BodyFat AIGet the app

1. Who this policy covers

This Privacy Policy applies to the BodyFat AI mobile applications, websites, and related services, together called the “Services,” provided by SHARKTOOTH PTY LTD, also referred to as “Sharktooth,” “we,” “us,” or “our.” By using the Services, you acknowledge the practices described in this policy.

2. Information we collect

Information you provide

  • Account and profile information. Your email address, optional name, sign in identifiers, region, age or age range, sex, height, weight, goals, preferences, and other profile details you choose to provide.
  • Scan and progress images. Guided front, side, and back images, progress photos, and related capture information used to check pose and image quality, generate estimates, and show comparisons over time.
  • Body and progress records. Weight, measurements, body fat estimates, lean mass estimates, trends, check ins, training completion, progress notes, and goals.
  • Nutrition records. Meals, ingredients, portion information, calorie and macro estimates, barcode or food label information, photos of food or labels, and text or voice entries you choose to submit.
  • Recovery and habit inputs. Information you record about sleep, hunger, energy, training performance, recovery, adherence, and related wellness signals.
  • Messages and feedback. Support requests, survey responses, reviews, and other communications you send to us.

Information created by the Services

  • Computer vision outputs. Pose key points, framing and quality checks, body composition estimates, and other derived attributes generated from submitted images and profile inputs.
  • Adaptive plan outputs. Daily targets, progress signals, weekly plan decisions, explanations, and recommendations generated from information available in your account.
  • Usage and diagnostic information. Feature interactions, screens viewed, app version, device and operating system details, language, time zone, crash data, performance information, approximate location inferred from an IP address, network metadata, and security logs.

Information from third parties

  • Health connections. If you choose to connect Apple Health or Health Connect, we read only the categories you authorise. Section 7 lists exactly what is read and how it is used. You can change permissions in your device settings.
  • App stores and billing services. Subscription status, product tier, renewal state, purchase tokens, receipts, refunds, and entitlement information. We do not receive full payment card numbers for purchases processed by an app store.
  • Service communications. Delivery status and engagement information for messages we send, where permitted.

3. How we use information

We use information as reasonably necessary to:

  • create and maintain your account;
  • check scan conditions, generate wellness estimates, maintain progress history, and display comparisons;
  • record nutrition, calculate daily targets, and provide adaptive plan decisions based on the information you choose to track;
  • connect authorised health and fitness information and keep relevant records synchronised;
  • validate purchases, manage entitlements, and restore eligible purchases;
  • respond to support requests and send service, security, and account messages;
  • measure performance, troubleshoot errors, research quality, and improve the Services;
  • prevent fraud, misuse, and security incidents; and
  • comply with legal, tax, accounting, and regulatory obligations.

Depending on where you live, our legal bases may include performing our contract with you, your consent, compliance with law, and our legitimate interests in operating, securing, supporting, and improving the Services. Where consent is required, you may withdraw it, although this does not affect earlier lawful processing.

4. How images and scans are processed

  • The app checks capture conditions such as pose, framing, distance, and lighting.
  • Where face detection is available for the capture flow, detected faces are blurred before body composition analysis.
  • Computer vision models combine submitted images with relevant profile and progress inputs to produce estimates and quality signals.
  • If progress history is enabled, associated images and outputs may be stored with your account so you can review changes over time.
  • You may delete individual scans or progress records through available controls. You may also request account deletion as described below.

5. Automated processing and adaptive guidance

BodyFat AI uses automated processing to generate scan estimates, data quality checks, nutrition estimates, progress trends, and adaptive plan guidance. Inputs and camera conditions can affect outputs. The Services are not intended to make decisions that produce legal or similarly significant effects about you. You remain in control of whether to follow any plan suggestion.

6. When we disclose information

We may disclose information to:

  • Service providers. Vendors that help us operate functions such as hosting, storage, analytics, diagnostics, communications, support, subscription management, and security, subject to applicable contractual and confidentiality obligations.
  • App stores and connected services. Platforms involved in purchases, entitlements, refunds, or a connection you request.
  • Professional advisers. Lawyers, auditors, insurers, accountants, and other advisers when reasonably necessary.
  • Legal and safety recipients. Authorities or other parties when required by law or reasonably necessary to protect rights, safety, users, and the integrity of the Services.
  • Business transaction participants. Relevant parties in connection with a proposed or completed financing, merger, acquisition, reorganisation, or sale of assets, subject to appropriate safeguards.

We do not sell personal information. We do not share personal information for cross context behavioural advertising as that term is defined by certain United States privacy laws.

7. Health information and connected services

BodyFat AI works without any connection to a health app. If you choose to connect Apple Health (iPhone) or Health Connect (Android), we read only the categories you authorise, read-only and only while the app is open; there is no background access, and the app never writes anything to either service. Each sync covers the last 7 days, or 30 days the first time you connect.

If you connect, we read:

  • Daily steps: the day's step total, to complete the step row on Today and credit your step goal.
  • Active calories burned: the day's total, to add movement beyond your plan's everyday allowance to that day's calorie target.
  • Exercise sessions (Apple Health workouts; Health Connect ExerciseSession records): each session's activity type, start time and end time, and its measured calories (on Apple Health the workout's own energy figure; on Health Connect the active calories recorded between that session's start and end). We keep, per session, the type, start, end, duration in minutes and calorie figure; sessions shorter than ten minutes are discarded on your device before anything is uploaded. We use these to tick your Training session, count your training days for the week, list your workouts under Today's exercise and credit their calories to that day's target, up to a cap, when "Add burned calories to my target" is on. We do not use or store a session's title, notes, laps or segments, we do not read exercise routes, heart rate or cadence, and we do not import sets, repetitions, loads or workout programming.
  • Sleep sessions, if you grant them: each session's start time, end time and sleep stages, to compute minutes asleep and minutes in bed per night, shown on Today and used to prefill the sleep question in your weekly review, which you can change before submitting. Sleep can be left unticked when you connect and turned on later from the Sleep row on the app's health screen (Profile, Connected sources).

We do not read weight, heart rate or any medical record from either service.

What we keep is one row per day on your account holding that day's step total, active-calorie total, sleep minutes and list of sessions (type, start, end, minutes, calories). It is sent only to BodyFat AI's own servers, kept until you delete your account, and deleted with it. We do not sell your health data and do not share it with third parties, other than the service providers that host and support the Services on our behalf as described in section 6.

You can withdraw access at any time: tap Disconnect on the Apple Health or Health Connect screen in the app (Profile, Connected sources), or revoke BodyFat AI's access in the Health Connect app on Android or in the Health app on iPhone under Sharing. Disconnecting stops further reads and returns the current day to manual tracking; earlier days stay on your account until you delete it.

8. Security

We use administrative, technical, and organisational measures designed to protect information, such as access controls, secure transmission practices, environment separation, monitoring, and vendor review. No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security. Keep your device and credentials secure and contact us if you suspect unauthorised access.

9. Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your requested history, meet legal and accounting obligations, resolve disputes, enforce agreements, and protect the Services. The period depends on the type of information, why it was collected, account status, legal requirements, and available deletion controls.

Where available, scan photo retention choices let you keep originals until you delete them, retain them for a rolling 12 months or delete them after analysis. Removing original photos preserves recorded measurements unless you separately delete the scan record.

Deleting a record removes it from active use in accordance with our deletion process. Limited copies may remain for a period in backups, security records, or records we must retain by law. When information is no longer needed, we delete or deidentify it where reasonably practicable.

10. Your controls and privacy rights

Available controls may let you:

  • view and correct profile information;
  • review or delete scans, images, nutrition entries, and progress records;
  • change notification and connected health permissions;
  • request access to or an export of eligible account information; and
  • delete your account.

Depending on your location, you may also have rights to access, correct, delete, or receive a copy of personal information; restrict or object to certain processing; withdraw consent; or use an authorised agent where permitted. To make a request, use available tools in the app or email support@bodyfataiapp.com. We may need to verify your identity and authority before completing a request.

For detailed instructions, visit our data deletion page.

11. Cookies, SDKs, and similar technology

Our apps and website may use software development kits, cookies, local storage, and similar technology for authentication, security, preferences, analytics, diagnostics, and communications. Where required, we ask for consent. Browser and device settings may allow you to limit some technologies, although parts of the Services may then work differently.

12. Marketing communications

We may send marketing messages where you have opted in or where otherwise permitted. You can unsubscribe through the link in a marketing email. We may still send service messages about your account, purchases, security, or material changes.

13. International processing

We may process information in countries other than where you live. Privacy laws may differ in those locations. Where required, we use recognised transfer mechanisms or contractual safeguards appropriate to the transfer.

14. Children’s privacy

BodyFat AI is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has submitted information, contact us so we can review and take appropriate action.

The Services may link to or connect with third party products. Their terms and privacy practices govern their own processing. Review those policies before using a connection or external site.

16. Regional disclosures

Australia

You may request access to or correction of personal information and submit a privacy complaint to us. If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.

European Economic Area and United Kingdom

Where applicable, SHARKTOOTH PTY LTD acts as controller for personal data described in this policy. You may have rights including access, correction, erasure, portability, restriction, objection, and complaint to your local supervisory authority.

California and certain United States states

Depending on applicable law, categories collected may include identifiers, customer records, commercial information, internet or electronic activity, approximate location, inferences, health or wellness information, and audio or visual information you submit. Sources and purposes are described above. We do not sell personal information or share it for cross context behavioural advertising.

17. Changes to this policy

We may update this policy as the Services and law change. We will post the updated version and revise the date above. Where required, we will provide additional notice or request consent.

18. Contact us

For privacy questions, requests, or complaints, contact:

SHARKTOOTH PTY LTD Melbourne, Australia support@bodyfataiapp.com

Last updated 10 September 2026.

Back to top