Privacy architecture
Your health data stays with you.
BodyReserve is designed around read-only Apple Health access and on-device calculation, without requiring an account or backend health-data upload for the core experience.
The BodyReserve app
Eight clear privacy principles.
- 01
Read-only Apple Health access
BodyReserve requests read access only. It does not create, change or delete Apple Health samples, and permission can be changed or revoked through Apple’s controls.
- 02
On-device calculation
BodyReserve is designed to calculate its wellness estimates on your devices without a backend health-data upload.
- 03
No account for the core experience
The core BodyReserve experience is designed to work without creating or signing in to an account.
- 04
No advertising, health-data sale or tracking
BodyReserve includes no advertising, remote analytics, tracking, or sale of health information.
- 05
User-controlled permissions
Apple Health permission remains under your control. Partial or revoked access can reduce confidence, pause calibration or make an estimate unavailable without turning missing evidence into zero.
- 06
Local derived data and deletion
BodyReserve keeps a bounded, protected cache of its derived results on the device. Resetting BodyReserve removes that derived cache; it does not change or delete the original information in Apple Health.
- 07
Purchase validation and voluntary support
App Store purchase validation and an email you choose to send to support are separate from health-data processing. Support cannot remotely inspect your Apple Health information.
- 08
Ongoing privacy review
This privacy information is reviewed whenever the app, website or supporting services change.
This website
A marketing site that does not watch you back.
This marketing website uses no analytics, tracking pixels, advertising, user accounts or persistent referral identifiers. Its only form is the first-party beta access request described below.
- No analytics or tracking pixels
- No BodyReserve analytics cookies or browser storage
- No accounts or newsletter-delivery system
- One purpose-limited beta request form for testing applications
- No third-party fonts or advertising
Public beta requests
Beta request privacy notice
Ben Mackay, trading as BodyReserve, is the controller for beta-request information and is based in the United Kingdom.
What the form collects
The form collects your email address, your selected Apple Watch and usage answers, your separate marketing choice, a referral category and a versioned acknowledgment of this notice. No Apple Health values, health information or medical information are collected.
The required checkbox records that you have read the notice and understand the expected beta contact. It is not consent for beta administration and it is not marketing consent.
Why the information is used
- Assess, select, contact and administer potential beta participants.
- Use Turnstile and API safeguards to reduce automated abuse and protect the request service.
- Record optional product and launch marketing consent separately. BodyReserve will not use that choice for marketing until an unsubscribe and suppression process is operational.
- Respond to verified statutory data-rights requests.
Lawful bases
- Legitimate interests for beta assessment, selection, contact and administration.
- Legitimate interests for Turnstile, API security and abuse prevention.
- Consent for optional product and launch marketing.
- Legal obligation when handling statutory data-rights requests.
How selection works
No solely automated decision determines beta access. Apple Watch and usage selections help BodyReserve form a useful testing cohort, and requesting access does not guarantee selection.
Service providers and international transfers
- Cloudflare provides website hosting and Email Routing, runs the Worker, stores beta records in Cloudflare D1, and provides Cloudflare Turnstile for abuse prevention.
- Google provides the mailbox that receives routed public BodyReserve email. The private mailbox address is not published.
The D1 database reports a Western Europe (WEUR) location hint, has no configured jurisdiction restriction and has read replication disabled. BodyReserve does not claim that beta-request data is stored only in the UK or EU.
Cloudflare and Google operate internationally. Where a restricted transfer applies, their applicable contractual and legal safeguards are used, including standard contractual clauses and the UK addendum where applicable.
How long records are kept
- Inactive or unselected requests: 12 months after the last beta-related contact.
- Selected testers: for beta participation and six months afterward.
- Verified erasure requests: deleted within 30 days, subject to any documented lawful exception.
- Marketing suppression: not operational. Product or launch marketing will not begin until a separate minimum suppression process is implemented and approved.
Your rights
You may ask for access, rectification, erasure, restriction, objection and portability where applicable, and you may withdraw optional marketing consent. Send requests to privacy@bodyreserve.app. They are normally answered within one month.
You also have the right to complain to the UK Information Commissioner’s Office about how your personal information is handled.
No automated confirmation email or automatic beta invitation is sent. Beta records are not sold or used for advertising.
Privacy, deletion, withdrawal and rights requests: privacy@bodyreserve.app.
Wellness and safety
Sometimes the honest result is no result.
BodyReserve is intended for general wellness insight. Its estimates are not medical advice and do not diagnose illness, anxiety, burnout or another condition. Immature baselines, missing required inputs, stale samples, unsuitable movement or workout context, incompatible sources and implausible dates can all justify withholding an estimate.
Read the wellness answers