Privacy Policy
Last updated 11 August 2026
Body Engineers is a training platform for people with complex health histories. Because of that, we hold information about your body and your injuries that most fitness apps do not. This policy explains exactly what we hold, who can see it, and how to get it removed. It covers both the Body Engineers mobile app and the trainer dashboard at dashboard.bodyengineers.app.
Body Engineers is based in California, United States. Contact: contact@bodyengineers.app.
What we collect
| Category | What it is |
|---|---|
| Account | Name, email address, and the profile photo held by our authentication provider. |
| Client photo | A photo your trainer takes of you in the gym, if they take one. This is stored by us and is separate from any profile photo above. |
| Health profile | Date of birth, height, diet notes, whether you have medical clearance to train, and whether you have reported a heart condition. |
| Injuries | Injury records including body region, side, status, and free-text notes written by your trainer. |
| Assessments | Functional movement screen scores and body-composition measurements recorded by your trainer. |
| Training | Workout sessions, exercises, sets, weights, reps, and any pain you flag against a specific exercise. |
| Appointments | Sessions your trainer books with you, and notes attached to them. |
| Messages | Messages exchanged between you and your trainer in the platform. |
| Device | A push notification token per device, your notification preferences, and your time zone — only if you enable notifications. |
What we do not do
We run no analytics and no advertising trackers. There is no analytics SDK, no advertising SDK, and no tracking pixel in the mobile app, on this website, or on the trainer dashboard. We do not sell or share your personal information, and never have.
One thing worth stating plainly rather than hiding behind that: this marketing website loads its fonts from Google Fonts, which means your browser contacts Google's servers and they receive your IP address and browser details as a result. That is a normal consequence of loading a web font, not tracking we have set up — but it is a third party seeing something about you, so you should know. The mobile app does not do this; its fonts are bundled.
Who can see your information
This is the part worth reading carefully. Body Engineers is a coaching platform, so your data is not private to you alone:
- Your trainer can see your health profile, injuries, assessments, full workout history including pain flags, appointments, and your messages with them. That is the point of the product — they cannot program safely without it.
- Administrators of your gym can see the same information for clients of that gym.
- Other clients cannot see any of your information.
Service providers
We share data with these providers solely to operate the service:
- Clerk — authentication and account identity.
- Convex — database, application logic, and file storage.
- Expo, with Apple Push Notification service and Firebase Cloud Messaging — delivering push notifications to your device.
- Vercel — hosting for this website and the trainer dashboard.
- Resend — sending the confirmation email for a deletion request.
Your choices
These are commitments we make to you directly, not a recitation of a statute we are subject to:
- See your data. Ask and we will provide a copy.
- Delete your account and data. Use bodyengineers.app/delete-account, or the Settings screen in the app. We respond within 30 days.
- Correct anything wrong. Ask us, or edit it in the app.
- Turn off notifications at any time in the app's Settings screen, or in your device's system settings.
To review or request changes to the personal information we hold, email contact@bodyengineers.app.
How long we keep it
We keep your account data while your account is active. When an account is deleted, we remove the personal information associated with it. Deletion requests themselves are kept for 90 days after they are resolved, so we have a record of having honoured them, and unconfirmed requests are discarded after 24 hours.
Security
Data is encrypted in transit and at rest by our infrastructure providers. Access to production data is limited to the operator of the service. No system is perfectly secure, and we will not claim otherwise.
Children
Body Engineers is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has an account, contact us and we will remove it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and for any change that materially affects how we handle your information we will notify you in the app before it takes effect.