How we handle your personal data

The controller of your personal data is BodyData s.r.o., company ID 29835470, registered at V zářezu 902/4, 158 00 Prague 5 – Jinonice, Czech Republic.

For anything concerning personal data, write to info@bodydata.cz. We have not appointed a data protection officer, as the law does not require us to.

The location where you get measured is a separate controller for its own services. It is responsible for how it handles data in its own systems.

Account data — the email address you sign in with, your name if you provide it, and your language and account settings.

Measurement results — the values measured by participating devices, the time of measurement, the location where it was taken, and result-sheet files. This includes weight, muscle and fat mass, body water, grip strength, blood pressure and heart-rate variability. These are health data, a special category of personal data.

Data you add yourself — goals, notes and comments on measurements.

Sharing records — who you gave access to your results, to what extent, and when access was granted or revoked.

Consents — which consents you gave or withdrew, and when.

Operational and security records — sign-ins and attempts, IP address, device and browser type, records of emails and text messages sent, and records needed to resolve errors and misuse.

Order data — if you ever buy a paid service from us, we keep the receipt and payment details to the extent accounting law requires.

To provide the service — to run your account, show your measurement history and enable sharing. The legal basis is performance of a contract, namely these terms.

Processing of the measurement results themselves, being health data, relies on your explicit consent. You can withdraw consent at any time; withdrawal does not affect processing carried out beforehand.

To keep the service secure — verifying sign-ins, protecting against misuse, handling incidents. The legal basis is our legitimate interest in secure operation.

To meet legal obligations — in particular accounting and tax obligations.

To send commercial messages only where you give us consent. You can unsubscribe using the link in every such message.

We do not carry out automated decision-making with legal effects concerning you. The AI report is only a text output based on your values, not a decision about you.

You — you can access your data after signing in to the portal.

The location where the measurement was taken — it sees the measurements carried out there, so it can provide its service and discuss the result with you. It has no access to measurements from other locations.

People you share with — typically a trainer or nutrition professional, only to the extent you chose and only until you revoke the sharing.

Our processors — suppliers who handle technical operations for us:

• hosting and technical infrastructure in the EU: netcup GmbH,
• email notification delivery: ZeptoMail (Zoho) and Mailtrap.io,
• text-message delivery: SMSmanager.cz,
• AI report text processing: primarily OpenAI (API), with fallback processing via Anthropic (Claude API) depending on current configuration and service availability,
• Fio banka, a.s. for receiving, matching and recording payments and issuing documents.

We have data processing agreements with all processors, and they may handle data only on our instructions.

We do not sell your data and we do not pass it to anyone for their own marketing. We disclose it to public authorities only where the law requires it.

We run our servers and database on virtual servers in a data centre in the European Union, provided by netcup GmbH. That is where your account, measurement results and uploaded files are stored.

If you request an AI report, the text of your measured values is sent to an artificial-intelligence provider for processing, which can mean a transfer outside the EU and EEA. This transfer does not happen unless you request a report.

Any such transfer is made under appropriate GDPR safeguards, in particular Standard Contractual Clauses or another mechanism agreed with that provider.

Account data and measurement results — for as long as you have an account. Your history stays available until you close the account or ask for erasure.

Source data from transferring measurements off the devices — 60 days. After that only the processed result remains in your account.

Records of messages sent — at most 365 days. The content of security emails, in particular sign-in PINs and one-time links, is redacted after 30 days.

Accounting and tax records — for the period required by law, including after your account is closed. After erasure they remain without your name, under a technical identifier only.

Security records — for as long as necessary to handle incidents and protect the service.

Under the GDPR you have the right to:

• know what data we hold about you and obtain access to it,
• have inaccurate data corrected,
• have your data erased,
• restrict processing or object to it,
• receive your data in a machine-readable format and transfer it elsewhere,
• withdraw any consent you gave us, at any time.

You can exercise these rights directly in the privacy section of the portal, or by email at info@bodydata.cz. Before we act on a request we verify that it really comes from you — which is why you confirm it with a one-time link sent to your verified email address.

We normally handle requests within one month. If it would take longer, we will let you know.

You request an export in the portal. We prepare a structured JSON file with your profile, consents, measurements, goals, sharing, purchases and processing history. It contains no passwords, no access tokens and no other users' data. The finished file can only be downloaded from your signed-in account.

You also request erasure in the portal. After you confirm the one-time link from your email, a seven-day period starts during which you can still withdraw the request. Once it passes, we delete your measurements, uploaded files and the details that identify you, and disable the account.

Erasure does not cover accounting and tax records that we must keep by law. Those remain without your name, under a technical identifier only, so they cannot reveal who you are.

BodyData uses only technical cookies, without which the site and portal would not work — they hold your sign-in, your language choice and your light or dark theme. They cannot be switched off, because without them you cannot sign in.

We do not yet set any analytics or advertising cookies, and we use no external advertising or analytics system. If we ever introduce one, we will ask you first, and no such cookie will be set without your consent.

We do not use your measurement results for advertising and we do not connect them to advertising systems.

Data in transit is encrypted. Sign-in works without a password, using a one-time code sent to your verified email, so there is no password to steal or guess.

Access to data is limited by role and account ownership. Client and staff sign-in are separate — location staff do not sign in to your account.

Result files are stored separately and releasing them is checked against your permissions. We keep records of access to sensitive operations.

If a security breach nevertheless occurred with a risk to your rights, we would report it to the supervisory authority as required by law, and to you where the risk is high.

For anything about personal data, contact info@bodydata.cz. We are happy to explain what we hold about you and why.

If you believe we handle your data improperly, you have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.