Privacy Policy

1. Who we are

This Privacy Policy explains how NextBody ("we", "us") collects, uses, shares and protects personal information when you use the NextBody app, your account and a paired HOOP band. NextBody is the controller of that information. It also serves as our consumer health data privacy notice. Questions: [email protected].

Before the app reads any health data, it shows you a separate consent screen listing exactly what it collects. You can change that decision at any time in Profile › Data & Legal › Collecting health data.

2. What we collect

Account: your email address, your name if you provide it, and the identifier issued by Sign in with Apple or Google. If you use Apple's Hide My Email, we see only the relay address.

Profile: sex, date of birth, height and weight, entered by you or read with your permission from Apple Health on iPhone or Health Connect on Android, plus your goal, units, language and settings. We only read from Apple Health and Health Connect; we never write to them.

Health Connect (Android): with your permission the app reads only your height and weight, to fill in your profile and calculate calorie and training estimates. A compatible band can also use these profile values when you choose a body composition scan in a supported version. We do not sell this data or use it for advertising, we do not share it with third parties except the service providers listed below that run the Service, and we do not use it for any purpose other than providing and improving those features. Our use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. You can revoke access at any time in Health Connect settings.

Band readings, only after you consent: heart rate, heart rate variability including raw beat-to-beat intervals, steps, distance, calories and movement intensity, sleep signals (staging, duration and night HRV), and skin temperature. From these we compute scores such as sleep score, readiness, training load and energy targets.

When you choose Body scan and agree to save the results, your compatible band uses a small electrical current and your profile information to estimate body composition. In versions with scan history, the app stores the time, weight used and available estimates, including body fat, lean mass, muscle mass and body water. It syncs these records to your NextBody account so you can review past scans. You may request a copy or deletion as described below. Connected assistants cannot access these scan records. In iOS build 13, results are cleared when you close the scan.

Older versions could store body composition scans, overnight oxygen, wrist meal response and balance checks. You can request a copy or deletion of records already in your account as described below.

Meals: the words, voice and photos you use to log food, and the estimates made from them. Location metadata is removed from photos on upload.

Voice: when you speak to the app, the audio is streamed to a speech recognition provider to turn it into text. We do not store the recording; we keep the resulting text as part of the conversation or meal.

AI conversations: your messages, the AI's replies, the plans and screens it produces, and facts it remembers about you to personalise later answers, such as preferences or injuries you mention.

Phone motion: step counts from your iPhone's motion sensors, used when the band is out of range, if you allow it.

Device and usage: phone model, operating system and app version, band model, firmware version and battery level, a Bluetooth identifier for each paired band, which screens you open, what fails, timings and error reports.

Support: what you send through Report a problem or by email, including screenshots and the app state attached to the report.

Consent records: each consent decision, the version and a fingerprint of the text you saw, the time and the language.

We do not collect your precise location, contacts, or the advertising identifier, and we do not track you across other companies' apps or websites.

3. How we use it

To provide the Service: sync and store your readings, compute your day, show your history, estimate meals, and run the AI features you use.

To run daily AI allowances, keep the Service secure, prevent abuse and fraud, and enforce our Terms.

To support you, fix bugs and improve reliability and features, using usage data and error reports.

To comply with law, respond to lawful requests, and establish or defend legal claims.

We may create aggregated or de-identified information that can no longer reasonably identify you, and use it for any lawful purpose.

We do not sell your personal information, do not use your health data for advertising, do not share it with data brokers, and do not use it to make decisions with legal or similarly significant effects about you.

4. Legal bases

Where the GDPR, UK GDPR, China's Personal Information Protection Law or similar laws apply, we rely on: your explicit, separate consent for health and other sensitive personal information; the performance of our contract with you to run your account; our legitimate interests in securing, fixing and improving the Service, which we balance against your rights; and legal obligations.

Where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect processing that already took place.

5. Who we share it with

We share personal information only with service providers that process it on our behalf to run the Service, under their terms and data processing commitments:

Supabase: hosting, database, sign-in and file storage, on Amazon Web Services servers in the United States (US West).

AI model providers: xAI (Grok), our primary model, and Alibaba Cloud Model Studio (Qwen), used as a fallback model and for speech recognition and web search. When you use an AI feature, the text of your request, relevant readings, meal photos or audio are sent to them to produce the result. These providers may keep inputs for a limited time under their own terms, for example for abuse monitoring. Web search queries are also passed to the search engines those providers use.

TypeSafe (Jev): when enabled for an AI feature, relevant request text and application context are sent to TypeSafe to select actions or interpret requests. This decision service is separate from the model that writes the answer.

Apple and Google: when you sign in with them, Apple for Apple Health, and Google for Health Connect on Android, which stores health data on your device.

GitHub: problem reports you send are filed in our private issue tracker; attached screenshots are stored under an unlisted link.

The HOOP band's software kit runs inside the app on your phone to talk to the band over Bluetooth.

We may also disclose information when required by law or legal process, to protect the rights, property or safety of our users, the public or us, in connection with a merger, acquisition, financing or sale of assets (subject to this Policy), or with your direction or consent.

6. International transfers

We and our providers process information in the United States, mainland China and other countries whose data protection laws may differ from yours. When you use AI features, your request may be processed in both the United States and mainland China. By using the Service and giving the consents described here, you acknowledge these transfers. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses, and on your separate consent.

7. How long we keep it

We retain your account, profile, readings saved to your account, meals, AI conversations and remembered facts while your account exists, unless you delete them earlier.

Our configured retention targets are 30 days for meal photos, 90 days for AI screen outputs, 180 days for usage analytics, and 400 days for historical raw overnight oxygen and meal response samples. Removal depends on the relevant cleanup job being deployed and running; these targets are not a guarantee that every copy is erased on that day. We do not store voice recordings in NextBody storage. Contact us to request deletion independently of scheduled cleanup.

When account deletion completes successfully, your account access is revoked and the associated app data is deleted from our live systems. Copies may remain in backups until the hosting provider's backup retention period expires. Support reports in GitHub, their attached screenshots and provider-held records are not automatically erased by the in-app account deletion; contact us to request their deletion, subject to applicable retention obligations. We may keep consent records, subscription records and anything needed to meet legal obligations, resolve disputes, or enforce our agreements, for as long as that requires.

8. Your rights and choices

In the app you can: correct your profile; delete meals and entries; see and erase what the AI remembers in Profile › AI memory; withdraw health data consent in Profile › Collecting health data, which stops collection; and delete your account and its data in Profile › Delete account. In iOS Settings, or in Android Settings and Health Connect, you can turn off Apple Health or Health Connect, camera, microphone, photos, motion, Bluetooth and notification access at any time; some features will then stop working.

Depending on where you live, you may also have the right to access or get a copy of your information, to have it corrected or deleted, to restrict or object to processing, to data portability, to withdraw consent, and to not be discriminated against for exercising these rights. Residents of Washington, Nevada and other US states with consumer health data laws have the right to know which third parties receive their consumer health data.

To make a request, write to [email protected] from the email on your account. We may need to verify your identity before acting. We reply within 30 days, or the shorter period your law requires. If we decline your request, you can appeal by replying to our answer. You also have the right to complain to your local data protection authority.

9. Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit, access controls that keep each account's data to that account, and limited staff access. No system is completely secure, and we cannot guarantee the security of information sent over the internet or stored on your devices. Keep your phone locked and your sign-in methods safe.

If a breach affects your personal information, we will notify you and the authorities as the law requires.

10. Children and teenagers

The Service is not directed to children under 16. You must also meet any higher age required to independently consent to the processing of your data where you live. We do not currently offer a verified parental-consent process for children below that age. If you believe we have collected data from someone who does not meet these requirements, contact [email protected] so we can investigate and delete the affected account and data as required.

11. Changes

We may update this Policy. The date at the top shows the latest version. If we make a material change, such as a new kind of data, a new purpose or a new category of provider, we will tell you in the app before it takes effect, and ask for your consent again where the law requires.

12. Contact

Privacy questions and requests: [email protected].

Website and shop

The nextbody.ai storefront is hosted by Shopify. Hosting requests include technical information such as your IP address and browser details; Shopify may set cookies needed to operate its services. The website loads fonts from Google Fonts, which receives technical request information such as your IP address. The storefront stores cart, language and local contact preferences in your browser or session cookie. Checkout is hosted by Shopify, which processes payment, shipping and order information under its privacy policy. Website purchases do not share the iOS health account. Clearing site data removes local preferences, but does not delete Shopify orders.

If you contact us about an order or support request, we process the contact details and content you provide to respond. Do not include payment card numbers, passwords or unnecessary health information.