← Back

Privacy Policy

Last updated: March 2026

1. Overview

The protection of your personal data is important to us. This privacy policy informs you about the type, scope, and purpose of processing personal data at AI Body Coaching.

AI Body Coaching is a product of Syntronix Solutions, based in Canada. Syntronix Solutions is the data controller responsible for the processing of personal data on this platform.

2. Data Controller

Syntronix Solutions [Full Address] [City, Province, Postal Code], Canada E-Mail: privacy@aibodycoaching.com Legal: legal@aibodycoaching.com

3. Data We Collect

We collect the following categories of data:

  • Account data: Username, email, password (encrypted)
  • Health data: Body weight, body fat, blood values, sleep, nutrition (voluntarily entered)
  • Usage data: Interactions with the AI coach, training plans, supplement stacks
  • Technical data: Browser type, language preference (no IP addresses)

4. Health Information as Sensitive Personal Information

AI Body Coaching processes health information. Under PIPEDA this is treated as highly sensitive, requiring express consent and a correspondingly high standard of safeguarding: blood work and lab values, body composition and weight history, supplement and medication logs, training and recovery data, and entries on conditions, allergies and wellbeing.

Processing rests solely on your express consent, given when you create your account. You may withdraw it at any time by deleting your account under Settings.

Body scan photos are an exception: they are transmitted for analysis only, never stored, never linked to your account, and not retained after the analysis returns.

5. Consent and Legal Basis

Syntronix Solutions is a Canadian company. Processing of personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and rests on your consent. Under PIPEDA, health information is treated as highly sensitive and is processed solely on the basis of your express consent, given when you create your account and withdrawable at any time.

We collect only what is necessary for the stated purpose, identify that purpose before collecting, and do not use the information for any other purpose without fresh consent.

6. Data Storage

Your data is stored on Neon servers (PostgreSQL, AWS US-East) and protected by encryption. Data is stored as long as your account is active. You can delete your account at any time under Settings, which removes your data immediately. Payment and invoice records are retained in anonymised form, without any link to you, for as long as tax and accounting law requires.

7. Processing Outside Canada

Your information is stored and processed outside Canada, primarily in the United States. While there, it may be accessible to the courts, law enforcement and national security authorities of that jurisdiction under its laws. This applies in particular to database hosting, application hosting, email delivery, payment processing and AI-powered analysis.

8. Third Parties

To provide the service we use carefully selected processors. They are contractually bound to a level of protection comparable to that set out in this policy and receive only the information necessary for their function. Categories: database hosting, application hosting, transactional email, payment processing, and AI-powered analysis for generating personalized coaching recommendations.

8a. Third-party AI providers

Several features send the data you enter, over an encrypted connection, to third-party AI providers who process it on our behalf to return your result. We only share the data needed for each feature, and each provider is contractually bound to protections equivalent to those in this policy. You are asked to consent in the app before any such data is shared, and AI features remain disabled until you do.

  • xAI (Grok) — AI Coach chat, and training, nutrition, fasting and supplement plan generation. Data shared: your profile and goals, tracking entries, and the messages you send to the coach.
  • OpenAI — the food scanner (image and voice recognition) and the body scanner (image analysis). Data shared: the photos and voice recordings you submit to those scanners.

We do not use this data to train third-party models beyond returning your result, and body-scan photos are not retained. You may withdraw your consent at any time by contacting privacy@aibodycoaching.com; the AI features will then stop working. A feature-by-feature breakdown of exactly what is sent to each provider is available on our AI & your data page.

9. Cookies

We only use technically necessary cookies. No tracking or advertising cookies.

  • ht_session – Authentication session (30 days)
  • ht_onboarded – Onboarding status (30 days)

10. Your Rights

Under PIPEDA you have the following rights:

  • Access to the personal information we hold about you
  • Correction of inaccurate information
  • Withdrawal of your consent
  • Deletion of your account and its data
  • An account of to whom your information has been disclosed
  • The right to complain, to us and to the regulator

You can delete your account yourself at any time under Settings → Delete Account.

Contact for data protection inquiries: privacy@aibodycoaching.com

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

11. Data Security

We employ state-of-the-art security measures: password hashing (scrypt), HTTPS encryption, HttpOnly cookies, and server-side session validation.

12. Visitors from the EEA

The app is currently not offered in the EU on the App Store, but the website is reachable from the EEA. Where the GDPR applies to you, we process your data on the basis of your consent (Art. 6(1)(a), Art. 9(2)(a) GDPR) and for performance of the contract (Art. 6(1)(b) GDPR). You additionally hold the rights under Art. 15–21 GDPR, including portability and objection.