Privacy Policy

Information you provide

Account information includes your email, display name, units, time zone, and preferences. Fitness records may include plans, workouts, exercise notes, nutrition, recovery, body measurements, goals, limitations, pain or illness flags, and optional biological sex for an energy estimate. Progress photos, Coach messages, and subscription information are processed when you use those features.

How we use information

We use records to operate the app, calculate trends, explain recommendations, synchronize devices, provide support, protect the service, and verify paid access. Coach recommendations use deterministic rules in this release; your fitness history is not sent to a third-party AI service.

Providers and sharing

Supabase provides authentication, database, and private-file infrastructure. Google Cloud hosts the API. Apple processes App Store purchases. Food searches or barcodes may be sent to the selected food-data provider. We may disclose information when required by law or to protect users and the service. Providers may process information outside your country.

Resend delivers account confirmation and password-reset emails. It processes recipient email addresses, message content (including one-time links), and delivery metadata for this purpose. We do not send workout records, body measurements, or progress photos to Resend.

Optional health connections

Device-health access is optional, read-only, and requested by category. Dream Bod reads a rolling seven-day window on your device without uploading or persisting raw samples in this release. Disconnecting stops reads and removes local consent; system permissions can also be revoked in device settings.

Where WHOOP Direct is enabled, it requests recovery, sleep, and offline access. Connection credentials are encrypted on the server. Responses are reduced in memory to display-only summaries; raw records and summaries are not persisted. Disconnecting revokes access and removes the connection credentials.

Storage and security

Signed-in records use authenticated, account-scoped access controls. Progress photos are private and served through authenticated endpoints. Demo records stay on the device and are not represented as cloud-synchronized. Operational logs may include request metadata for reliability and security. No system can guarantee absolute security.

Retention and your choices

Records remain while your account is active. Settings provides export and account deletion. Exports are returned directly rather than retained as a separate export file. Account deletion removes associated application records, authentication, and private photos. Limited operational, transaction, or legally required records may remain where necessary. Any backups are subject to the applicable retention and deletion process.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing. Contact us to make a request. We may verify account ownership before fulfilling it.

Adults only

Dream Bod is intended for adults 18 and older and is not a medical service. Contact us if you believe a child has created an account.

Changes and contact

We will update this date and provide appropriate notice when material privacy practices change.

qasimashah@gmail.com. Never include your password or sign-in codes.