Booty AI Privacy Policy

Your unfinished setup is saved locally so you can resume it. When you save an account setup, your profile, training plan, workout history, and progress photos can sync privately through Supabase. Public Q&A and content you choose to share with a group have different visibility.

AI plan generation and AI Coach send information to OpenAI only through their permission-based flows. Progress photos are not automatically sent to AI. Do not put information you want to keep private in a public post or free-text AI request.

We do not sell personal information or use it for targeted advertising. The current app has no advertising SDK, marketing analytics SDK, HealthKit integration, GPS collection, push notifications, or in-app billing.

We handle the information you enter during setup and later edit in Profile: name, height, age, sex, fitness goals, training frequency and days, preferred activities, available equipment, training experience, effort, obstacles, movement limitations, free-form notes, and how you discovered the app.

You may also provide exercise benchmarks, reference targets, or weights. Older saved accounts may contain weight and target fields collected by earlier versions. Some answers personalize training; others remain reference information in your profile and do not change a plan automatically.

Unfinished answers and the reviewed AI preview are saved on your device before account saving. The finished answers and profile sync to your private account. Avoid entering medical details that are not needed for the feature you choose.

Sign in with Apple or Sign in with Google supplies authentication information to Supabase, our account and data service. Depending on the provider and what it supplies, this can include an account identifier, profile information, and an email address. The current Apple flow does not request an email scope, but this does not mean an email can never exist in account records.

Account-linked data includes your saved answers, profile, plan dates and workouts, exercise choices, planned sets and targets, actual workout and set logs, completion history, and personal records. These records sync between your device and your account. Offline changes can be stored locally until they are sent.

Syncing also keeps mutation and retry receipts, internal record identifiers, version information, and deletion markers to prevent duplicate changes and support recovery. A receipt can contain the earlier full data involved in a change.

Taking a progress photo is optional and uses the camera only when you choose that feature. The app prepares the image without the original image file's metadata before upload. The photo and its app record, such as its date and identifier, are stored in your private account using Supabase Storage.

Progress photos are not publicly posted or sent to OpenAI by default. You can delete photos in the app. Device permission can be changed in iOS Settings; withdrawing camera access prevents future camera capture but does not delete photos already saved.

The current app does not request photo-library, location, microphone, or HealthKit access. Device backups and copies saved outside the app are controlled separately by you and the services you use.

Public Q&A: author display names, questions, replies, and vote information can be viewed even by people who are not signed in. Posts and replies you publish are intended for that audience. Do not publish private health details or another person's personal information.

Invitation-based groups: group names and information, membership, messages, and shared workout summaries are available to group members. A shared workout summary can include its title, completion status and date, and internal identifier. Joining or sharing in a group does not make the rest of your private workout log or progress photos public.

We also handle votes, blocks, reports, author and account identifiers, and related security information to support community features and address misuse. We do not promise that content is automatically moderated or that a report will be handled within a particular time.

Other people can copy, screenshot, or redistribute content they can see. Deleting your copy cannot remove those external copies. If you own a group, deleting your account deletes the group and its content, including other members' contributions. Transfer group ownership first if you want the group to remain.

After you sign in and allow AI plan generation, our server sends selected training information to OpenAI through its API: goals and focus, activities, equipment, experience, effort, obstacles, selected training days, session length, and the allowed exercise catalog and day offsets. Movement limitations filter the allowed options on your device before the request.

The plan request does not automatically include your name, age, sex, height, measurements, medical notes, progress photos, or weights. The filtered exercise options and training preferences can still reveal information about your fitness interests or abilities.

The returned plan is validated. During onboarding, you review it before saving. Regenerating from Home saves the replacement plan after you confirm the change. Saved workouts are stored in your account. If a request fails, your onboarding draft or existing Home plan is preserved so you can retry.

AI Coach has a separate permission prompt. A request can include your messages, saved training preferences, selected and recent workout titles and internal identifiers, two dated summaries of 28-day completion, your streak, and actual sets and repetitions. Messages and workout titles may contain sensitive information that you typed yourself.

The conversation view is temporary on your device and clears when you close it. Workouts or changes you choose to save from AI Coach remain as app data. Our AI endpoint does not save chat prompts or responses as a conversation archive; it retains operational usage and quota metadata. This is different from OpenAI's retention.

We send API requests with response storage disabled. OpenAI states that API inputs and outputs are not used to train its models by default. OpenAI may retain inputs and responses for abuse monitoring, normally for up to 30 days, or longer when required by law or reasonably necessary to protect its services or others from harm. Disabling response storage does not promise zero retention. See OpenAI's API data controls for current details and exceptions.

You can decline an AI permission prompt. In Profile → Your data, Reset AI permissions clears this account's permission on this device. Resetting applies to future requests; it does not recall information already transmitted or remove saved workouts. If you are under 18, obtain your parent or legal guardian's permission before using AI features.

• Resume setup, save preferences, personalize requested plans, and provide AI responses you choose.
• Sync private account data, track workouts and progress, and display your records.
• Provide public Q&A, invitation-based groups, and sharing you choose.
• Authenticate accounts, enforce access rules and usage limits, recover failed changes, and address reports or misuse.
• Respond to support and privacy requests, troubleshoot the service, and meet applicable legal obligations.

We do not use private progress photos or workout content in advertising or marketing without your permission.

• Supabase: authentication, private database and photo storage, account sync, community records, and server functions.
• Apple and Google: the sign-in service you choose; Apple also distributes the iOS app.
• OpenAI: information sent for an AI request you allow, as described above.
• Other users and viewers: public content and information shared with group members.
• Support communication providers: messages you send us by email and the information needed to answer them.

We require service providers processing information on our behalf to provide the same or equal protection described in this policy, including confidentiality, use only for authorized purposes, and appropriate security safeguards.

Providers can process technical details such as IP addresses, device or request information, and operational logs under their service terms. We may disclose information when legally required, to protect rights and safety, or in a business transfer subject to applicable privacy obligations. We do not sell personal information or share it for targeted advertising.

We retain account data while it is needed to provide the features you use and for security, recovery, and applicable legal obligations. Individual deletion removes an item from active app data; earlier full mutation or retry receipts and deletion markers can remain until account deletion.

Profile → Account → Delete account removes the account's app records, community records covered by account deletion, authentication account, and owned progress photos, and revokes access. Groups you own and their content are also deleted. Transfer ownership before deleting if you want a group to continue. Signing out is not account deletion.

Old local copies created before cloud syncing, pending device data, device backups, and copies held by other people may remain separately. Provider logs and backups have their own retention practices. We have not verified a universal provider or backup deletion deadline and do not promise immediate removal from every such system.

For a privacy or consumer health data deletion request that needs more than the in-app controls, contact ben@getbananaapps.com. Applicable statutory deletion rights continue to apply, including obligations concerning processors and backups.

You can edit saved preferences in Profile, choose what to post or share, delete available content, leave groups, change camera permission, reset this account's AI permissions on this device for future requests, and delete your account. Previous transmissions and external copies are not recalled by changing a setting.

Depending on where you live, you may have rights to access, correct, receive, delete, or restrict the use of your personal information, withdraw consent, and appeal a decision about your request. Booty AI does not currently have a self-service export button. Email ben@getbananaapps.com to exercise a right or ask for information about recipients.

We may ask for information reasonably needed to verify that a request concerns your own account. Do not email your password. We handle requests according to applicable law, and exercising a privacy right does not cause unlawful discrimination. Our Consumer Health Data Privacy Policy gives a separate health-data request and appeal route.

Private account records use authenticated access controls, and progress photos use private storage access. No service or device can guarantee perfect security. Keep your device and sign-in account protected, and contact us about suspected unauthorized access.

Banana Apps LLC is based in the United States. Our service providers may process information in the United States or other countries where they operate. Privacy protections can differ by location; applicable legal requirements continue to apply.

Booty AI is not intended for children under 13 or the higher minimum age required where they live. We do not knowingly offer the service to children below that age. If you believe a child below the minimum age provided information, contact ben@getbananaapps.com so we can investigate and address it.

Users under 18 need a parent or legal guardian's permission before using AI features. This statement does not mean the app independently verifies a parent's identity or consent.

Visiting these pages is separate from using the app. Cloudflare delivers and protects getbananaapps.com, and Google Fonts supplies the website fonts. Those services can receive your IP address and technical request information. We do not use website advertising or marketing analytics.

When you email us, your email address and message are handled to answer your request. Do not include unnecessary sensitive information in support email.

We may update this policy as the app or its data practices change. We provide notice or request permission where applicable law requires it.

Privacy requests: ben@getbananaapps.com. App support: team@getbananaapps.com. Banana Apps LLC, Florida, United States. A mailing address is available on written request.