The photo stops
with you.

Information stored by the app

Depending on what you choose to record, Body Log can store progress photos and videos, dates, body measurements, weight, nutrition information, cycle context, energy, mood, notes and app preferences. These records are stored in the app’s private local vault on your device.

Camera Roll and photo capture

Photos and videos captured inside Body Log are moved from the camera’s temporary cache into the app’s private vault. The app does not automatically add those captures to the iOS Photos library or Camera Roll.

If you deliberately import existing media, Body Log accesses only the items you select and copies them into private app storage. The original remains in its existing location unless you remove it separately.

Permissions and device access

Camera

Camera access is used only for captures you initiate inside Body Log.

Selected photos and videos

Photo-library access is used only when you choose media to import.

Face ID or Touch ID

Biometric authentication can unlock Body Log. Matching is handled by the operating system; the app does not receive or store your biometric data.

Apple Health

If enabled, Body Log can read menstrual-flow information you choose to share for cycle context. It does not write body or cycle data to Apple Health.

No AI body analysis

Body Log does not send your photos to an AI service. It does not estimate body fat from images, score your physique, assess symmetry, generate body-based coaching or use your photos to train a model.

What Body Log does not collect

• No user account or public profile is required.
• No analytics or advertising SDK sends your in-app activity to us.
• No app-operated server receives your photos, measurements, journal entries or health context.
• The app does not sell personal information.

Locks and screen protection

Your six-digit passcode is stored as a salted hash in secure device storage. Body Log can use Face ID or Touch ID, automatically locks whenever it leaves the foreground and applies operating-system screen-capture protections while sensitive content is visible.

No software can stop someone photographing a physical screen. Use the app in an environment appropriate for the sensitivity of the record.

Automatic device and iCloud backups

The Body Log private vault is excluded from automatic device and iCloud backups. The app verifies that this protection is active and refuses to use the private vault if that protection cannot be confirmed.

Body Log does not rely on an automatic Apple backup or a Body Log cloud service to preserve your journal. Use the explicit portable backup workflow when you want a recoverable copy.

Portable backups

Portable backups are created only through an explicit action you take inside Body Log. The archive contains the records and media required for recovery or migration, and its photo and video files are checked for integrity during restore.

You choose where to save or share the backup through the iOS share sheet. Body Log does not select or operate the destination.

Portable backups are not encrypted. They do not contain your app passcode. Treat an exported .bodylog file with the same care as the original photos and confirm it exists at the chosen destination before relying on it.

Deletion

Deleting Body Log removes its private vault from the device. Because the vault is excluded from automatic device and iCloud backups, create and verify a portable backup first if you want to keep the journal.

Website and support contact

This website does not provide user accounts or accept progress-photo uploads. Standard hosting infrastructure may process technical request information needed to deliver and protect the site. For privacy or support questions, email lucythemaker@gmail.com.

Changes to this policy

This page will be updated if Body Log’s data practices change. The current version is effective 20 August 2026.