Privacy Policy

Effective July 29, 2026

Aptus (“Aptus”, “we”, “us”) is a fitness and body-tracking app. This policy explains what we collect, how we use it, and your choices. Aptus is private by default: most of your data lives on your device, and anything synced to your account is encrypted.

What we collect

• Account info: your email address, and a display name if you set one. If you sign in with Apple or Google, we receive the email associated with that sign-in.
• Your photos: the body-scan photos you choose to take, used only to generate your scan results.
• Health & fitness data you enter or track: weight, measurements, body-scan estimates, food and nutrition logs, workouts, habits, sleep, and fasting.
• Apple Health data: if you grant permission, we read steps and sleep from Apple Health to show your activity. This is read-only. We never write to Apple Health, never use Health data for advertising, and never share it.
• Basic technical data needed to run the service, such as app version and error diagnostics.

We do not collect your contacts, location, or browsing activity, and we do not use tracking for advertising.

How your body-scan photos are used

When you take a body scan, your photo is sent to our AI provider solely to produce your scan result (a body-fat estimate and neutral observations) and related imagery. Photos are processed to give you that result and are not used to train AI models. We do not sell your photos, show them to anyone, or use them for any purpose other than delivering your scan and storing it in your own account.

Where your data is stored

• On your device by default. If you do not create an account, your data stays on your phone.
• In your account (optional). If you sign in, your data and photos sync to your private account so you can back them up and use Aptus on another device. Synced data is encrypted in transit (TLS) and at rest (AES-256), and photos are kept in private, access-controlled storage.

Service providers

We use a small number of infrastructure providers to run Aptus, including Cloudflare (hosting, storage, and sync) and an AI provider (to process scans). They process data on our behalf under their own security and privacy terms and are not permitted to use your data for their own purposes.

Retention and deletion

We keep your account data while your account is active. You can export all of your data and photos at any time from inside the app, and you can permanently delete your account and everything in it from Settings → Account → Delete account. If an account stays inactive for an extended period, we may warn you and then delete it to honor this privacy-first promise.

Your rights

You can access, export, correct, or delete your data at any time from within the app. If you are in a region with data-protection laws (such as the EU/EEA or UK), you also have the right to object to or restrict certain processing and to lodge a complaint with your local authority.

Children

Aptus is not directed to children under 16, and we do not knowingly collect data from them.

Changes

We may update this policy. We will post the new version here and update the date above.

Contact

Questions about your privacy? Email [email protected].