Privacy Policy

1. Overview

The protection of your personal data is important to us. This privacy policy informs you about the type, scope, and purpose of processing personal data at AI Body Coaching.

AI Body Coaching is a product of Syntronix Solutions, incorporated in Canada. Syntronix Solutions is the data controller responsible for the processing of personal data on this platform.

2. Data Controller

Syntronix Solutions [Full Address] [City, Province, Postal Code], Canada E-Mail: privacy@aibodycoaching.com Legal: legal@aibodycoaching.com

3. Data We Collect

We collect the following categories of data:

• Account data: Username, email, password (encrypted)
• Health data: Body weight, body fat, blood values, sleep, nutrition (voluntarily entered)
• Usage data: Interactions with the AI coach, training plans, supplement stacks
• Technical data: Browser type, language preference (no IP addresses)

4. Gesundheitsdaten als besonders sensible Daten / Health Information as Sensitive Personal Information

5. Einwilligung und Rechtsgrundlage / Consent and Legal Basis

Syntronix Solutions ist ein kanadisches Unternehmen. Die Verarbeitung personenbezogener Daten richtet sich nach dem Personal Information Protection and Electronic Documents Act (PIPEDA) und beruht auf Ihrer Einwilligung. Gesundheitsdaten gelten unter PIPEDA als besonders sensibel und werden ausschließlich auf Grundlage Ihrer ausdrücklichen Einwilligung verarbeitet, die Sie bei der Kontoerstellung erteilen und jederzeit widerrufen können.

Syntronix Solutions is a Canadian company. Processing of personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and rests on your consent. Under PIPEDA, health information is treated as highly sensitive and is processed solely on the basis of your express consent, given when you create your account and withdrawable at any time.

Wir erheben nur, was für den jeweiligen Zweck erforderlich ist, nennen den Zweck vor der Erhebung und verwenden die Daten zu keinem anderen Zweck ohne erneute Einwilligung. / We collect only what is necessary for the stated purpose, identify that purpose before collecting, and do not use the information for any other purpose without fresh consent.

6. Data Storage

Your data is stored on Neon servers (PostgreSQL, AWS US-East) and protected by encryption. Data is stored as long as your account is active. You can delete your account at any time under Settings, which removes your data immediately. Payment and invoice records are retained in anonymised form, without any link to you, for as long as tax and accounting law requires.

7. Verarbeitung außerhalb Kanadas / Processing Outside Canada

Ihre Daten werden außerhalb Kanadas gespeichert und verarbeitet, überwiegend in den Vereinigten Staaten. Dort können sie nach geltendem Recht dem Zugriff von Behörden und Gerichten des jeweiligen Landes unterliegen. Das betrifft insbesondere das Datenbank-Hosting, das Anwendungs-Hosting, den E-Mail-Versand, die Zahlungsabwicklung und die KI-gestützte Analyse.

Your information is stored and processed outside Canada, primarily in the United States. While there, it may be accessible to the courts, law enforcement and national security authorities of that jurisdiction under its laws. This applies in particular to database hosting, application hosting, email delivery, payment processing and AI-powered analysis.

8. Third Parties

Zur Bereitstellung des Dienstes setzen wir sorgfältig ausgewählte Dienstleister ein. Sie sind vertraglich zu einem Schutzniveau verpflichtet, das dem dieser Datenschutzerklärung entspricht, und erhalten ausschließlich die für ihre jeweilige Funktion notwendigen Daten. Die Kategorien umfassen: Datenbank-Hosting, Anwendungs-Hosting, E-Mail-Versand, Zahlungsabwicklung sowie KI-gestützte Analyse zur Generierung personalisierter Coaching-Empfehlungen.

To provide the service we use carefully selected processors. They are contractually bound to a level of protection comparable to that set out in this policy and receive only the information necessary for their function. Categories: database hosting, application hosting, transactional email, payment processing, and AI-powered analysis for generating personalised coaching recommendations.

8a. Third-party AI providers

Several features send the data you enter, over an encrypted connection, to third-party AI providers who process it on our behalf to return your result. We only share the data needed for each feature, and each provider is contractually bound to protections equivalent to those in this policy. You are asked to consent in the app before any such data is shared, and AI features remain disabled until you do.

• xAI (Grok) — AI Coach chat, and training, nutrition, fasting and supplement plan generation. Data shared: your profile and goals, tracking entries, and the messages you send to the coach.
• OpenAI — the food scanner (image and voice recognition) and the body scanner (image analysis). Data shared: the photos and voice recordings you submit to those scanners.

We do not use this data to train third-party models beyond returning your result, and body-scan photos are not retained. You may withdraw your consent at any time by contacting privacy@aibodycoaching.com; the AI features will then stop working. A feature-by-feature breakdown of exactly what is sent to each provider is available on our AI & your data page.

9. Cookies

We only use technically necessary cookies. No tracking or advertising cookies.

• ht_session – Authentication session (30 days)
• ht_onboarded – Onboarding status (30 days)

10. Your Rights

Unter PIPEDA haben Sie folgende Rechte: / Under PIPEDA you have the following rights:

• Auskunft über die zu Ihnen gespeicherten Daten / Access to the personal information we hold about you
• Berichtigung unrichtiger Daten / Correction of inaccurate information
• Widerruf Ihrer Einwilligung / Withdrawal of your consent
• Löschung Ihres Kontos und der zugehörigen Daten / Deletion of your account and its data
• Auskunft darüber, an wen Ihre Daten weitergegeben wurden / An account of to whom your information has been disclosed
• Beschwerde bei uns und beim Datenschutzbeauftragten / The right to complain, to us and to the regulator

Sie können Ihr Konto jederzeit selbst unter Einstellungen → Konto löschen löschen. / You can delete your account yourself at any time under Settings → Delete Account.

Contact for data protection inquiries: privacy@aibodycoaching.com

Sind Sie mit unserer Antwort nicht zufrieden, können Sie sich an das Office of the Privacy Commissioner of Canada wenden. / If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

11. Data Security

We employ state-of-the-art security measures: password hashing (scrypt), HTTPS encryption, HttpOnly cookies, and server-side session validation.

12. Besucher aus dem EWR / Visitors from the EEA

Die App wird im App Store derzeit nicht in der EU angeboten. Die Website ist jedoch aus dem EWR erreichbar. Soweit die Datenschutz-Grundverordnung auf Sie Anwendung findet, verarbeiten wir Ihre Daten auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a, Art. 9 Abs. 2 lit. a DSGVO) sowie zur Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO). Ihnen stehen zusätzlich die Rechte aus Art. 15 bis 21 DSGVO zu, einschließlich Datenübertragbarkeit und Widerspruch.

The app is currently not offered in the EU on the App Store, but the website is reachable from the EEA. Where the GDPR applies to you, we process your data on the basis of your consent (Art. 6(1)(a), Art. 9(2)(a) GDPR) and for performance of the contract (Art. 6(1)(b) GDPR). You additionally hold the rights under Art. 15–21 GDPR, including portability and objection.