Privacy Policy

GLP BodyGuard is an educational tracking and estimation tool, not a covered entity under HIPAA. However, because the data you log relates to your wellness, we apply HIPAA-aware practices: encryption in transit and at rest, least-privilege access controls, and a strict policy against selling personal data.

We never sell or share your individual data in identifiable form. We may use, publish, or share de-identified and aggregated information (data that cannot reasonably be linked back to you) for research, analytics, product improvement, and commercial purposes. You consent to this use when you create an account.

You can request deletion of your account at any time from your profile, or from our public account deletion page. Deletion removes your identifiable records from active systems.

• Account information: name, email, and password (hashed).
• Wellness inputs: the data you choose to log — weight, protein, training, sleep, mood, adherence, and similar entries.
• Usage data: device, browser, and pages visited, used to maintain and improve the service.
• Billing data: handled by our payment processor. We do not store full payment card numbers on our servers.

• To calculate your Armor Score and personalized trends.
• To deliver AI coaching, reminders, and educational content.
• To process subscriptions and provide customer support.
• To improve platform quality (using aggregated, de-identified data).

We do not sell your personal data. We do not use your wellness data for third-party advertising.

We share limited data with the following processors strictly to operate the service:

• Supabase — the database and file storage behind the app. Everything you enter, including your logs, lab values, injection records, and Meal Scan photos, is stored there.
• Stripe (web) and RevenueCat with Apple In-App Purchase (iOS) — subscription billing and receipts. We do not store full payment card numbers on our servers.
• Google Analytics — product and screen analytics: which pages and screens are used, on what device and browser.
• OneSignal — push notifications and, if you opt in, SMS reminders. OneSignal receives your account id and, when you opt in to texts, your phone number.
• HubSpot — our contact record for support and product email. HubSpot receives your name, email address, and your Armor Score.
• AI providers reached through the Lovable AI gateway — OpenAI models power Kathy and voice transcription.

Each processor uses your data only to perform the service for us.

• Meal Scan — photos you take are uploaded and stored in our file storage, and are sent to an AI provider for analysis.
• Voice — audio you record is sent to an AI provider to be turned into text. The audio is not stored.
• Lab values and injection records — stored on our servers only. They are never sent to an AI provider.
• Conversations — AI Coach conversations are stored in your account so you can see your history. Kathy conversations are not stored; only the specific facts you ask Kathy to remember are saved to your account, and you can delete them from her memories screen.

You can delete your account from your profile, or from our public account deletion page. Deletion is permanent and immediate.

Deleting your account removes your profile, daily logs, vitals, weigh-ins and body measurements, injection records, lab results, supplements, check-ins, scores and score history, badges, streaks, memberships and entitlements, AI Coach conversations and settings, Kathy's saved memories, notification records, and your uploaded photos — including Meal Scan images. It also removes your email address from our marketing and lead records.

We keep purchase and billing records that the law requires us to retain, with your account id removed so they are no longer linked to you.

SMS/Text Messaging: By opting in, you consent to receive text messages from GLP BodyGuard at the mobile number you provide. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to unsubscribe at any time. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never sold or shared with any third parties. Information sharing with subcontractors who support our service (e.g., SMS delivery providers) is limited to providing the messages you requested.

• Access — request a copy of the data we hold on you.
• Correction — update inaccurate information directly in your account or by contacting support.
• Deletion — request permanent deletion of your account and associated data.
• Portability — receive your logged data in a machine-readable export.
• Withdraw consent — cancel your subscription at any time.

We retain account data while your subscription is active and for a reasonable period after cancellation to support billing, refunds, and legal obligations. You may request earlier deletion at any time.

For privacy questions or to exercise any of your rights, email drdamon@glpbodyguard.com.