Last updated: November 10, 2026
BioPrompt reads Apple Health data only with your HealthKit permission. Your account can include your Sign in with Apple identifier, name or relay email, profile preferences, and content you add, such as meals, workouts, medication records, lab results, and photos. When you subscribe, Apple sends us your subscription's status (plan, price, country, free trial, renewals, cancellation, billing problems and refunds), tied to your account by a purchase token derived from your BioPrompt account ID (not your Apple ID). We use it to unlock AI features and, only as totals, to count subscribers, trials and cancellations. We use no advertising identifiers, analytics SDKs or third-party trackers. After you sign in, the app asks Apple once whether this install came from an Apple Ads ad (Apple's AdServices framework, which uses no advertising identifier and needs no tracking permission). We keep only Apple's yes or no and, if yes, the ad campaign, ad group and search keyword IDs with your account, to work out what each ad campaign costs per subscriber, and delete them with your account.
Before a category of AI processing is used, BioPrompt asks permission to send its described data through Google Cloud and Firebase to OpenAI. For users 18 and older outside the European Economic Area, the UK and Switzerland, typed food descriptions and nutrient completion (not photos) can also be sent to Google Gemini when OpenAI's free capacity is used up. Google may use content sent to its free Gemini service to improve Google's products, and people may review it. Depending on the feature, this can include messages and conversation history, selected health context, lab document text or images, food photos, recipe text you import (read from photos on your device, pasted, or from a web page you enter), workout media, gym equipment photos, or body-composition reports. Uploaded documents and images may contain identifying information. Health data is not automatically anonymous.
Review, enable, or revoke each category in Profile → AI Data Sharing. Additional chat health context is off by default and can be enabled separately. Declining AI sharing leaves tracking features available. Revoking sharing stops future AI requests and cancels pending requests; information already sent cannot be recalled. Earlier conversation messages can still contain previously shared health information.
If you turn on “Help improve machine recognition” in Scan a Machine, the equipment photos you confirm are stored in Google Firebase with your account to train BioPrompt's own on-device equipment recognizer. Faces are pixelated on your device before upload and photo metadata such as location is removed. These stored copies are not sent to OpenAI or Google Gemini. Turning the setting off, or deleting your account, deletes them.
The on-device form-check prototype processes exercise video and estimated body joints locally, using an included Google BlazePose model through Apple Core ML. This form-check path makes no network requests and sends no video, joint estimates or model usage metrics to Google, Firebase, OpenAI, or another model provider. Temporary form-check copies are removed when the screen is closed; an imported original remains in Photos. Recording does not capture audio.
Exercise review can show external instructional links from ACE, NSCA, NASM, Mayo Clinic, PureGym, and YouTube. These sites open only when you tap a link and may receive normal browser connection information under their own policies. BioPrompt does not append your video, joint measurements, account ID, or health data to these links. No embedded player or remote teaching thumbnail is loaded automatically.
BioPrompt stores tracking information on your device. Account-backed features also use Google Firebase and Google Cloud for authentication, synchronization, media uploads, conversation history, and operational records. Cloud records can be associated with your account identifier. AI processing is not limited to your device. Connections to these services use HTTPS.
Information is used to provide your requested tracking, synchronization, AI, community, and support features. Community content is shared according to the actions and sharing choices you make, and coaching data only with coaches you link. Operational information such as app errors and AI token usage helps operate the service. If you send a support report, it can include your account ID, device identifier and technical details; you can choose whether to attach recent diagnostic logs. We do not sell personal health data or use it for advertising.
Google Firebase and Google Cloud provide account, storage, synchronization, and backend services. OpenAI and Google (Gemini) provide the AI processing described in the feature permission requests. Food searches can use USDA FoodData Central and Open Food Facts, which receive the search text or barcode. Apple manages HealthKit permissions and App Store payments. Provider policies also apply to information they process.
Local tracking and account-backed records are kept to provide the features you use. You can remove content using available app controls and request account deletion in Profile. If deletion fails, the app reports the failure so you can retry or contact bioprompt.app@gmail.com. Turning off AI sharing alone does not delete existing records. Apple manages subscription records; deleting your BioPrompt account does not cancel an App Store subscription.
Public Community text is filtered before publication. You can report content and block or unblock accounts from Community. Reports, their account identifiers and any explanation are stored privately for BioPrompt support; blocked-account settings are private. Support can hide reported public content without deleting your private workout history. Community text is not automatically sent to OpenAI for moderation.
If you link a coach under More → Coaching, the categories you turn on (for example your food log, workouts, body measurements, supplements or lab results) are copied to our servers for that coach to see in the BioPrompt coach portal. Nothing is shared until you turn a category on, and medical categories are marked before you share them. Your coach sees the name you chose, not your email or Apple ID. Every time your coach views your data or sends a change is listed for you under Coach activity. When you turn a category off or unlink, it is deleted from our servers and your coach's view straight away; your change history with that coach is kept for 30 days so you can review it, then deleted. A record of who linked, unlinked, viewed and sent changes, without the health details themselves, is kept for up to 3 years to investigate complaints and misuse. Coaches are independent and may keep their own notes outside BioPrompt under their own privacy practices. Coaching data is not sent to an AI provider unless you turn on "Let my coach use AI on what I share" for that coach, which is off by default. While it is on, each question your coach asks BioPrompt's AI about you sends the categories you share with that coach (not your name) to OpenAI, and is listed under Coach activity. Your coach's AI conversations about you are saved for the coach and deleted when you turn AI help or a category off, or unlink. Coaches sign in to the portal with Apple or Google through Firebase Authentication; for coaches we keep their name, business, contact email and, for prescribers, the license details we check.
Coach Lab: approved coaches can use an AI chat in the coach portal. What the coach types is sent to OpenAI to produce the answer, together with BioPrompt's instructions. It does not include any data from client accounts, except when the coach asks about a client who turned AI help on for that coach (see above). Clients cannot use it. Conversations are saved to the coach's account so the coach can reopen them, until the coach deletes them. We also keep a record of the coach's account ID, the date and the question for safety and misuse review. Both are deleted with the coach account.
Manage HealthKit access in Apple Health or iOS Settings. Manage AI permissions in Profile → AI Data Sharing. Review shared content before uploading it, especially documents containing names or other private details. For access, correction, deletion, or privacy questions, contact bioprompt.app@gmail.com.
We collect identifiers (Sign in with Apple identifier, name or relay email, device push token), health and fitness information you add or allow from Apple Health, photos and documents you upload, community content, support messages, app diagnostics, and, for installs from Apple Ads, the ad campaign, ad group and keyword IDs. These can be received by Google (Firebase, Google Cloud and Gemini), OpenAI, USDA FoodData Central, Open Food Facts and Apple, and by any coach you choose to link (only the categories you turn on), only for the purposes described above. The support form on our website sends your name, email and message to Firebase.
BioPrompt contains no advertising, analytics or session-recording software. We do not track you across other companies' apps or websites, and we do not allow third parties to collect information about your activity over time or across sites. Because we do not do this kind of tracking, we do not change our behavior in response to browser Do Not Track signals. Our website uses no advertising or analytics cookies.
Information about your health, fitness, nutrition, medications, lab results, sleep and mood is consumer health data. We collect it only to provide the features you use, share it only with the providers named above to deliver those features and with coaches you link (only the categories you choose), never sell it, and never use it for advertising. You can see, delete and stop sharing it as described in this policy, and you can ask us for a list of the providers that received it by emailing bioprompt.app@gmail.com.
You can review and change your information in the app's Profile, delete your account in Profile, and email bioprompt.app@gmail.com to ask for a copy of your information, a correction, or deletion. We do not ask for identification beyond confirming you control the account. If you are in the European Economic Area, the UK or Switzerland: BioPrompt is the controller of your information; we process it to provide the service you request (contract) and, for AI processing and health information, on the basis of your consent, which you can withdraw at any time in Profile → AI Data Sharing. Your information is processed in the United States by the providers named above. You can ask to access, correct, delete, restrict, port or object to processing of your information, and you can complain to your local data protection authority.
When we change this policy we update the date at the top of this page and the copy inside the app. If a change materially affects how your information is shared, we will tell you in the app before it takes effect.
BioPrompt is not intended for children under 13. AI explanations are educational and can be incorrect. They do not replace a qualified healthcare professional or provide a medical diagnosis or treatment plan.