Privacy Policy
Last updated: October 7, 2026
1. Data Collection
Ubod collects the data you entrust to us to run the service: your account (email address, name, sign-in method), your profile (sex, date of birth, height, weight, goal, activity level), your journal (meals, meal photos, water, activity, weight, body measurements, notes), your recipes and your shopping list, as well as your subscription status. We also collect app usage data (screens opened, actions, errors, device model, app version) to understand and improve the service. Nutrition and weight data may be health data: we process it only to provide the service to you, with the consent you give when you create your account.
2. Data Usage
Your data is used to provide and improve the Ubod service, personalize your experience, and send you relevant communications. We do not sell your personal data to third parties.
3. Data Security
We implement industry-standard security measures to protect your data. All data is encrypted in transit and at rest. We regularly review our security practices.
4. Data Retention and Deletion
We keep your personal data only for as long as it is needed for the purposes described in this policy. Account and nutrition data (your profile, meals, recipes, weight history, body measurements and progress photos) are retained for as long as your account is active. When you delete your account from the app settings, this data is erased from our production systems immediately, and any residual copies in our encrypted backups are purged within 30 days. Accounts that remain inactive for 24 consecutive months are deleted automatically, after advance notice by email. Usage and analytics data are retained in aggregated or pseudonymised form for 12 months. Billing and transaction records are kept for 10 years, as required by applicable tax and accounting law, and deleted thereafter.
5. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can export your data or request account deletion through the app settings or by contacting us.
6. Cookies
We use essential cookies for authentication and session management. Analytics cookies help us understand how you use our service. You can manage cookie preferences in your browser settings.
7. Health Data and Google Health Connect / Apple Health
Ubod may access your health data through Google Health Connect (Android) or Apple Health (iOS), with your explicit consent. We read your step count, exercise sessions, and active calories burned to display your daily activity within the app. We write your nutritional and hydration data to Google Health Connect or Apple Health so that you can view and use this information in other health apps of your choice. Your health data is processed locally on your device and is not transmitted to our servers. You can revoke access at any time from the app settings or from the Google Health Connect / Apple Health settings on your device.
8. Health Data Deletion
You can request deletion of your health data at any time. Data written to Google Health Connect or Apple Health can be deleted directly from those apps. Data displayed within Ubod is deleted when you delete your account.
9. AI Assistants (ChatGPT, Claude)
If you connect your Ubod account to an assistant such as ChatGPT or Claude, the assistant acts on your account at your request (reading your journal, adding a food, and so on) after your explicit authorization. Ubod never receives your conversations, only the actions the assistant calls. For each action we record its name, the parameters the assistant sent, Ubod's response, which assistant was used, the date and the duration. We use this data to provide the service, measure which features are used, fix errors and improve Ubod, including training our own models, in pseudonymized form. It is kept while your account is active and deleted with it. You can remove access at any time from your assistant's settings.
10. Data Recipients
Your data is never sold. It is shared only with the service providers that run Ubod, and only to the extent they need it: hosting of the app and the database (Vercel, Neon and Amazon Web Services, in the European Union), photo storage (Amazon S3) and email delivery (Amazon SES); sign-in with Google or Apple, if you choose it; payments and subscriptions (Apple, Google, Paddle and RevenueCat); audience measurement, usage recording and error tracking (PostHog, hosted in the European Union, see section 11); AI features such as the photo scan and the coach, for which the photo or the question is sent to an AI model provider through Vercel AI Gateway, with only the context needed for the answer (for example your goals for the day); attribution of installs from ads (Apple Ads, Google). If you connect an AI assistant, the results of the actions you ask it to perform are sent to it (see section 9).
11. Usage Recordings, Diagnostics and AI Quality
To find bugs and improve the app, Ubod records how the app is used: the screens you open, your gestures (taps, scrolling) and what the screen shows, as a series of captures (known as session replay). Everything you type is masked, and so are your progress photos; the rest of the screen (for example your meals and your figures for the day) may appear. We also keep technical logs (calls to our servers, errors) and, for the AI features, the text of your requests and of the answers, to measure their quality and cost; photos sent to the AI are never kept in these logs. This data is hosted by PostHog in the European Union, linked to your account, viewed only by the Ubod team, never sold and never used for advertising. Screen recordings are kept for 30 days, logs and AI traces for 12 months at most. You can object at any time by writing to privacy@ubod.app.
12. Contact
For any questions about this privacy policy, please contact us at privacy@ubod.app.