Privacy Policy

Introduction

One Body Now ("we," "us," or "our") is a trademark of Start Learn LLC, and respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our fitness and wellness app and services, and outlines your privacy rights and how the law protects you.

Who We Are

Start Learn LLC is a company registered in U.S.A, with its registered office at 3402, 1603 Capitol Avenue, Suite 413A, Cheyenne, WY, 82001. We act as the data controller for the personal data collected through our app and services.

Information We Collect

We collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

  • Identity Data: Includes first name, last name, username, date of birth, and gender.
  • Contact Data: Includes email address, billing address, and telephone numbers.
  • Technical Data: Includes IP address, device type, operating system, app version, unique device identifiers, and time zone.
  • Profile Data: Includes account preferences, subscription status, wellness settings, and personal development goals.
  • Usage Data: Includes app interactions, feature usage, session duration, and content views.
  • Communication Data: Includes customer support interactions, feedback, and survey responses.
  • Health and Fitness Data: Includes body measurements, workouts and activity, nutrition and hydration, sleep, breathing sessions, wellbeing self-reports, optional menstrual cycle data, and health data you allow us to read from Apple Health or Android Health Connect. See "Health and Fitness Data" below for full detail.

We collect health data, which is a special category of personal data under the GDPR. We process it only on the basis of your explicit consent, as described in "Health and Fitness Data". We do not collect any information about criminal convictions or offences.

Health and Fitness Data

One Body Now is a fitness and wellness app, so we collect health-related data. Because this is sensitive personal data, we process it only with your explicit consent and describe it separately here.

Health and fitness data you enter yourself

  • Body data: height, weight, target weight, age, sex/gender, body measurements (such as waist circumference) and optional body-fat percentage.
  • Fitness data: workouts and exercise sessions, repetitions, duration, distance, calories burned, training streaks, fitness level, activity level, physical limitations or injuries you tell us about, and your fitness goals.
  • Nutrition data: meals and foods you log, calories and macronutrients, water intake, food preferences, allergies and dietary restrictions, food supplements you take, and intermittent or extended fasting periods.
  • Sleep and recovery data: bedtime and wake time, sleep duration, sleep quality ratings and optional notes.
  • Breathing and mindfulness data: breathwork sessions you complete.
  • Wellbeing self-reports: how you rate your energy, stress, mood, anxiety and sleep, including how you feel after a session.
  • Menstrual cycle data (optional): if you choose to enable cycle tracking, we collect the dates of your period, flow intensity, symptoms (such as cramps, headache or bloating), mood, energy level and any notes you add, along with your average cycle and period length, your contraception type and your life stage (for example cycling, pregnant, perimenopause or postmenopause).
  • Photos (optional): photos of meals or of the inside of your fridge that you choose to take for food logging and recipe suggestions, and optional progress photos for body measurements and weekly check-ins.

Health data from Apple Health and Android Health Connect

If you connect One Body Now to Apple Health (HealthKit) on iOS or to Health Connect on Android, and only after you grant permission on the relevant system screen, we read the following categories from that platform:

  • Steps
  • Active energy / active calories burned
  • Sleep, including sleep stages and time in bed where your device provides them
  • Heart rate
  • Workouts and exercise sessions recorded by your device or by other apps

We use read-only access. We never write any data back to Apple Health or Health Connect, and we do not read any other health category from those platforms.

How we use health and fitness data

We use this data solely to provide and improve the features you asked for:

  • To calculate your personal calorie and macronutrient targets.
  • To build and adapt your training program, and to adjust a session's length or intensity, for example after a poor night's sleep or during a phase of your cycle.
  • To count workouts you recorded on another device or app toward your daily activity, calories and your One Body Score.
  • To show you your own progress, history, charts, streaks and achievements.
  • To generate personalized suggestions such as meal ideas, recipes, supplement suggestions, biohacks and daily insights.
  • To send you reminders you have enabled, such as meal, water, wind-down, cycle or workout reminders.
  • To recognise your food from a meal photo you take, and to suggest recipes from a fridge photo you take.

What we never do with your health data

  • We never use health, fitness, nutrition, sleep or menstrual cycle data for advertising, marketing or any similar commercial purpose.
  • We never sell your health data, and we never share it with data brokers or with advertising or analytics networks.
  • We do not use health data to make automated decisions with legal or similarly significant effects about you.
  • Data obtained from Apple Health or Health Connect is used only inside the app features described above. It is never shared with third parties for advertising and is never transferred to any other party except the infrastructure providers listed in "Data Sharing and Third Parties" that host the app on our behalf.

Who can access your health data

Your health data is stored in your own account on Google Firebase (Firestore and Cloud Storage) so it can sync across your devices. It is protected by access rules that make it readable and writable only by you.

Some features send limited data to a processor to work:

  • Meal, fridge and recipe photos you take are uploaded to our secure storage and analysed by Google's Vertex AI (Gemini) to identify the food. Photos are not used to train third-party models.
  • AI coaching, plan generation and daily insights send a limited summary of your profile and recent logs — such as age, sex, weight, goals, activity level, dietary preferences and recent food entries — to Google's Vertex AI (Gemini).
  • Food search and barcode lookups send only your search term or the barcode to the USDA FoodData Central and Open Food Facts databases.
  • Your menstrual cycle data is never sent to any AI service or any third party. It is used only on your device and in your own private account.
  • Progress photos and weekly check-in photos are stored for you only and are never sent to any AI service.

Your control over health data

  • Connecting Apple Health or Health Connect is always optional. You can disconnect at any time in the app, or revoke permission in iOS Settings > Health or in the Health Connect app on Android. Revoking permission stops all further reading immediately.
  • Cycle tracking is entirely optional, is never enabled without your explicit choice, and can be switched off at any time. The app includes a dedicated action that permanently deletes all of your cycle data.
  • You can delete your account and your data from within the app at any time. See "Data Retention" and "Your Legal Rights".

Not medical advice

One Body Now is a wellness and fitness product, not a medical device. Its content, targets, predictions and suggestions are for general wellness purposes only, are not medical advice, and are not a diagnosis or treatment. Cycle and ovulation predictions are estimates and must not be relied on as a method of contraception or to achieve pregnancy. Always consult a qualified healthcare professional before changing your diet, exercise, supplement or medication routine.

How We Collect Your Personal Data

  • Direct Interactions: You may provide us with your Identity and Contact Data by using our app features or by corresponding with us.
  • Automated Technologies or Interactions: As you interact with our app, we may automatically collect Technical Data about your device, app usage patterns, and behaviors.
  • Third-Party Services: We may receive data from app stores, payment processors, analytics providers, and advertising networks.
  • Health platforms: With your permission, we read health and activity data from Apple Health (HealthKit) on iOS or Health Connect on Android. We never write data back to those platforms.

Legal Basis for Processing

  • Performance of Contract: Where we need to perform the contract we have entered into with you.
  • Legitimate Interests: Where it is necessary for our legitimate interests and your rights do not override those interests.
  • Legal or Regulatory Obligations: Where we need to comply with a legal or regulatory obligation.
  • Consent: Where you have given your explicit consent, including for the processing of health data (Article 9(2)(a) GDPR) such as activity, sleep, nutrition and menstrual cycle data, and for reading data from Apple Health or Health Connect. You can withdraw consent at any time by disconnecting the health platform, disabling the relevant feature, or deleting your data.

Purposes for Which We Will Use Your Personal Data

  • To register you as a new user: Performance of a contract with you.
  • To provide personalized wellness content and insights: Performance of a contract with you.
  • To generate personal development reports and recommendations: Performance of a contract with you.
  • To process payments and manage subscriptions: Performance of a contract with you; Necessary to comply with a legal obligation.
  • To manage our relationship with you: Performance of a contract with you; Necessary for our legitimate interests.
  • To improve our services through analytics: Necessary for our legitimate interests.
  • To send newsletters and updates: Consent.
  • To provide customer support: Performance of a contract with you.
  • To administer and protect our business and app: Necessary for our legitimate interests and to comply with a legal obligation.
  • To deliver relevant content and measure effectiveness: Necessary for our legitimate interests.

Data Sharing and Third Parties

We may share your data with:

  • Affiliated apps within our brand family: With your explicit consent for enhanced wellness services.
  • Infrastructure providers: Google Firebase (authentication, Firestore database, Cloud Storage, Cloud Functions) hosts your account and your data on our behalf.
  • AI processors: Google Vertex AI (Gemini) processes meal, fridge and recipe photos and limited profile and food-log summaries to generate food recognition, recipes, plans and insights. OpenAI may process limited onboarding answers to generate personalized welcome content.
  • Food databases: USDA FoodData Central and Open Food Facts receive only your search term or a scanned barcode.
  • Payments and subscriptions: Apple App Store, Google Play and Stripe.
  • Analytics and attribution: Firebase Analytics, and the TikTok Events SDK, which receives your email address and account identifier to measure advertising performance. These services never receive your health, fitness, nutrition, sleep or menstrual cycle data.
  • Email and customer communication: our email automation platform receives your email address and basic profile and progress attributes for the messages you have consented to. It never receives your menstrual cycle data.
  • Legal authorities: When required by law or to protect our rights.

We never sell your personal data, and we never share health data with advertising networks or data brokers.

Cookies and Tracking Technologies

Our app uses cookies and similar tracking technologies to distinguish you from other users and to provide you with a good experience. For detailed information, see our Cookie Policy.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Our security measures include data encryption in transit and at rest, secure authentication systems, regular security audits, access controls and monitoring, secure cloud infrastructure with AWS/Google Cloud, regular encrypted backups, and staff training on data protection.

Data Retention

Account data is retained while your account is active. After account deletion, most personal data is removed within 30 days. Backup data may persist for up to 90 days before complete deletion.

Your Legal Rights

Under data protection laws (including GDPR), you have rights in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.
  • File a complaint with a supervisory authority.

If you wish to exercise any of the rights set out above, contact privacy@onebodynow.com

Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children under the applicable age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@onebodynow.com, and we will delete such information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our servers are located. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

Contact Us

Email: privacy@onebodynow.com

Postal Address: Start Learn LLC, 3402, 1603 Capitol Avenue, Suite 413A, Cheyenne, WY, 82001 USA

We will respond to your inquiries within 30 days (or sooner as required by applicable law).

This Privacy Policy was last updated on September 2026