In short: Body Log has no account system, advertising, analytics service or app-operated cloud backend. Your app data stays on your device unless you deliberately create and share a backup.
Information stored by the app
Depending on what you choose to record, Body Log can store progress photos and videos, dates, body measurements, weight, nutrition information, cycle context, energy, mood, notes and app preferences. These records are stored in the app’s private local container on your device.
Permissions and device access
Camera
Camera access is used to take progress photos and videos. Captures are moved into Body Log’s private storage and are not automatically saved to the Camera Roll.
Selected photos and videos
If you choose to import existing media, Body Log accesses only the items you select and copies them into private app storage.
Face ID or Touch ID
Biometric authentication can be used to unlock Body Log. Biometric matching is handled by the operating system; the app does not receive or store your biometric data.
Apple Health
If you enable the feature, Body Log can read menstrual-flow information you choose to share for cycle context. Body Log does not write body or cycle data to Apple Health.
What Body Log does not collect
- No user account or profile is required.
- No analytics or advertising SDK sends your activity to us.
- No app-operated server receives your photos, measurements, journal entries or health context.
- The app does not sell personal information.
Locks and screen protection
Your passcode is stored as a salted hash in secure device storage. The app can automatically lock when it leaves the foreground and can use operating-system protections to discourage screenshots and screen recording while sensitive content is visible.
Backups
You can create a portable .bodylog backup for recovery or migration. The archive is versioned and its photo files are checked for integrity during restore. The exported archive is not encrypted and does not contain your app passcode. Treat it with the same care as the original photos.
Body Log cannot confirm that you completed the system share or save action. Before deleting the app, check that your backup exists in the destination you chose.
Device backups and deletion
Your private app container may be included in an encrypted whole-device iCloud or computer backup if iPhone Backup is enabled. Deleting Body Log removes its local container from the device. Create and verify a portable backup first if you want to keep the data.
Changes to this policy
This page will be updated if Body Log’s data practices change. The current version is effective 9 August 2026.