Overview
Transformly (“Transformly,” “we,” “us”) is an AI-powered nutrition and body-recomposition tracker. This policy applies to our mobile app and the backend services that power it. It covers the personal data we process when you create an account, scan meals, track your weight and body composition, and manage a subscription.
By using Transformly, you agree to this Privacy Policy. If you don’t agree, please don’t use the app. Terms defined in our Terms of Use have the same meaning here.
Data we collect
We collect only what we need to run Transformly. That includes:
Account & identity
- Your email address, and your name if you provide one.
- Your timezone and unit preference (metric or imperial).
- If you sign in with Apple or Google, the identifier and basic profile details (such as email) that they release to us. Transformly is passwordless — we never receive or store a password.
Health, body & goal data
- Your date of birth (used to calculate age), sex/gender, and height.
- Your current and goal weight, body-fat percentage, and lean body mass over time.
- Your activity level, lifting frequency, chosen goal, and the calorie and macro targets we generate for you.
Meals, food & progress photos
- Photos of meals you scan, the food items and portions detected, and their calories and macros.
- Meals you add or edit by text, including times and meal categories.
- Optional progress photos you add, each labeled with a date and weight.
Subscription & billing
- Your subscription status, plan, store (App Store or Google Play), trial and renewal dates, and store transaction identifiers. Payment is processed by Apple or Google — we never receive your card number or full payment details.
Device & technical
- A push-notification token, your device platform, and app version, used to deliver reminders and notifications you enable.
- Your IP address is used only momentarily, in memory, to rate-limit and protect the API against abuse. We do not store IP addresses in our database.
Health & body data (Apple Health / Health Connect)
If you choose to connect Apple Health (iOS) or Health Connect (Android), Transformly reads — read-only — your most recent weight, body-fat percentage, and lean body mass to pre-fill your weigh-ins. We never write data back to those apps.
Health and body data you provide or that we read from a connected health app is used solely to power your plan and progress inside Transformly. We never use it for advertising, never sell it, and never share it with third parties for their own purposes. You can disconnect a health app at any time in your device or app settings, and your body metrics are encrypted at rest and served only through short-lived, signed links.
How we use your data
- To provide the core service — logging meals, computing your personalized plan, and tracking weight and body-composition trends.
- To generate and adapt your calorie and protein targets, including the weekly review that retunes them from your actual data.
- To send reminders and push notifications you’ve enabled.
- To manage your subscription and unlock Pro features.
- To keep the service secure, prevent abuse, and fix bugs.
- To comply with legal obligations.
AI meal analysis
When you scan a meal photo or describe a meal in text, that image and/or text is sent to our AI provider, OpenAI, to estimate the foods and their nutrition. We send only the meal image or text and a short instruction — not your name, email, or account identifier. OpenAI returns structured nutrition data, and under OpenAI’s API terms this content is not used to train their models.
Analytics & your choices
We use Mixpanel and Firebase to understand which features are used and to improve the app. These analytics events are pseudonymous and never include your body metrics, health data, meals, or photos. Depending on where you live, analytics may be on by default with the ability to opt out, or we’ll ask for your consent first. You can also limit analytics and ad tracking through your device settings.
Your privacy rights
Wherever you live, you can access, correct, export, or delete your data. Edit your profile in the app, delete your account at any time (see Delete your account), or email us at [email protected]. We respond within the timeframe required by law.
European Economic Area & UK (GDPR)
Our legal bases for processing are: performance of our contract with you (providing the app), your consent (connecting a health app, notifications, and analytics where consent is required), our legitimate interests (security and improving the product), and legal obligations. You have the right to access, rectification, erasure, restriction, portability, and objection, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
California (CCPA/CPRA)
In the past 12 months we have collected the categories described above (identifiers, health and body information, commercial/subscription information, photos, and usage data). We do not sell your personal information and do not share it for cross-context behavioral advertising. You have the right to know, delete, and correct your information, to opt out, and to not be discriminated against for exercising these rights.
Retention & deletion
We keep your data while your account is active. When you delete your account, we permanently erase your account and all associated data — your profile and body metrics, meals, food and progress photos, weights and trends, preferences, and registered devices — through a cascading hard delete, and your photos are removed from storage.
We keep only a minimal record that the account was deleted, to prevent abuse and meet legal obligations, for up to 30 days, after which it is purged. Temporary items such as one-time sign-in codes and caches expire automatically within minutes. See Delete your account for step-by-step instructions.
Security
Transformly is passwordless, so there’s no password to leak. We use short-lived access tokens with rotating refresh tokens and reuse detection, encrypt body metrics and photos at rest, serve them through short-lived signed links, and apply least-privilege access internally. No method of transmission or storage is completely secure, but we work hard to protect your data.
Children
Transformly is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use it. We do not knowingly collect personal data from children under 16 (or under 13 in the United States). If you believe a child has provided us data, contact us and we will delete it.
International data transfers
Transformly is a global service, and your data may be processed in the United States and other countries where we or our sub-processors operate. Where required, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect your data during these transfers.
Changes to this policy
We may update this Privacy Policy from time to time. We’ll revise the “last updated” date above and, for material changes, notify you in the app or by email.
Contact us
Questions about privacy or your data? Email us at [email protected]. For general help, reach [email protected].