Official Privacy Policy

Privacy Policy for Body Tracker

Effective Date: September 26, 2026 • Version 1.0

Core Privacy Guarantee: Body Tracker operates on a strict 100% on-device, local-first architecture. Your photos, body weight, facial biometrics, and progress records are NEVER uploaded to any remote server or cloud database.

1. Introduction

Body Tracker ("we", "our", or "the App") is developed as an on-device personal physique tracking tool. We believe your physical appearance, health measurements, and personal photographs are among the most sensitive personal data you own. This Privacy Policy describes how information is handled when you use the Body Tracker mobile application on iOS and Android.

2. Data We DO NOT Collect

Unlike cloud-based fitness apps, Body Tracker does not require an account, email address, password, or login. We do not maintain any cloud backend or servers. Specifically:

No Cloud Storage: Photos you take never leave your physical device.
No Biometric Transmission: Pose landmarks and facial tracking coordinates are computed in transient volatile memory (RAM) and are never stored remotely or shared.
No Account Profiling: We do not know who you are, your name, age, email, or identity.

3. Device Permissions & How They Are Used

To provide core body-tracking and video-generation features, the App requests access to certain device capabilities:

Permission	Platform	Purpose & Data Handling
Camera	iOS & Android	Captures guided 4-angle physique photos. Frames are processed live on-device by ML Kit to detect your pose and framing.
Biometrics (Face ID / Fingerprint)	iOS & Android	Used strictly through native system APIs (Apple LocalAuthentication / Android BiometricPrompt) to lock and unlock the App. The App never sees or stores your biometric data.
Photo Library / Storage	iOS & Android	Used only when you explicitly export a rendered progression video or photo to your device's Photos gallery.
Notifications	iOS & Android	Allows scheduling local on-device reminders to log daily or weekly progress. Notifications are generated locally by your phone operating system without push servers.

4. On-Device Computer Vision & Identity Protection

Body Tracker incorporates Google ML Kit (Pose Detection and Face Detection) to provide smart capture assistance and identity masking:

Local Processing: All machine learning models execute entirely offline on your phone's processor (CPU/GPU/NPU). No images or video feeds are sent to Google or any remote server for computer vision analysis.
Facial Mosaic Blur: If you choose to blur your face, the App applies a localized pixelation filter directly to the image buffer on your device. When saved or permanently applied, facial details are permanently altered in the local image file and cannot be mathematically reconstructed.

5. Third-Party Advertising (Google AdMob)

To support ongoing maintenance and provide video compilation features for free, Body Tracker displays rewarded video advertisements served by Google AdMob (Google Mobile Ads SDK).

When an advertisement is requested or shown, Google AdMob may automatically collect and process certain device information, including:

Device identifiers (such as Apple IDFA or Google Advertising ID).
IP address (used to estimate general location, such as city or country, and prevent fraudulent ad clicks).
Ad interaction metrics (e.g., whether a rewarded ad was watched to completion).
Diagnostic and performance telemetry (crash logs, app performance).

Google's use of this data is governed by the Google Privacy & Terms for Advertising.

6. User Consent Management (GDPR, UK GDPR, & CCPA)

We respect international privacy regulations. Body Tracker implements the Google User Messaging Platform (UMP) SDK:

European Economic Area (EEA) & UK: Users are presented with a certified consent form before personalized ads are requested. You can choose whether to consent to personalized advertising, non-personalized advertising, or manage individual ad partner vendors.
Revoking / Updating Consent: You can review or modify your privacy choices at any time directly through the Privacy Options setting in the App's Settings menu.
California (CCPA / CPRA): We do not sell your personal information. AdMob processes device data in accordance with California consumer privacy guidelines.

7. Data Storage & Right to Erasure

All records, timestamps, body weights, and photos are stored strictly in your device's private sandboxed app directory (`getApplicationDocumentsDirectory()`) and hardware-encrypted storage (`flutter_secure_storage`).

Deletion: Deleting a record inside the App permanently erases the associated photos from your device storage immediately.
Uninstalling: Removing or uninstalling Body Tracker from your device permanently purges all saved records, photos, PIN codes, and preferences. Because we do not keep cloud backups, uninstalled data cannot be recovered.

8. Children's Privacy (COPPA)

Body Tracker is not directed to children under the age of 13. We do not knowingly collect personal data from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app features, legal requirements, or advertising practices. The updated version will be indicated by the "Effective Date" at the top of this document.

10. Contact Us

If you have any questions or feedback regarding this Privacy Policy or the privacy practices of Body Tracker, please contact us at:

Email: support@bluelemonade.dev
Website: bluelemonade.co.kr