Privacy

What we collect

Only what the app needs to program your training and track progress.

• Body measurements — weight and waist entries, and the dates you logged them.
• Check-in photos — the progress photos you take in the Body tab. These stay on your iPhone and are sent to us only if you turn on backup or ask for an aesthetic plan (see below); we do not collect them by default.
• Voice recordings — what you dictate is sent as audio to a transcription model and turned into text so it can be logged. We keep the text with your message, not the recording.
• Food logs — meals, portions, the photos you send for calorie estimation, and on iPhones with a LiDAR sensor the depth readings taken with them.
• Training data — sets, reps, loads, soreness, sleep and energy reports.
• Account data: the identifier from Sign in with Apple, your email if you gave one (or the private relay address Apple makes when you hide it), and your name if Apple shares it when you sign in or you enter one in Settings. The coach uses your name when it talks to you.
• App and device: the app version and build you are running, whether it is an App Store, TestFlight or development build, the country of your App Store account, and your iPhone's model (for example "iPhone 17 Pro"). The app sends these with its requests. We use them to support you and to tell test accounts from customers. They are not your location, they are not used for advertising, and they are not shared.
• Assistant connections: if you connect ChatGPT, Claude or another assistant, the connection records, hashed credentials and 30-day change receipts described below.
• Notifications — if you allow them, an Apple-issued device token, used only to deliver your weekly review.

The app carries no third-party analytics or advertising SDKs. It does not use the advertising identifier or any other identifier to track you, and the notification token above is the only device identifier we hold. Your iPhone's model is not an identifier: it is shared by everyone with the same phone.

Where it lives

Structured data — training, food logs, measurements — is stored on servers in the United States. Check-in photos are local-first: they stay on your iPhone and never leave it unless you explicitly send them — either by turning on photo backup (a Pro option) or by asking for an aesthetic plan that analyses them. You are asked before either happens, and what is stored is private: only your signed-in account can fetch it back.

Food photos and depth data

When you photograph food for the coach, the photo goes to our servers and on to the AI providers listed below, which read it and estimate the portions. On iPhones with a LiDAR sensor the app may also capture a depth map at the same time: a grid of distances to the plate, recorded alongside the photo and read on our own servers.

To check and improve how well GreekBody estimates portions, we keep a record of those photos: the photo itself, the depth data taken with it, the portion reading the AI returned, what you finally logged, and any weight you tell us you put on a kitchen scale. We use that record for that one purpose. It is not sold, it is not used for advertising, and it is not shared with anyone beyond the third parties named below. A photo that is not kept for this is discarded once the estimate comes back.

Depth data is a grid of distances rather than an identifier and carries no audio, while a photo shows whatever is in the frame, so point the camera at the food and not at the room.

We keep that record until you delete your account or ask us to delete it. To have any of it removed before then, write to support@greekbody.app and say so.

Using GreekBody from ChatGPT or Claude

You can connect your GreekBody account to ChatGPT, Claude or another assistant that supports the Model Context Protocol. Nothing is shared until you connect, and only the assistant you connected can reach your account.

What the assistant receives. When you ask the assistant something that needs your GreekBody data, it asks our server and receives the answer: your daily targets, the food you logged and its nutrients, meal times, your training plan and logged sets, steps, your most recent weigh-in (weight, waist and body-fat range), active injuries you recorded, reminders you set, and profile details such as age, height, sex, goal and units. The assistant only receives what a request needs, and only when you ask. What it then does with that data is governed by its provider's own privacy policy (OpenAI for ChatGPT, Anthropic for Claude).

What we receive from the assistant. The details of each change you ask for, such as a food name, an amount and its nutrients, or a new working weight; a random request number; and, at most, one short sentence the assistant writes summarising what you asked. We do not ask for or receive your conversation. The summary sentence is used to check the change matches your request and is not stored.

Health-related information. Your measurements, injuries and food logs are personal and health-related. We use them only to run your GreekBody account. We do not sell them, use them for advertising, or share them with anyone other than the assistant you connected and the service providers listed under Third parties.

What we keep about a connection, and for how long.

• The connection itself: which assistant, when it was made, when it was last used, and when you revoked it. Kept while active and deleted 90 days after you revoke it.
• Access credentials, stored only as one-way hashes. Access lasts one hour and renewal up to 30 days; expired credentials are deleted a day after they expire. Pairing codes last 10 minutes, work once, and are stored only as hashes.
• A receipt for each change made through the connection: the tool used, the request number, a one-way hash of the request, and the result we returned. Receipts let a retried request land once and let you undo a change. They are deleted after 30 days.
• Food you log or change through an assistant is kept like any other food log, labelled with the assistant's name in your food history, until you change it or delete your account.
• A registration for each assistant app that connects (its name and return address). Ones never used for a connection are deleted after 7 days.
• Rate-limit counters, keyed by a one-way hash of the network address or credential, expire within minutes to a day.
• Our server logs one line per request: your account number, the assistant's name, the tool, whether it succeeded and how long it took. No food, measurements or messages are written to these logs.

No GreekBody AI on these requests. Requests from a connected assistant are answered from your stored data; we do not send them to our own AI providers. A packaged-food lookup sends only the food's name or barcode to Open Food Facts.

Your controls. See and revoke connections any time in GreekBody, under Settings, Connect ChatGPT, Claude or Muse; revoking stops access immediately. You can also remove GreekBody from the assistant's settings. Deleting your GreekBody account deletes your connections and everything above with it.

Third parties

• OpenAI, Google and OpenRouter — your coach messages, voice recordings, food photos, and (only when you ask for an aesthetic plan) your check-in photos are sent to the language models that produce the replies, estimates and plans. Those models are run by OpenAI, reached both directly and through OpenRouter, and by Google, whose Gemini model reads food photos and is reached through OpenRouter. Under the applicable API terms this content is not used to train the models.
• Serper.dev / Google Search — when the coach cannot identify a food from your own history or a packaged-food database, it sends the food's name (for example "pulled pork sandwich") as a web search to look up typical nutrition facts. Only the food term is sent — never your identity, measurements or logs.
• ChatGPT, Claude and other assistants you connect: only if you connect one. The assistant receives the GreekBody data a request needs, under its provider's privacy policy. See "Using GreekBody from ChatGPT or Claude" above.
• Apple handles Sign in with Apple, and for Pro the subscription billing and renewal. We never see your payment details.
• Infrastructure — our servers (Fly.io, United States), database (Neon) and private photo storage (Tigris) hold your account data on our behalf and do not use it for their own purposes.

We do not sell your data and we do not use it for advertising.

Deletion

You can delete your account from inside the app. Deletion removes your training history, food logs, measurements, and any stored photos and depth data from our systems. Backups are rotated regularly, and deleted data is cleared from them in the ordinary course of that rotation rather than kept indefinitely.

Contact

Privacy questions go to support@greekbody.app.