Privacy Policy
1. Who we are
The data controller for the NextBody AI ("NextBody", "we") mobile app is its developer, Doruk Teoman (Istanbul, Türkiye). You can reach us at nextbodyai@gmail.com.
2. What data we collect
| Data | Examples | Why |
|---|---|---|
| Account information | Email, name, Google/Apple account ID | To create your account and let you sign in |
| Health and body data (special category) | Age, height, weight, tape measurements, body fat percentage, injuries/limitations, diet and allergy information | To create your personal analysis, workout and nutrition plan |
| Body photos (special category) | Photos you upload, AI-generated "goal body" images, progress photos | Goal body simulation, progress comparison and weekly check-in reviews |
| Nutrition logs | Foods you add, food photos, AI-estimated calories and macros | Daily calorie and macro tracking |
| AI Coach messages | Questions you send the coach and its answers | To answer your questions based on your profile, plan and logs |
| Usage data | Completed workouts and the weights/reps you enter for sets, ticked meals, water and weight logs, credit and subscription status | Tracking, streaks and running the service |
| Usage statistics | App opens, screens viewed and basic steps such as signing up, finishing the analysis, completing a workout, opening the subscription screen and purchasing; device model, operating system and approximate country (Firebase Analytics) | To understand, in aggregate, how the app is used and improve it. No health data, weight, photos, food or messages are sent; no advertising ID is used. |
| Crash reports | When the app crashes or an error occurs: device model, operating system version, app version and the technical error log (Firebase Crashlytics) | To find and fix bugs; these reports contain no health data, photos or food logs |
| Purchase information | Subscription status (your payment details stay with Google Play / the App Store) | To provide Premium features |
We do not receive or store payment data such as card details. We do not collect advertising IDs, and we never use your data for advertising or sell it.
Voice input: When you tap the microphone button to add food by voice, your speech is converted to text by your device's speech recognition service (Google on Android, Apple on iOS). We do not receive or store audio; only the resulting text is processed as a food entry. The microphone is used only after you tap the button and while it is listening.
Barcode scanning: When you scan a packaged product's barcode, the camera image is processed only on your device; we do not receive or store it. The barcode number is sent to Open Food Facts, a free and open food database, to get the product's calories and nutrients. No information about you or your account is sent with this request. The camera is used only while you have the barcode screen open.
Steps and calories burned (Apple Health / Health Connect): If you choose to connect, the app reads today's step count and active calories burned from the Health app on iPhone or from Health Connect on Android. This data is used only on your device, to show it on the home screen and, if you turn it on, to add it to your daily calorie goal; it is not sent to or stored on our servers. We do not write any data to Apple Health or Health Connect. We do not use this data for advertising, sell it, use it for any other purpose or share it with third parties; our use complies with the limited use requirements of the Health Connect and Apple HealthKit policies. You can remove access at any time in the settings of the Health app or Health Connect.
3. Legal basis
Your health data and body photos are processed only on the basis of the explicit consent you give in the app (Article 6 of Turkish Personal Data Protection Law No. 6698 "KVKK"; Article 9(2)(a) GDPR where it applies). Account data is processed to perform our contract with you (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)). You can withdraw your consent at any time; the related features will then be unavailable.
4. Where and with whom your data is processed
Your data is stored on Google Cloud / Firebase infrastructure in the European Union (Belgium, europe-west1). AI processing (goal body image, weekly check-in photo reviews, workout and nutrition plan, meal images, calorie estimates and AI Coach answers) runs on Google Cloud Vertex AI, on your behalf and only for the task you request. These service providers do not use your data for their own purposes.
For users in Türkiye this is a transfer of personal data abroad, which relies on the explicit consent you give in the app (KVKK Art. 9).
5. Retention
Your data is kept for as long as your account is open. When you delete your account, your profile, measurements, plans, photos, nutrition logs, AI Coach chat and all history are permanently deleted. You can also delete your AI Coach chat separately in the app. Usage statistics are kept in Google Analytics for 14 months without being linked to your account, and are deleted automatically after that. Where the law requires it (e.g. billing records), limited data may be kept for the period the law sets.
6. Security
Your photos and health data are kept in encrypted storage that only your account can access. No public links are created for photos.
7. Your rights
You have the right to learn whether your data is processed, to request information, to have it corrected or deleted, to object to processing and to claim compensation for damages (KVKK Art. 11). If you are in the EU/EEA or the UK, you also have the GDPR rights of access, rectification, erasure, restriction, data portability and objection, and you may lodge a complaint with your local data protection authority. Send requests to nextbodyai@gmail.com. You can delete your account and all your data instantly in the app via Profile → Delete my account.
8. Age limit
NextBody is not for people under 18. We delete accounts we find out belong to someone under 18.
9. Changes
We will let you know in the app when we update this policy.