Last Updated: April 20, 2026 — Version 2.0
Effective Date: April 20, 2026 | Governing Law: Netherlands (GDPR applies)
Body Mode is an AI-powered health and wellness planning application developed and operated by Viperdam ("we", "us", or "our"). For the purposes of the General Data Protection Regulation (GDPR), Viperdam acts as the Data Controller for personal data collected through the Body Mode mobile application.
We collect the following categories of data when you use Body Mode:
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Generate your personalized daily wellness plan | Health metrics, sleep, activity, profile, location, food history | Consent (Art. 6(1)(a), Art. 9(2)(a)) |
| AI food recognition and nutrition analysis | Food photos, videos, voice recordings | Consent (Art. 6(1)(a)) |
| Automatic sleep detection | Location (background), motion, device charging state, time | Consent (Art. 6(1)(a)) |
| Floating overlay reminders | Scheduled plan items, time of day | Consent (Art. 6(1)(a)) |
| AI Coach — contextual health guidance | Health history, plan history, user profile | Consent (Art. 6(1)(a)) |
| Body scan & progress analysis | Body photos you submit, body metrics | Consent (Art. 6(1)(a)) |
| Crash reporting & bug fixing | Crash logs, device info, error traces | Legitimate interest (Art. 6(1)(f)) |
| App performance monitoring | Screen load times, API latencies | Legitimate interest (Art. 6(1)(f)) |
| Displaying personalized advertisements | Advertising ID, general usage patterns | Consent (Art. 6(1)(a)) |
| Account management & authentication | Email, Firebase UID | Contract performance (Art. 6(1)(b)) |
| Subscription management | Purchase history (via Google Play Billing) | Contract performance (Art. 6(1)(b)) |
Health Connect allows Body Mode to read health data from other fitness apps on your device (such as Samsung Health, Fitbit, Garmin, etc.) in a unified, privacy-respecting way, without requiring you to grant access to each app individually. This data powers our core feature: a fully automated, AI-generated daily wellness plan that adapts to your real-time biological state.
| Data Type | Why We Read It | Sent to Gemini AI? |
|---|---|---|
| Heart Rate | Calculate physical recovery score; adjust workout intensity in your plan | Yes |
| HRV (Heart Rate Variability) | Estimate stress and neural load; prevent high-intensity activities on low-recovery days | Yes |
| SpO₂ (Blood Oxygen) | Detect fatigue or altitude-related performance drops | Yes |
| Resting Heart Rate | Long-term cardiovascular fitness tracking | Yes |
| Sleep (duration, quality, stages) | Core plan input: sleep quality drives next-day energy targets and activity level | Yes |
| Body Weight & Body Fat % | Calorie target calculation and body composition tracking | Yes |
| Steps & Distance | Activity accounting to avoid over-exercising in the plan | Yes |
| Active Calories Burned | Energy balance calculation for nutrition planning | Yes |
| Exercise Sessions | Avoid duplicate workout scheduling; recognise completed workouts | Yes |
| Nutrition / Food (if available) | Cross-reference logged intake against plan targets | Yes |
| Menstruation / Cycle Data | Cycle-aware plan adaptation (reduce intensity during certain phases) | Yes |
| Hydration | Water intake tracking against daily hydration goal | Yes |
| BMR (Basal Metabolic Rate) | Precise calorie deficit/surplus calculation | Yes |
| VO₂ Max | Fitness level classification for workout intensity calibration | Yes |
| Respiratory Rate | Recovery metric for plan adaptation | Yes |
| Blood Glucose | Metabolic context for meal timing recommendations | Yes |
| Body Temperature | Illness/hormonal detection for plan adaptation | Yes |
In compliance with Google's Health Connect Developer Policy, we confirm that:
Body Mode also writes the following data types back to Health Connect, so other health apps can access your Body Mode-logged data:
Background location is a core part of Body Mode's context-aware AI planning system. Specifically, we use background location to:
You can change location permissions at any time:
When you use AI food recognition, body scan, shopping scan, or fridge scanning features, you may take a photo or video within the app or choose one from your gallery. Body Mode shows an in-app disclosure before opening the system gallery picker. Media files are:
Body Mode offers a voice-based food logging feature. When you use it:
Body Mode requests the following Android permissions. All optional permissions can be denied without preventing core app functionality (though some features will be limited).
| Permission | Why We Need It | Required? |
|---|---|---|
| Camera | Take food photos/videos for AI nutrition analysis; body scan; fridge scan | Optional |
| Microphone | Voice-based food logging | Optional |
| Selected Photos/Videos / Legacy External Storage | Open the system picker so you can select photos or videos for food, fridge, shopping, meal, or body progress analysis. Legacy storage permissions are used only on older Android versions. | Optional |
| Location (Foreground — Precise) | Detect current environment (gym, home, outdoors) to adapt your plan | Optional |
| Location (Background — "Allow all the time") | Automatic sleep detection; proactive plan adaptation when location context changes | Optional |
| Activity Recognition | Detect physical activity type (walking, running, cycling) automatically | Optional |
| Motion / Activity Sensors | Detect stillness, movement, and activity context for automatic sleep detection and wellness planning | Optional |
| Post Notifications | Send reminders for meals, hydration, and scheduled plan items | Optional |
| Health Connect | Read and write selected health, fitness, nutrition, hydration, sleep, weight, body composition, activity, distance, calorie, and heart-rate data (see Section 4) | Optional |
| Calendar | Read event times and, if you allow full schedule context, event titles and locations so plans can avoid meetings, travel, and focus windows. Calendar write access is reserved for user-approved calendar-linked planning workflows. | Optional |
| Draw Over Other Apps (SYSTEM_ALERT_WINDOW) | Display floating overlay reminders at scheduled times, even when you're using another app. Overlay access is optional and is not used to collect data from other apps. | Optional |
| Schedule Exact Alarms | Ensure user-enabled meal, hydration, workout, sleep, wrap-up, overlay, and plan notifications fire at the scheduled time | Optional |
| Battery Optimization Exemption | Improve reliability for user-enabled reminders, overlays, and automatic sleep detection when the app is closed or not in active use | Optional |
| Foreground Service | Keep sleep detection active in the background during the night detection window | Required for sleep detection feature |
| Internet | Connect to Gemini AI for plan generation and food analysis | Required for AI features |
| Vibrate | Haptic feedback on reminders and interactions | Optional |
You can revoke any permission at any time through: Android Settings → Apps → Body Mode → Permissions
Body Mode uses the Google Gemini API (operated by Google LLC) as its core AI engine. When you use any AI feature (plan generation, food analysis, AI coach, body scan, shopping list), the following data is sent to Gemini:
This data is sent solely to generate your personalized results. Gemini processes it according to Google's Gemini API Terms and Google's Privacy Policy. By default, Google does not use your data sent via the API to train Gemini models.
Model used: gemini-flash-latest (primary), gemini-3-flash-preview (fallback)
We use the following Firebase services:
Firebase is governed by Google's Firebase Privacy Policy.
We use Sentry for real-time error monitoring and crash reporting. When the app crashes or encounters an error, Sentry receives:
Sentry does not receive your health data, photos, or location. Governed by Sentry's Privacy Policy.
The free tier of Body Mode displays ads served by Google AdMob. AdMob may collect and use:
You can opt out of personalized ads in Android Settings → Google → Ads → "Opt out of Ads Personalization". Governed by Google's Ads Privacy Policy. Health data is never shared with AdMob.
Subscription payments are processed exclusively by Google Play Billing. We receive only a confirmation of your subscription status. Your full payment details (card number, etc.) are handled by Google and are never visible to us. Governed by Google's Payments Privacy Notice.
Our web application and backend serverless functions are hosted on Netlify. Netlify may process server logs and request metadata in accordance with their Privacy Policy. No health data is stored on Netlify servers.
When location-based features are enabled, Body Mode sends raw GPS coordinates over HTTPS to the following processors solely to return weather and place context inside the app:
These providers do not receive your health data from Body Mode for this feature.
We do not share your personal data with:
| Data Type | Storage Location | Shared with AI? |
|---|---|---|
| Daily plan, food logs, activity history | Local device + optional Firestore | Yes (for plan gen) |
| User profile & goals | Local device + optional Firestore | Yes (for plan gen) |
| Food photos / body scan photos | Not stored after analysis | Yes (transient) |
| Voice recordings | Not stored after analysis | Yes (transient) |
| AI Coach conversation | Local device only | Yes (session only) |
| Crash reports | Sentry servers (90 days) | No |
| Analytics events | Firebase (anonymized, 14 months) | No |
| Location data | Local device + transient weather/geocoding requests | Context only |
The free tier of Body Mode is supported by advertising served via Google AdMob. Premium subscribers (Body Mode Pro) do not see advertisements.
Body Mode is designed for users aged 16 and older. We do not knowingly collect personal data from children under 16 (or under 13 in jurisdictions where GDPR's children's provision does not apply, such as certain US states). If a parent or guardian believes we have inadvertently collected data from a child under the applicable age, please contact us at viperotterdam@gmail.com and we will delete the data promptly.
As a user, and particularly under the GDPR (applicable because Body Mode operates under Netherlands law), you have the following rights regarding your personal data:
| Right | What It Means | How to Exercise It |
|---|---|---|
| Right of Access (Art. 15) | Receive a copy of all personal data we hold about you | Email viperotterdam@gmail.com |
| Right to Rectification (Art. 16) | Correct inaccurate data in your profile | Edit directly in the app (Profile screen) |
| Right to Erasure (Art. 17) | Delete all your data and account permanently | In-app: Settings → Account → Delete Account; or email us |
| Right to Data Portability (Art. 20) | Receive your data in a machine-readable format (JSON/CSV) | Email viperotterdam@gmail.com — we respond within 30 days |
| Right to Restrict Processing (Art. 18) | Temporarily stop us processing your data while a dispute is resolved | Email viperotterdam@gmail.com |
| Right to Object (Art. 21) | Object to processing based on legitimate interests (e.g., analytics) | Email viperotterdam@gmail.com |
| Right to Withdraw Consent | Withdraw consent for any feature at any time without penalty | App Settings → Privacy Controls; or device permission settings |
| Right to Lodge a Complaint | Complain to the Dutch data protection authority (AP) | autoriteitpersoonsgegevens.nl |
We respond to all verified requests within 30 days. Complex requests may take up to 90 days (we will notify you).
You have the right to delete your Body Mode account and all associated data at any time. Deletion is permanent and cannot be undone.
Alternatively, email viperotterdam@gmail.com with subject "Account Deletion Request". We will process your request within 30 days.
You can also submit a deletion request at: bodymode.netlify.app/delete-data
Deleting your Body Mode account does not delete data already written to Health Connect (e.g., sleep sessions, food logs). To remove that data, open Android's Health Connect app → Browse Data → find "Body Mode" entries → delete them individually or clear all Body Mode data.
Body Mode is operated from the Netherlands (European Union). When data is sent to third-party services such as Google Gemini API, Firebase, Sentry, or Netlify, it may be transferred to and processed in the United States or other countries outside the EU/EEA.
We rely on the following safeguards for such transfers:
We may update this Privacy Policy to reflect changes in our practices, new features, or legal requirements. When we make material changes:
Continued use of Body Mode after the effective date of a revised policy constitutes acceptance of those changes.
For privacy questions, data requests, or complaints:
We commit to responding to all privacy enquiries within 30 days.