BodyLeveling analyzes photos of your body to estimate your muscle development and build a training and nutrition plan. Body photos are sensitive, so this page states plainly what leaves your phone, where it goes, how long it stays, and how to get rid of it.
This policy is written to be read, not to be survived. If anything here is unclear, write to privacy@bodyleveling.com.
The short version. There is no account, no email address and no password. Your photos are uploaded, analyzed, and deleted from our storage straight after. We run no analytics, no advertising and no tracking of any kind. You can erase everything from inside the app at any time.
Who is responsible
The data controller is Walid Guemil, France. Contact: privacy@bodyleveling.com.
There is no account
BodyLeveling has no sign-up and no login. We never ask for an email address, a phone number, a password or a social account.
When you first open the app it generates a random identifier (a UUID) on your device. That identifier is the only thing linking your scans together. It is not your advertising ID, not your device serial number, and not derived from any hardware identifier. It is a random value with no meaning outside our service.
The identifier is stored in your device's secure keychain and in the app's local storage. On iOS the keychain survives reinstalling the app, so reinstalling normally keeps you attached to your existing scans.
What we collect
Sent to our servers
- The random device identifier described above.
- Your first name, as you enter it during onboarding.
- Your fitness goal, training experience, training days per week, preferred workout split and training priority.
- Your self-reported metabolism type.
- Your height, current weight and goal weight, and your unit preference.
- Your language preference.
- Your three body photos, for each scan.
- Your self-reported training and nutrition adherence, at each weekly check-in.
- The fact that you confirmed you are 18 or older.
Kept only on your device
- Your streaks, badges, phases and other progress state.
- Your reminder and theme preferences.
- The original copies of your photos. These never leave your phone except as the upload described below, and they are what powers your before and after comparison.
Never collected
We do not collect your email address, your contacts, your location, your health records, or data from Apple Health. We use no analytics SDK, no crash reporting SDK, no advertising SDK and no attribution SDK. We do not fingerprint your device and we never show the App Tracking Transparency prompt, because we have nothing to track you with.
How your photos are handled
For each scan the app takes or selects three photos: front, back and side. They are re-encoded as JPEG on your phone, then uploaded directly to our object storage over an encrypted connection using a short-lived, single-use upload link.
Our analysis service reads those three files, sends them to our AI provider for analysis, and writes back your scores. Once the analysis is successfully saved, the photos are deleted from our storage. They are kept only while the analysis is in flight, so that a failed request can be retried without asking you to shoot everything again.
We do not use your photos to train any AI model, we never publish them, and we never share them with anyone beyond the providers listed below.
Who else processes your data
| Provider | What they receive | Why |
|---|---|---|
| Google (Gemini) | Your three photos and your profile data, for the duration of the analysis | The AI that reads the photos and produces your scores, exercise plan and nutrition plan |
| Amazon Web Services (S3) | Your three photos, until the analysis is saved | Temporary photo storage |
| Cloudflare | Network traffic to our API and this website | Hosting and protection |
| RevenueCat | Your random device identifier and your subscription status | Manages your subscription and tells the app whether it is active |
| Apple | Your payment, under Apple's own privacy policy | All purchases go through the App Store. We never see your card |
We do not sell your data. We do not share it for advertising. There is no other recipient.
Some of these providers operate outside the European Union. Transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.
How long we keep things
- Photos: deleted from our storage as soon as your analysis is saved.
- Your profile and your scan results: kept until you delete your account, or until 24 months of inactivity, whichever comes first. After 24 months without a scan, the account is deleted automatically.
- Deletion record: when an account is deleted we keep one audit line recording that a deletion happened, with the device identifier, the number of scans and photos removed, and the date. We keep it for 12 months so we can prove the deletion was carried out. It contains no photos, no name and no measurements.
Deleting your data
In the app: Profile, then Delete Account. This erases your photos from our storage, then your profile, scans, scores and subscription record from our database. It cannot be undone.
Profile also offers Reset All Data, which is different: it clears the app on your phone only and leaves the server copy alone. Use Delete Account if you want us to forget you.
By email: write to privacy@bodyleveling.com and we will do it for you.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. Most of this is faster from inside the app: your profile fields are editable in Profile, and deletion is one tap away. For anything else, write to privacy@bodyleveling.com. We answer within 30 days.
We process your data because you asked us to analyze your photos, which is the performance of our contract with you. You are never required to provide a photo, but the app cannot do anything without one.
If you think we have handled your data badly, you can complain to the CNIL, the French data protection authority, at www.cnil.fr.
Notifications
The app can remind you when your weekly check-in is due. Those reminders are scheduled entirely on your phone. We do not operate a push notification server, we never request a push token, and we cannot send you anything remotely. Turn reminders off in Profile at any time.
Age
BodyLeveling is for adults. You must confirm you are 18 or older before the app collects anything at all, and the confirmation screen is the very first thing you see. We do not knowingly process data belonging to anyone under 18. If you believe a minor has used the app, write to privacy@bodyleveling.com and we will delete the account.
Security
Everything travels over encrypted connections. Photo uploads use short-lived, single-use links. Your device identifier is held in the operating system's secure keychain. Our API is rate limited and sits behind Cloudflare.
No system is perfect. If you find a security problem, please tell us at privacy@bodyleveling.com before telling anyone else.
This website
bodyleveling.com is a static site. It sets no cookies, runs no analytics, and loads no third-party scripts or fonts. Nothing you do here is tracked, so there is no cookie banner to dismiss.
Changes
If this policy changes in a way that affects you, we will update the date at the top of this page and, where the change is significant, tell you in the app.