Privacy Policy

Last updated: May 19, 2026

1. Data We Access

BodyEnergy reads the following data from Apple HealthKit (iOS) or Health Connect (Android):

• Heart & Vitals: Heart rate, heart rate variability (HRV), resting heart rate, respiratory rate, oxygen saturation
• Sleep: Sleep sessions including phase data (deep, REM, light, awake)
• Activity: Steps, distance, calories burned, floors climbed, workouts/exercises
• Body Measurements: Weight, height, body fat (if available)

We request read-only access. BodyEnergy does not write health data except for optional mood/journal entries on iOS.

2. How Data Is Processed

• All calculations (body battery, stress scores, sleep analysis, baselines, readiness) happen entirely on your device.
• Historical data (up to 20 years) is synced from HealthKit/Health Connect into a local Isar database stored on your device.
• No health data is uploaded to any server, cloud service, or third party.

3. Analytics

BodyEnergy uses Firebase Analytics (Google) and Firebase Crashlytics for:

• Anonymous product analytics such as screen views, tab and feature usage, metric navigation, and session activity
• Crash diagnostics and technical stability reports

No health data is included in analytics or crash reports. Only anonymous interaction events and technical context such as app version, OS version, installer/store channel, and generic device diagnostics are collected.

4. Tracking & Advertising

• BodyEnergy does not use any advertising SDKs.
• BodyEnergy does not use App Tracking Transparency (ATT) because there is no cross-app tracking.
• The iOS Privacy Manifest (PrivacyInfo.xcprivacy) declares NSPrivacyTracking = false and zero tracking domains.

5. Data Storage

• Health data is stored in a local Isar database on your device.
• User preferences (settings, goals, notification preferences) are stored in SharedPreferences on your device.
• No cloud accounts, logins, or sign-ups are required.

6. Data Sharing

BodyEnergy does not share your personal or health data with any third party. The only external communication is:

• Firebase Analytics: anonymous usage and navigation events (no health data)
• Firebase Crashlytics: crash diagnostics and stability context (no health data)
• App Store / Play Store: version check for update prompts (no health data)

7. Your Rights

• Delete data: Uninstalling the app removes all locally stored data.
• Revoke access: You can revoke HealthKit/Health Connect permissions at any time in your device Settings.
• Export data: BodyEnergy includes a data export feature (JSON format) accessible from Settings.

8. Children

BodyEnergy is not directed at children under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy. The "Last updated" date at the top reflects the most recent revision. Continued use of the app constitutes acceptance of the updated policy.