Privacy Policy
Last updated: 22 October 2026
This policy is a notice of how we handle your information. It applies to every member. Sections marked Australia apply to members in Australia; sections marked United States apply to members in the United States.
1. The short version
- QBod is a food, training and recovery coach for adults (18 and over).
- We collect what you log and what you connect, and we use it to coach you.
- Medications and supplements you log are kept for you to see. Coach Q and trainers don't use them.
- Our account database is hosted in the United States. Service providers may also process or temporarily store information in other countries. If you live in Australia, your information is disclosed overseas.
- Our AI coach runs on AI providers based in the United States. What you tell the coach, your logs, and any photo or voice note you send to be read go to them for that purpose.
- QBod is an AI-powered app. It can't work without AI processing of the data you give it. If you don't want that, you can stop at any time by deleting your account.
- We don't sell your data and we don't run ads.
- You can get a copy of your data, correct it, delete your account, and complain to us or to a regulator.
2. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Email, the name you want us to use, password or Apple/Google sign-in | You |
| Profile | Birth month and year, sex, height, weight, goal, equipment | You |
| Health and fitness logs | Food, workouts, weight, body measurements, sleep, mood, cycle, blood pressure, glucose | You, Apple Health, Health Connect, Garmin, Fitbit, Oura |
| Medications and supplements | what you log about them, including doses and side effects you note | You |
| Coach conversations | What you ask Coach Q, its replies, and short notes it keeps so it remembers your preferences | You and the coach |
| Photos and voice notes you send to be read | (meals, labels, device screens) | You |
| Location, only if you allow it | One approximate daily position; GPS route for an outdoor workout | Your phone or Apple Watch |
| Subscription | Which plan, trial status, renewal dates, the country and currency of the purchase | Apple or Google, via RevenueCat |
| App diagnostics | Crash reports, screen views, app version, device type | Your phone |
A nickname is fine; we need an email address or Apple/Google sign-in for your account.
Photos and voice notes you send are read by our AI providers; we keep what you confirm, not the image or recording. Chat attachments are kept 90 days.
The app never recommends a dose, time or change.
3. Why we use it
| Purpose | What it uses |
|---|---|
| Set your calorie, protein and training targets | Profile, goal, logs. A formula sets these, not the AI. |
| Coach you (daily messages, Coach Q, weekly check-in) | Profile, logs, coach conversations, connected-device data |
| Read a photo or voice note you send, or match a medication name you typed | That photo, recording or typed name, sent to our AI providers to read it back to you |
| Show your medications and supplements back to you | Those records, on your phone; they don't change your plan and Coach Q doesn't read them |
| Show local weather and your city | Your approximate daily position |
| Fit your daily coaching to the weather where you are | Your city and country and today's weather there, sent to our AI providers (never the position itself) |
| Draw the map of an outdoor workout | That workout's GPS route, sent to Google Maps |
| Run your subscription | Purchase records from Apple or Google |
| Keep the app working | Crash reports and diagnostics |
| Answer you when you email us | Your email and what you send |
We don't use your health data for advertising. We may contact people whose accounts we closed as inactive about QBod, as described in section 6; every email has an unsubscribe link.
Finding and fixing problems. We may look at app records, which can include health values, to find and fix faults, using AI tools from the US companies listed in section 4.
4. Who receives your data, and where they are
These companies receive information needed to provide their services. We require third parties receiving your data to provide protection at least equivalent to this policy and Apple’s applicable privacy requirements. Countries are listed below. For Australian members, this sends information overseas, mainly to the United States.
| Company | What it receives | Why | Country |
|---|---|---|---|
| Supabase (on Amazon Web Services) | Everything in your account | Stores your data | United States (Ohio) |
| AI providers based in the United States | Your coach conversations, the profile details and logs the coach needs, photos and voice notes you send to be read, a medication name our list doesn't recognise (to name its ingredient), and if you allow location your city and today's weather. Never your medications list, dose log or side-effect notes for coaching. | Coaching and reading your entries | United States |
| Google (Firebase, including Analytics) | Crash reports, performance timings, screen views; push-notification token and message | Stability, analytics and notifications | United States |
| Google (Maps) | The GPS route of an outdoor workout | Draws your route map | United States |
| Apple (WeatherKit) | Your daily position, rounded to about 1 km, with no account ID | Local weather | United States |
| Your phone's maps service (Apple or Google) | The same rounded position | Names your city | United States |
| Your phone's speech service (Apple or Google) | What you say when you talk to Coach Q by voice | Turns speech into text | United States |
| RevenueCat | Your QBod account ID, email, name, purchases, and on iPhone an Apple ad-attribution token | Manages your subscription | United States |
| Apple and Google (app stores) | Your purchase | Sells and bills the subscription | United States (the store you bought from) |
| Apple and Google (sign-in) | Your email and name, if you sign in with them | Sign-in | United States |
| Garmin, Fitbit (Google), Oura | Only if you connect them: sign-in tokens; we receive your data from them | Imports activity, sleep, heart data | United States (Garmin, Fitbit by Google); Finland (Oura) |
| Resend | Your email address and the email we send | Account emails | United States |
| USDA FoodData Central | Food search words, no ID | Nutrition facts | United States |
| Open Food Facts | Barcodes, no ID | Nutrition facts | France |
| YouTube (Google) | The video ID from a recipe link you share | Reads the recipe | United States |
| Google (Analytics) | On our website: which pages you read, your browser and device type, approximate location from your IP address | Counts website visits | United States |
| Cloudflare (Turnstile) | A check token and your IP address, on our website forms | Blocks bots | United States |
| Anthropic, OpenAI, xAI | Error records that can include health values | AI tools for fixing bugs | United States |
| A trainer you choose to connect | What you agree to share. Never your medications and supplements records. | Coaching by that trainer | Where that trainer is |
Our AI providers receive the profile information and content needed to provide the feature, which may include your name and identifying details you enter. This information is not anonymised. Our contracts bar them from training models on it.
Australia: overseas information. These companies handle information under our contracts, and we remain responsible. Our paid coaching and photo/voice AI services are contractually barred from using your data to train models.
5. Your choices and consent
- At sign-up you tick one box that confirms you are 18 or over and agree to the Terms, this Privacy Policy, the Medical Disclaimer (now the Health and safety section of our Terms) and the AI disclosure.
- Location is optional. Say no and nothing else in the app changes.
- Apple Health and Health Connect are optional. Turn them off in your phone's settings at any time.
- Garmin, Fitbit and Oura are optional. Disconnect in Profile > Wearables. When you disconnect, we tell the provider to stop, and we keep what already synced until you delete it or your account.
- Photos and voice are optional each time; you can always type.
- AI processing is part of QBod. QBod is an AI-powered app and can't work without AI processing of the data you give it, so using QBod means agreeing to it. If you don't want that, you can stop by deleting your account (section 7).
- Withdrawing consent. Washington members can withdraw health-data consent in Profile > Health Data Consent. You can also email support@qbod.fit to withdraw consent. We will stop the processing you ask about, which may mean closing your account.
6. How long we keep it
| Data | How long |
|---|---|
| Your account, profile, logs, coach memory notes, workout GPS routes, recipe photos, trainer chat attachments, and the history of why a target changed | While your account exists |
| Medications and supplements | While your account exists. Removing an item keeps its history; email us to delete the history. |
| What our AI providers receive | AI providers retain processing data under our agreements with them. QBod’s retention of conversations, saved entries and service records is described in this section. |
| Your conversations with Coach Q | While your account exists. You can read them in the app. |
| Daily coach messages | 90 days |
| Files attached in coach chat | 90 days |
| Raw samples imported from Apple Health, Health Connect and connected devices | Most are deleted after 90 days; the daily totals stay with your account |
| Your approximate daily position | 14 days |
| App error logs | 30 days |
| Service records of what the app did for you | While your account exists |
| Subscription event records from our billing service | While your account exists |
| Record that an account was deleted | We keep a record that the account was deleted, with a one-way code made from the email address (not the address itself), to prove it happened. |
| People who aren't members: a prospect a trainer typed in, an invite sent to an email address, a pre-signup device limit | Prospects: until the trainer deletes them or you ask us to. Invites and pre-signup device limits: until you ask us to delete them. |
| Accounts we closed as inactive: name, email, the dates you joined and last used QBod, and the phone type. We keep this to recognise you if you return and to let you know about QBod. You can unsubscribe from any email, and you can ask us to delete it at any time. | Up to 12 months after we closed the account, or sooner if you ask |
7. Deleting your account
Open Profile > Delete Account. We delete your account and the information in our main database straight away, including your medications and supplements records. Some things take longer:
- Coach-chat files are removed within 90 days; email support@qbod.fit to remove recipe photos and trainer chat attachments.
- Disconnect Garmin, Fitbit or Oura in Profile > Wearables before deleting, or remove QBod in the provider's app.
- Our subscription service retains purchase records after account deletion; email us to request removal.
- Diagnostic and usage records may remain without your account ID until our cleanup removes them.
Deleting your account does not cancel your subscription. Apple or Google bills you, not us. Cancel in your App Store or Google Play subscriptions first, or you may keep being charged.
8. Your rights
Everyone, wherever you live, can:
| Right | How |
|---|---|
| Get a copy of your data | Email support@qbod.fit with the subject "My data" and we will send you a copy. It includes your medications and supplements records. |
| Correct it | Most logs can be edited or deleted where you logged them. Name and email: Profile > Edit Profile. Birth date, sex or height: email us and we will fix it. Something the coach remembers wrongly: tell Coach Q to forget it, or email us. |
| Remove something you told us about another person | Email us and we will delete it. |
| Delete your account | Section 7. |
| Complain | Email us first. See section 10 for regulators. |
We reply to privacy requests within 30 days, wherever you live. We check it's really you before we hand over or change anything.
9. Automated decisions
Coach Q runs on AI from US providers.
- What the AI does. It answers you, writes your daily messages, reads what you send, and suggests changes you confirm.
- What the AI does not do. It is not a doctor, dietitian or psychologist, a person does not check its replies, and it can be wrong.
Some things in QBod are worked out by software:
- Your daily calorie and protein targets come from a formula using your age, sex, height, weight, activity and goal. The AI does not set them.
- Your training plan and workout suggestions come from our planning rules and your lift history, and Coach Q may suggest changes. You confirm workout changes before they happen.
- Your Q-Score is a daily number calculated from what you logged against your plan.
- Safety hand-off. If a reading or message suggests you may need urgent help, the coach stops coaching on that topic for that reply and points you to emergency help.
- Your medications and supplements stay outside your targets, plan and score.
None of these closes your account or changes what you pay. If you think one of them got something wrong about you, email us and a person will look at it.
10. Where you live
QBod is available in the United States and Australia. Sections marked Australia apply to members in Australia.
Australia. If you live in Australia, we handle your personal information under the Australian Privacy Principles in the Privacy Act 1988. Health information is sensitive information and we collect it only with your consent. You can ask for access and correction as in section 8. If you're unhappy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, 1300 363 992. If we have a data breach likely to cause you serious harm, we will tell you and the OAIC as the Notifiable Data Breaches scheme requires.
United States. If you live in the United States, you have the rights in section 8 whatever state you live in, plus the rights your state gives you, including California, Washington (see our Consumer Health Data Privacy Policy), Texas and others. We don't sell personal data or use it for targeted advertising. We honour Global Privacy Control signals. If we refuse a request, reply to our answer to appeal.
California. You can ask us what personal information we have collected about you in the last 12 months (the categories, sources, purposes and the categories of companies we share it with are in sections 2 to 4), and ask us to correct or delete it. You can use an authorised agent; we will verify both of you. We will not treat you differently for using these rights. We do not sell personal information or share it for cross-context behavioural advertising. Email support@qbod.fit with "California privacy request".
11. Children
QBod is only for adults aged 18 and over, everywhere. Sign-up asks for your birth month and year and won't let you continue if you're under 18. If we learn an account belongs to someone under 18, we delete it.
12. Security
No system is perfectly secure. Here is how we protect your data:
- Encrypted connections. The app talks to our servers only over HTTPS.
- Your records are yours alone. Database rules let each member read and change only their own health records.
- Our servers. Your data is held by Supabase on Amazon Web Services in the United States, with encryption at rest.
- Trainers see your data only after you accept them, and lose access when you disconnect.
If there is a data breach. If a breach of your information is likely to cause you serious harm, we will tell you and the regulator as the law requires (for members in Australia, that is the OAIC). If you think something is wrong, email support@qbod.fit.
13. Cookies
Our app doesn't use cookies. Our website uses the tools below.
| Tool | What it does | What it collects | Company, country |
|---|---|---|---|
| Google Analytics 4 | Counts visits and which pages are read | Cookies that recognise your browser (named _ga and _ga_…), pages viewed, approximate location from your IP address, device and browser type | Google, United States |
| Google Fonts | Loads our typeface | Your IP address and browser details, when the font downloads | Google, United States |
| Cloudflare Turnstile (on some forms) | Checks you're not a bot | A check token and your IP address | Cloudflare, United States |
Third-party services on our website, such as Google Analytics, may collect information about your browsing activity over time and across other websites.
14. Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use your health information, we tell you in the app or by email before it takes effect.
15. Contact
Privacy Officer, support@qbod.fit, subject "Privacy". QBod LLC, 539 W. Commerce St #2754, Dallas, TX 75208, USA.