud.
- Communications: support messages, ratings and comments you send, and the emails we exchange.
- Device and usage: push notification token, platform, device name and time zone, app and site language, access logs, approximate location from IP, and the last time you used the service.
- Referrals: your referral code and who referred you.
- TV: the TV type (for example «Samsung TV») and a session code. If you sign in on the TV, your email and password go straight to our server; the TV keeps only a 3-hour session code and shows your first name. The TV has no camera.
Sources: you, your device (the app), the website, sign-in providers you choose (Google, Apple, Facebook), payment providers and app stores, and the account holder for profiles inside their account.
4. How we use it
- Provide the service: count repetitions, score form, show your history, points, ranking and TV mode.
- Build and adjust your workout plan from your training profile.
- Process subscriptions, free trials and referrals, and prevent fraud and abuse.
- Calibrate movement detection and scoring: form measurements are analyzed together, periodically, to adjust the limits the app uses to count and rate repetitions.
- Send service messages (receipts, trial ending, payment failure, account security) and, if you allow it, reminders and push notifications.
- Answer support requests and improve the product, mostly with aggregated data.
- Keep the service secure and meet legal obligations.
We do not use your workout or health-related information for advertising.
5. Sensitive and health-related information
Pain and injury notes, and workout and form data, may be considered health information or «consumer health data» under some state laws. We collect them only to provide the service you asked for, with your consent, and we do not sell them or use them for advertising. You can delete pain and injury notes in your training profile and withdraw consent by deleting the information or your account. See Consumer health data.
6. Camera and biometrics
Pose detection runs on your device. We do not receive or store camera images, video or body points, and we do not collect biometric identifiers (such as face geometry) or use your body measurements to identify you.
8. How long we keep it
- Account, profile and workout data: while your account is active. When you delete the account, we delete or anonymize it right away.
- Payment and tax records: as long as the law requires, without workout data.
- Access logs: 6 months, the minimum Brazilian law requires (Marco Civil da Internet), longer only to investigate an incident.
- Support messages: while your account is active.
- Aggregated statistics that no longer identify you may be kept.
9. Your choices
- Delete your account: Settings in the app or on the website, or the instructions at /account-deletion. Deleting the account does not cancel an App Store or Google Play subscription: cancel it in the store.
- Cookies: accept, reject or customize non-essential cookies in the Cookie Policy.
- Notifications, ranking and location: turn them off in the app settings; leaving the ranking removes you from the public list.
- Access, correction, portability: write to contact@bodyvisionai.com.
10. Children and teens
BodyVisionAI is not directed to children under 13 and does not allow accounts or profiles for anyone under 13. The account holder must be 18 or older. Teens 13 to 17 can use only a profile inside an adult’s account, created with the account holder’s confirmation. Teen profiles do not appear in the public ranking, do not receive engagement notifications or purchase offers, and use the most private settings by default. The account holder can view, change or delete them. If we learn that we hold information about a child under 13, we delete it. Users under 18 can ask us to remove content they posted (such as a bio or photo).
11. Where your information is stored
Our servers are in Brazil (AWS São Paulo). Some providers process information in the United States or other countries. We use contracts and safeguards required for these transfers.
12. Security
Passwords stored as hashes, HTTPS, short-lived tokens, restricted database access and access logs. No system is 100% secure; if we learn of a breach that affects you, we will notify you and the authorities as the law requires. Tell us if you suspect an incident.
13. Changes and contact
We will tell you in the app or by email before material changes take effect. Questions: contact@bodyvisionai.com · ALLTECH CONSULTORIA DE TECNOLOGIA LTDA, R. Odilon Dantas Cortez, 98, Casa 2, Jardim Cristina, São Paulo, SP, 02324-050, Brazil.
Canada
- Service and risk. The app gives posture feedback for general fitness and dance. You assume the inherent risks of physical exercise.
- Subscriptions. Premium plans renew automatically. For a term longer than six months, you receive a clear billing notice before renewal, as required by applicable provincial consumer laws.
- Privacy (PIPEDA). Posture analysis runs on your device. Profile data may be stored outside Canada (for example in the United States or Brazil) with safeguards required for that transfer.
ALLTECH CONSULTORIA DE TECNOLOGIA LTDA · CNPJ 63.032.552/0001-00 · R. Odilon Dantas Cortez, 98, Casa 2, Jardim Cristina, São Paulo/SP, CEP 02324-050, Brasil · contact@bodyvisionai.com
· HomeYour US state privacy rights
Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with consumer privacy laws have rights over their personal information. We honor the requests below for all US users.
- Know and access: the categories and specific pieces of personal information we hold, the sources, the purposes and who we share it with.
- Correct inaccurate information.
- Delete your information (also in the app: Settings › Delete account).
- Portability: a copy in a usable format.
- Opt out of sale, sharing and targeted advertising: we do not sell for money; reject marketing cookies in the cookie settings to stop website advertising. Support for the Global Privacy Control browser signal is being added; until then, use the cookie settings.
- Limit or withdraw consent for sensitive information, such as health-related notes.
- Opt out of profiling with legal or similarly significant effects: we do not make such decisions.
- No discrimination for using these rights.
How to ask: email contact@bodyvisionai.com from the address of your account, or use the in-app options. We verify your identity with your account before answering and reply within 45 days (we may extend once by 45 days and will tell you why). An authorized agent can act for you with your signed permission; we may ask you to confirm it.
Appeals: if we deny a request, you can appeal by replying to our answer with «Appeal». We answer within 45 days (60 in Colorado). If you disagree with the outcome, you can contact your state Attorney General.
California notice at collection
- Categories collected (section 3): identifiers; customer records; protected characteristics you choose to give (age, gender); commercial information (subscriptions); internet activity (logs, website events with consent); approximate geolocation; sensory information is processed only on your device (camera) and not collected; inferences (training level and plan); sensitive personal information (account login, health-related notes, precise location if you add a training place on the map).
- Purposes: section 4. Retention: section 8.
- Sold or shared in the last 12 months: not sold; website internet activity and identifiers may have been shared with Google and Meta for advertising, only with marketing cookie consent.
- Sensitive personal information is used only for the purposes allowed by law (providing the service you asked for), so the «limit the use» right does not change how we use it.
- Shine the Light: we do not disclose personal information to third parties for their own direct marketing.
Consumer health data
This section is our consumer health data privacy policy under the Washington My Health My Data Act, Nevada law (SB 370) and Connecticut law.
- What we collect: pain and injury notes you choose to add; workout and form data (repetitions, scores and the angle measurements described in section 3); age and gender if you provide them. Camera images and body points stay on your device.
- Why: to count repetitions, give form feedback, build your workout plan and calibrate movement detection.
- Sources: you and the app on your device.
- Sharing: only with the service providers in section 7 that host or process it for us (Amazon Web Services). We do not sell consumer health data or use it for advertising, and we do not use geofencing.
- Consent: we collect it only with your consent, given in the app before you add it, and you can withdraw consent at any time by deleting it or your account.
- Your rights: confirm whether we collect your consumer health data, access it, see the list of providers we share it with, delete it and withdraw consent. Write to contact@bodyvisionai.com; appeals as above.