Privacy Policy
This policy describes how Based Body System, LLC ("Bespoke Physique," "we," "us") collects, uses, and protects your information when you use the Bespoke Physique iOS and Apple Watch apps, the Bespoke Physique web planner, and thebespokephysique.com (together, "the Service").
What we collect
Information you provide directly. Your account details (name, email address, sign-in credentials) and the data you log in the Service: body weight, blood pressure, blood sugar, meals and nutrition entries, training sessions and logged sets, recovery and readiness inputs, travel windows, personal notes, and schedules and adherence records for supplements and physician-supervised protocols.
Documents and photos you upload. DEXA scan reports, blood panel results, supplement or food label photos, and meal photos. These are processed to extract structured data (for example, turning a blood panel PDF into trended lab markers, or estimating the macronutrients of a photographed meal).
Apple Health data, with your permission. If you grant access, the app reads health data from Apple Health — such as sleep, heart-rate variability, resting and sleeping heart rate, steps, active energy, workouts, and glucose data from connected devices — and writes your morning weigh-in back to Apple Health. You control this access in iOS Settings and can revoke it at any time. Apple Health data is used only to provide the Service's features to you. It is never used for advertising, never sold, never used for data mining unrelated to the Service, and never shared with third parties except as needed to provide the Service to you with your consent.
Technical information. Basic device and usage information needed to operate the Service reliably: device type, app version, log-in events, and diagnostic and crash information.
What we do with it
We use your information to operate the Service: to display your data back to you across the web planner, iPhone, and Apple Watch; to compute your training prescriptions, energy balance, recovery scores, adherence, and trends; to generate meal plans, packing lists, and schedules; to send notifications you've enabled (such as check-in and dose reminders); to provide support; and to maintain, secure, and improve the Service.
AI processing. Some features send your data to third-party AI processing providers to do their work — for example, estimating macros from a meal photo, extracting structured markers from an uploaded DEXA or blood panel, and Signal, the intelligence layer that answers questions about your own data. These providers process your data on our behalf to deliver the feature and are not permitted to use it for their own purposes, including training their models.
What we share, and with whom
We share data only with the service providers required to run the Service — hosting and database infrastructure, food and nutrition databases used to look up items you log or scan, AI processing providers described above, payment processing (handled by our payment processor; we never see or store your full card number), and Apple (TestFlight and App Store distribution, notifications, HealthKit). Each provider receives only what its function requires.
Beyond that, we disclose information only if required by law or legal process, to protect the rights, safety, or property of you, us, or others, or as part of a business transition (in which case this policy continues to apply to your data).
We do not sell or rent personal information. We do not share it with data brokers or advertisers. There are no third-party ads or third-party analytics-for-advertising in the Service.
Retention and deletion
We keep your data for as long as your account is active, because longitudinal trends are the point of the Service. If you close your account — or ask us to — we will delete your personal data within 30 days, except for records we're legally required to keep (such as billing records) and encrypted backups that age out on a fixed schedule. To request deletion, email james@thebespokephysique.com from your account email.
Security
Your data is encrypted in transit and at rest. Access is restricted to your own authenticated account; sign-in credentials are stored using the iOS secure keychain on device. No system is perfectly secure, but the Service is built and operated on the assumption that your health data deserves financial-grade care.
Your rights
You can access and review your data in the Service at any time. You may request a copy of your data, correction of inaccurate data, or deletion of your account and data by emailing james@thebespokephysique.com. Depending on where you live, you may have additional rights under applicable privacy laws (for example, state privacy laws in the United States or the GDPR in the European Union), including the right to lodge a complaint with a supervisory authority. We honor these requests regardless of jurisdiction wherever practicable.
What this Service is not
The Service measures, organizes, and educates. It does not provide medical advice, diagnosis, or treatment. Protocol-tracking features are private logging tools for regimens prescribed and managed by your own licensed clinician. Nothing in the Service is a substitute for the judgment of a physician who knows you.
Age
The Service is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.
Changes
If we change this policy, we'll update the effective date above and, for material changes, notify you in the app or by email before the change takes effect.
Contact
Based Body System, LLC (d/b/a Bespoke Physique Protocol)
james@thebespokephysique.com