LevelBody Privacy Policy
Last updated: 29 September 2026
LevelBody is a physique-progress app: you take progress photos, an AI gives each muscle group a score, and you track workouts, weight and missions. This policy explains what data the app uses, where it goes, and the choices you have. The short version: almost everything stays on your phone, your scan photos leave it only to be scored and only after you agree, and there are no ads, no analytics and no tracking.
Who is responsible
LevelBody is made by Matas Martinkus, an individual developer based in Lithuania, who is the data controller for the data described here. Contact: matasonx@gmail.com.
Data that stays on your phone
The following is stored only on your device. We never receive it, and it is gone if you delete the app or use Delete my account and data:
- Your onboarding answers: name, age range, goal, focus area, training days, and (if you give them) height, current weight and goal weight.
- Workouts, sets, routines, personal records, weigh-ins, missions, XP and settings.
- Your scan photos and scan results (scores and notes).
Because this data is not stored on our servers, we cannot restore it if you lose or replace your phone.
Apple Health
If you switch it on, LevelBody reads your body weight from Apple Health and saves your weigh-ins and finished workouts to it. This happens on your device. Health data is never sent to us or anyone else, and is never used for advertising or marketing.
Scan photos and AI scoring
When you run a scan, and only after you have agreed in the app, your front photo (and back photo, if you took one) is sent over an encrypted connection to our scoring service, which forwards it to Claude, an AI made by Anthropic, to be scored. The scores come back to your phone.
- We do not store your photos. They are held in memory only while the scan is scored.
- Anthropic processes the photos under its commercial terms: it does not use them to train its models, and it deletes API inputs and outputs within 30 days, except where its safety systems flag content or the law requires it to keep them. See Anthropic's Privacy Center.
- You can withdraw your consent at any time in Profile > Privacy & Data > AI photo scoring. No photo is sent while it is off.
- The AI score is an estimate of visible muscle development for motivation and tracking. It is not a medical or health assessment.
Data on our servers
We run a small server (hosted by Supabase) that scores scans and checks your subscription. It holds:
| What | Why | How long |
|---|---|---|
| A random account ID, created automatically so the app can use the scoring service | To identify your app without asking for any personal details | Until you delete your account |
| If you use Sign in with Apple: the identifier and email address Apple shares with us (this can be an Apple private relay address) | To keep your account and subscription tied to your Apple ID | Until you delete your account |
| A log of scan attempts: time, outcome (scored, rejected, failed), the AI model used and how much text it processed. No photos and no scores. | To enforce one scan every 14 days, stop abuse and keep costs under control | Until you delete your account |
| Whether your subscription is active | To decide whether a scan can be scored | Until you delete your account |
Subscriptions and payments
Payments are handled by Apple; we never see your card or bank details. Subscriptions are managed through RevenueCat, which receives your random account ID, your App Store purchase history and receipts, and basic device information (such as device model, operating system and app version, country and IP address) to confirm purchases and restore them. See RevenueCat's privacy policy.
What we don't do
- No advertising, no ad networks and no tracking across other apps or websites.
- No analytics or crash-reporting services.
- We do not sell or rent your data, and we do not share it except with the service providers named here, only to run the features described.
Reminders are scheduled on your phone. Images you share go only where you choose to send them, through your phone's share sheet.
Legal bases (EU/EEA and UK)
- Consent: sending scan photos for AI scoring. You can withdraw it at any time; this does not affect scans already scored.
- Contract: providing the app and your subscription.
- Legitimate interests: the scan log, to prevent abuse and keep the service affordable.
International transfers
Anthropic and RevenueCat are based in the United States, and our server provider may process data outside your country. Where data leaves the EU/EEA, it is protected by the providers' Standard Contractual Clauses or an equivalent safeguard recognised under the GDPR. Each provider is bound to protect your data at least as well as this policy describes.
Deleting your data and your rights
Delete everything from inside the app: Profile > Privacy & Data > Delete my account and data. This deletes your account and its server records, asks RevenueCat to delete your purchase record, removes the Sign in with Apple link, and erases everything stored on your phone. Deleting your account does not cancel an App Store subscription; cancel it in your iPhone's Settings under your Apple ID, then Subscriptions.
You also have the right to access, correct, export or delete your data, to object to or restrict processing, and to withdraw consent. Email us to exercise any of these. You can complain to your data protection authority; in Lithuania that is the State Data Protection Inspectorate (vdai.lrv.lt).
Age
LevelBody is for adults only. You must be 18 or older to use it, and we do not knowingly collect data from anyone younger.
Security
Everything sent between the app and our server is encrypted in transit. Server records can only be read and written by our own server functions, not by the app or other users.
Changes
If this policy changes, the new version will be posted here with a new date, and significant changes will be explained in the app.