Privacy Policy

1. Who is responsible

BS365 is responsible for the processing described here. For privacy questions, access, correction or deletion requests, contact andrei@gaivoronskii.com.

2. Data on your device and in your account

You can use the main features without an account. The app stores your settings, profile details you enter, workouts, food diary, body measurements and progress photos on your device as needed for the features you use.

When you sign in, BS365 stores a provider identifier and session information to recognize your account. We do not receive your Apple or Google password. Supported account features synchronize your profile (name, contact email, phone and avatar), nutrition entries, saved foods, settings, completed workout history, saved workout plans, progress measurements and photos with our server. If you join Community, the public profile, activities, comments, follows and kudos you choose to publish are stored on our server, together with a device push token and your notification choices if you enable notifications. Signing out or uninstalling the app does not delete the server copy.

The app can restore measurements and photos from earlier versions and legacy iCloud storage. For a signed-in account, restored progress is transferred to your BS365 account. iCloud is a source for this restoration, rather than the ongoing BS365 account database.

3. Health, photos and permissions

With your permission, BS365 reads relevant Apple Health categories, including activity, steps, workouts, energy, body measurements, sleep, heart and respiratory measurements, to show your diary, readiness and progress. It can write supported workout and nutrition records when you authorize that access. You choose the permitted categories in Apple Health and can revoke access at any time.

Health access is optional. We use these data for the health and fitness features you request, not for advertising. Nutrition or progress records saved in the app can be included in account synchronization. The app does not send your full Health history to food-search providers.

If you explicitly choose an AI workout suggestion, you can separately allow the app to use derived readiness and training-history summaries. The app sends only the summaries you consent to, plus your selected duration, effort and body regions, to our server and a configured AI provider to prepare the suggestion. It does not send your full Health history or individual health samples. Both consents are optional and independent; declining one leaves that input out, and missing data is never replaced with invented values.

Camera and photo access are used when you choose to add an image. Progress photos are private account data, not public catalog content. Sharing a collage or sending a support email is initiated by you.

4. Online services and recipients

BS365 uses Timeweb Cloud infrastructure for the account service, storage and delivery of content. Technical requests can include an IP address, request time and diagnostic information needed to operate and protect the service. We use authentication and access controls for private account data and HTTPS for transport.

Food searches may send the search text or barcode through our server to Open Food Facts or, where enabled, FatSecret. AI-assisted food search sends the food query and extraction instructions to our configured AI search providers, currently Qwen (Alibaba Cloud), Perplexity and DeepSeek, which the app requests in parallel when configured. A provider that is not configured or available may not receive the query. These provider requests do not include your account identifier, private progress photos or full food diary. Do not include personal information in search text. These providers may process requests in other countries under their own policies.

If you contact support, we receive the email and information you choose to send. The prepared feedback email includes the app version, operating-system version and device model; you can edit it before sending.

We do not sell personal data or use health data for advertising. The current app and these legal pages have no advertising trackers or third-party analytics SDKs. We may disclose information when required by law or necessary to protect the service or its users.

5. Purpose, choices and retention

We process information to provide the features you use, synchronize your account, secure the service and answer support requests. Where applicable law requires a legal basis, this includes providing the service you request, your consent for optional access, legitimate interests in security and support, and legal obligations.

You can change permissions in iOS Settings and Apple Health, edit or delete records where the app provides those controls, and contact us about access, correction, export, objection or deletion. Available rights depend on the law that applies to you. You may also contact your local data-protection authority.

Account data is retained while the account is active. Deletion permanently removes private data from active storage; queued file cleanup and provider revocation retry automatically after temporary failures. Private server and operator backup snapshots expire under a 30-day retention policy; an offline backup host applies expiration when it next runs. Minimal hashed identity/source suppression records and anonymous deletion receipts remain to prevent old devices or restored backups from recreating the account. Published catalog contributions may remain without personal attribution.

Removing the app does not itself delete your BS365 account, Apple Health records or device/iCloud backups. Manage Apple-held Health and device backup copies using Apple’s controls. Contact andrei@gaivoronskii.com if you cannot access the app or need help with erasure.

Delete your account from Edit Profile to erase its profile, nutrition, workout history and saved plans, preferences, progress measurements and photos, Community membership and its public content, and end all sessions. We revoke Sign in with Apple authorization; older accounts may need to confirm the same Apple identity first. Apple refresh tokens are encrypted and retained only while needed for sign-in management or a pending revocation. Signing in again creates an empty account. Imported legacy iCloud profile/progress copies are queued for erasure only for the cloud identity previously linked to this account. The cleanup requirement is retained on our server and recovered when the app is reinstalled. Cleanup runs when the app has access to the same iCloud account on a device.

6. Children, security and changes

BS365 is not intended for children under 13. If you believe a child has provided data improperly, contact us.

No storage or transmission method is completely secure. Keep access to your device and sign-in account protected. We update this page when our practices change; the date above identifies the current version.