BodyTide Privacy Policy
Effective and last updated: October 3, 2026 · Policy version: 2026-10-03
BodyTide is operated by GoodHive LLC ("BodyTide," "we," "us"). This policy explains the personal information and consumer health data BodyTide collects, where it comes from, how we use and disclose it, how long we keep it, and the choices available to you.
BodyTide is a general-wellness and behavioral-support service, not a medical service. BodyTide is not offered as a HIPAA-compliant service and does not enter into business associate agreements for this release.
Privacy questions or requests: support@bodytide.app. Postal notices: GoodHive LLC, 1968 S. Coast Hwy #901, Laguna Beach, CA 92651.
1. Who this policy covers
- Individuals age 18 or older who use the BodyTide mobile app on their own or with a coach.
- Providers such as dietitians and coaches who use the BodyTide web workspace.
- Managed clients whose records a provider creates and maintains with the client's permission, even when that client does not have a BodyTide account.
The current release is intended for use in the United States and is not directed to people in the European Union or United Kingdom.
2. Information we collect
| Category | Examples | How it is used |
|---|---|---|
| Account and profile | Email address, display name, hashed password held by Supabase Auth, account role, provider profile and self-entered credentials | Sign-in, account support, and provider workspace access |
| Coaching profile | If you choose to work with a coach: your name, date of birth, height, goal, dietary notes, and medication and hormone context you enter for that coach | Let a connected coach see who you are and your context; the coach sees your age, and BodyTide stores the date you entered |
| Preferences and device context | Time zone, unit and display preferences, notification choices, consent records, and feature settings | Present the correct local day and remember your choices |
| Body and measurements | Weight, height, waist circumference, body-fat percentage, lean body mass, body-mass index, and other measurements you enter or import | Show your history, descriptive trends, and personal patterns |
| Eating, appetite, and nourishment | Pre- and post-meal reflections, appetite, hunger and craving check-ins, meal context, nutrition, macros, calories, fiber, sodium, sugar, water, caffeine, and related notes | Provide check-ins, history, and personal patterns |
| Sleep, stress, mood, energy, and movement | Sleep duration, stress, mood, energy, steps, active energy, exercise time, movement notes, and reflections | Provide check-ins, history, and personal patterns |
| Cycle and hormone context | Menstrual-flow dates, cycle settings, perimenopause context, and an estimated cycle phase derived from dates you provide or import | Add optional cycle context to your own experience |
| Medication context | Whether you choose to note a medication as context; BodyTide does not provide dosing or medication guidance | Tailor display context without interpreting a medication regimen |
| Progress photos | Optional photos you select or take, plus capture date and sharing state | Keep a private visual record; BodyTide does not analyze faces or create biometric identifiers |
| Notes and coaching records | Your notes, questions, reflections, shared categories, coach messages, macro targets, recommendations, weekly reviews, acknowledgements, and exports | Support your own reflection and any coaching relationship you choose |
| Imports and exports | Spreadsheet data you choose to import, device-health import records, export requests, and limited audit records | Bring your data in, prevent duplicates, and create requested exports |
| Feedback and survey responses | If you choose to answer an in-app survey or send feedback: the answers you submit, an optional name, and your account email so we can reply | Understand what people want from BodyTide, including future coaching options and pricing; responses are delivered to our support mailbox |
| Technical and optional analytics | Authentication and security records; if you opt in, allowlisted event names and limited metadata such as a feature or signal category, count, route template without client IDs, and closed crash classification; network and device metadata received in ordinary service requests | Operate, secure, troubleshoot, and improve BodyTide |
We do not collect Social Security numbers, contacts, precise geolocation, or payment-card information in the current release. We do not use progress photos for facial recognition or biometric identification.
3. Where information comes from
- From you: information you enter, photos or files you choose, your settings and consent choices, and actions you take in the app or provider workspace.
- From Apple Health or Health Connect, only when you choose to connect and sync: BodyTide reads only categories for which you grant access. On iPhone, these can include weight, height, waist circumference, body-fat percentage, lean body mass, body-mass index, sleep analysis, dietary protein, carbohydrates, fat, fiber, energy, sodium, sugar, water, caffeine, steps, active energy, and exercise time. On Android with Health Connect, these can include weight, height, body-fat percentage, lean body mass, nutrition, hydration, steps, active energy, exercise sessions, and sleep sessions. Menstrual-flow access is requested separately on both platforms and stays off unless you enable it. BodyTide does not write to Apple Health or Health Connect.
- From a provider: information a provider enters about a managed client after confirming they have permission, coaching records a provider creates for a connected client, and the email address and name of a person the provider invites to connect. An invitation email goes only to the address the provider entered; we keep the address to send that message and to link the connection if the person accepts.
- Automatically from the service: limited authentication, security, request, device, and—only after an opt-in—analytics information described above.
Health import is optional and user-initiated. You can use BodyTide without granting Apple Health access and can enter information manually.
4. How we use information
- Provide your private account, check-ins, notes, history, exports, and descriptive personal patterns.
- Store your information so it remains available across sessions and devices.
- Import the device-health categories and date window you choose.
- Let you connect with a coach and disclose only the categories you select.
- Let a connected coach create guidance, notes, messages, or reviews that you may use, skip, or revisit.
- Send account confirmation, password reset, connection, security, and service messages, including an email to a connected coach when you send them a message or pin a question, and an email to you when a coach asks to connect.
- Protect accounts, prevent abuse, investigate failures, and comply with law.
- After a separate opt-in, measure aggregate product use and reliability through allowlisted analytics events.
Your personal pattern model is computed on your device from your own data. Current shared-model work uses first-principles general patterns and aggregate counts; BodyTide does not use one person's identifiable health data to train a model for other people. Before any future individual-level model-development program, we will describe the specific program, update this policy, and obtain separate consent where required.
5. How information is disclosed
Coaches and providers you choose
Your account starts private. A coach receives no access unless you accept a connection and choose categories to share. Database rules restrict the coach to those categories and prevent the coach from changing your logged signals. You can turn off one category or end the connection at any time; that stops future access immediately. Coaching records the coach previously authored remain part of the applicable account history until deleted.
Apart from the categories you share, every coach connected to you can see two settings, so they can coach you with care: whether Calmer mode is on (never your answers to the wellbeing questions behind it), and whether you chose to see your weight as trend words or as numbers. If you share your weight, your coach sees your weigh-ins as numbers even when your own view shows trend words. When you have more than one coach, the coach you choose as lead sets your plan and the others can read it; each coach you are connected to can see the names of your other coaches.
Providers register on their own after confirming an email address and accepting provider terms. BodyTide does not verify provider licenses or credentials. Provider profile labels and credentials may be self-entered; unless BodyTide explicitly says a provider has been verified, you should not treat a displayed credential as an independent verification by BodyTide.
Service providers
| Service provider | What it does | Information involved |
|---|---|---|
| Supabase | Authentication, United States database, storage, and server functions | Account data, settings, health and coaching records, progress photos, and operational records needed to provide the service |
| PostHog (EU cloud) | Optional product analytics and reliability | Anonymous event names and allowlisted metadata only after opt-in; no measurements, imported Health values, notes, messages, photos, or free-text answers |
| Resend | Transactional and internal email | Recipient email address, message content needed for the requested service email or for delivering your survey or feedback response to our support mailbox, and delivery metadata |
| Cloudflare | Hosts and delivers the public site and provider web application | Web request and security metadata; public static assets do not contain stored health records |
| Expo | Delivers signed mobile application updates | App, device, network, and update-request metadata; no BodyTide health-record payloads are sent for update delivery |
We authorize these providers to process information only to supply their services to BodyTide and require protections consistent with this policy and applicable law. We do not authorize them to use BodyTide health data for their own advertising.
Other disclosures
We may disclose information when reasonably necessary to comply with law, protect a person or the service, investigate fraud or security incidents, or complete a merger, acquisition, financing, reorganization, or sale in which the recipient assumes the obligations in this policy. We have no affiliates that independently receive consumer health data in the current release.
6. No sale, advertising, or cross-app tracking
We do not sell personal information or consumer health data. We do not share personal information for cross-context behavioral advertising, use health data to target advertising, or disclose health data to data brokers. BodyTide does not use advertising identifiers and does not track you across other companies' apps or websites.
Because BodyTide does not perform cross-site behavioral tracking, browser "Do Not Track" signals do not change our practices. If that standard or our practices change, we will update this section.
Cookies and local storage. The provider web workspace uses browser local storage for your signed-in session and to remember your analytics choice. It sets no advertising cookies. If you opt in to analytics, PostHog stores a small identifier in your browser to keep its events consistent; declining or turning analytics off stops that. The mobile app stores your session and settings on your device. Clearing browser or app storage signs you out.
7. Analytics and diagnostics choices
Analytics is off by default. If you opt in, mobile analytics uses a fixed anonymous identifier rather than your account ID, and provider analytics does not create person profiles. Events may include a feature or category name and bounded counts, but never measurements, notes, messages, photos, imported Health values, URLs containing client IDs, or other free text. Crash events contain only an allowlisted support code, broad failure type, location class, and whether the failure was fatal.
You can turn analytics off at any time in Settings. Turning it off stops future collection. Because analytics records are anonymous and are not keyed to your account, BodyTide may not be able to locate a past anonymous event in response to an account-deletion request.
8. Retention and deletion
We keep account, health, coaching, and photo records while the applicable account or managed-client record is active and as needed to provide the service. We keep limited security, consent, import/export, and email-delivery records as needed for integrity, support, legal obligations, and dispute handling. Anonymous analytics is kept only for product and reliability analysis under the configured service retention settings and may be aggregated.
An individual can export data or start account deletion from Settings → Privacy & data. The in-app export contains the signals you logged or imported. To receive a copy of other information we hold about you, such as your profile, coaching records, or consent records, email support@bodytide.app. When deletion completes, BodyTide removes the authentication account, live database records, and stored progress photos associated with the account. Deleted data may remain temporarily in encrypted service-provider backups until those backups expire through their ordinary rotation. Backups are used only for disaster recovery or security remediation, not to restore a deleted account to active use.
A provider can remove a provider-managed client record. A managed client can also request access, correction, or deletion by emailing support@bodytide.app; we will coordinate with the provider and respond as applicable law requires. Legal holds or other legal obligations may require us to preserve limited information for the required period.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; withdraw consent; opt out of sale, targeted advertising, or certain profiling; restrict certain uses; and appeal a denied request without discrimination.
You can use in-app controls to update profile information, export data, stop analytics, change coach-sharing categories, end a coaching connection, disconnect future Health imports, or delete your account. Revoking Apple Health permission in iOS Settings stops future reads but does not automatically delete information already imported into your BodyTide account; delete those BodyTide records or the account separately.
To make a request or appeal a decision, email support@bodytide.app. We may take reasonable steps to verify your identity and will respond within the timeframe required by applicable law.
10. Consumer Health Data Privacy
This section is BodyTide's Consumer Health Data Privacy Policy under the Washington My Health My Data Act and comparable consumer-health-data laws.
- Consumer health data collected: the body, measurement, eating, appetite, nutrition, sleep, stress, mood, energy, movement, cycle, hormone, medication-context, progress-photo, coaching-profile (including date of birth, height, goal, and dietary notes), and derived-pattern categories described in Section 2.
- Sources: you, Apple Health or Health Connect when you direct an import, and a provider who is authorized to create or maintain a managed-client record, as described in Section 3.
- Purposes: providing the service, preserving your history, showing descriptive personal patterns, enabling the sharing you request, securing the service, and complying with law, as described in Section 4.
- Consumer health data disclosed: Supabase processes the health records and photos needed to provide BodyTide. A connected coach receives only the categories you select, plus whether Calmer mode is on and whether you see weight as trend words or numbers (Section 5). No health measurements, imported Health values, notes, messages, photos, or free-text answers go to PostHog; opted-in feature/category events can reveal which parts of BodyTide were used. Resend, Cloudflare, and Expo do not receive BodyTide health-record payloads for their listed services.
- Third parties and affiliates: the service providers are listed in Section 5. We have no affiliates with independent access to consumer health data. A coach you select is the other possible recipient.
- Rights: use the controls or contact method in Section 9 to access, correct, delete, obtain a copy, withdraw consent, or appeal. Turning off a shared category or ending a coaching connection stops the coach's future access immediately.
- No sale or geofencing: we do not sell consumer health data and do not use geofences around health-care facilities. BodyTide does not collect precise location.
Collection consent and coach-sharing consent are separate. A person chooses health-data collection during onboarding, chooses analytics separately, and chooses each coach-sharing category separately. We will not collect, use, or disclose new categories of consumer health data or use existing data for a materially new purpose without updating this policy and obtaining consent where required.
11. California privacy disclosures
California residents may exercise the rights described in Section 9. We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to third parties for their own direct marketing. Health information is treated as confidential and disclosed only as described in this policy or at your direction. Health information and other sensitive personal information is used only to provide the service you request, to secure it, and for the other purposes California law permits without a right to limit; BodyTide therefore does not offer a separate "Limit the Use of My Sensitive Personal Information" control. A California resident may also email support@bodytide.app regarding California's "Shine the Light" law.
12. Security and breach response
We use transport encryption, service-provider encryption at rest, authenticated access, database row-level security, private storage, consent-scoped provider access, and server-side privileged operations. Access to production systems is limited to people who need it. No system is perfectly secure.
If an incident affects identifiable health information, we will investigate and provide notices required by applicable law, including the FTC Health Breach Notification Rule where it applies.
13. Children
BodyTide is for adults age 18 and older. We do not knowingly permit accounts for or collect personal information from anyone under 18. Contact us if you believe a minor has provided information.
14. Changes to this policy
We may update this policy as the service or law changes. We will change the date and policy version above. We will provide an in-app or email notice for material changes and obtain renewed consent where applicable consumer-health-data law requires it.
15. Contact
GoodHive LLC · 1968 S. Coast Hwy #901, Laguna Beach, CA 92651 · support@bodytide.app