Updated: November 1, 2026
Short version, if you do not have time to read the whole document: we collect only the information you enter yourself, store it on our own server, do not sell it to anyone, and do not show advertising. Photos of blood test results and food are sent to OpenAI for analysis and are not stored by us. You can delete everything using a single button in the app.
Vladimir Zagadov, the creator of the BIOMETRIC app. Contact: sportdeephouse@gmail.com. The standalone app also supports Google or Apple sign-in; a Telegram account is not required for those sign-in methods.
Automatically from Telegram: your numeric Telegram identifier, your name and profile photo if it is publicly available, and your interface language. In the standalone app, this applies when you link your Telegram account using a one-time code. It does not apply to Google or Apple sign-in. We do not request or receive your telephone number.
When you sign in with Google or Apple: the provider account identifier, verified email if provided, and the name supplied during sign-in. We use these to create your account and let you sign in again. We do not receive your Google or Apple password.
Automatically from your device: your time zone (UTC offset only, not coordinates) — so workout and meal reminders arrive at your local time. We do not request your location.
From Apple Health / Google Health Connect, if you grant permission on your phone: steps and active-energy (calorie) data from iPhone, Apple Watch, or Google Health Connect, plus sleep duration and workouts recorded by your watch (type, duration, calories) — used only so you do not have to log activity by hand, so the calories burned in your diary are real rather than estimated, and so you and your trainer can see how you sleep. We do not request or read heart rate or any other metrics.
Information you enter yourself:
We use this data so the app can work as you expect: calculate your calorie target using your information, avoid adding exercises that cause you pain to your program, show changes in your weight and blood test results, and remember your personal records.
We do not use your data for advertising or create a profile about you for anyone else's purposes.
OpenAI — only when you choose to use an analysis feature. OpenAI may receive a food photo, a photo or text of blood test results, an equipment photo, frames from your exercise technique video, a voice message for transcription (in messages — when you or the person you are talking to tap "Text" under a voice message), and de-identified profile information such as sex, age, and weight that is needed for calculations. OpenAI's servers are located outside Russia. Under OpenAI's rules for its application programming interface (API), this data is not used to train its models. OpenAI may retain it for up to 30 days to process the request and detect abuse, and then deletes it unless the law requires it to be kept longer.
Telegram — provides us with your identifier and name and stores the photos you send, regardless of how you use the app; in the Telegram version it also processes payments (see Section 7 of the Terms of Use).
Railway — the hosting provider whose servers run the app and its database.
Your trainer — if you accept the trainer's invitation yourself (see Section 6 of the Terms of Use). Your trainer also sees your conversation with them.
No one else. We do not sell your data, provide it to advertising networks, or disclose it to third parties except where expressly required by law.
Your data is stored in a PostgreSQL database on Railway's hosting servers.
Photos from your progress log, your profile picture, and photos you attach to your own exercises are stored in the Telegram cloud. We retain only links to those photos. The photo itself arrives as a message in your chat with the bot in Telegram (or, if you have none, in the chat of the trainer who uploaded it for you), and that is where it is stored.
We do not store photos of food, gym equipment, or blood test reports at all. Each such photo is sent for AI recognition and is not kept on our side (for how long OpenAI keeps it, see Section 4) — only the result stays in the database: the foods found and their nutrition values for a meal photo, the equipment added for a gym machine photo, and the recognized values and explanation for a lab report.
Your data is stored for as long as you use the app and is deleted when you instruct us to delete it. Your complete blood test and body measurement history is stored so that you can see changes over the years. The app displays the fifteen most recent blood test entries.
Temporarily, during the launch period, the app may only be used by people aged 18 or older. We ask for the user's date of birth before saving the questionnaire. If the user is under 18, we do not create a full account and do not save medical data, photos, or questionnaire information. Family accounts, which allow access with the consent of a legal representative, are under development and temporarily disabled. The code for them has not been removed, which means this Section 7 will be restored and updated here when family accounts become available again. Existing profiles belonging to users under 18 are temporarily locked. We do not automatically delete their data. The user can delete their data directly from the lock screen, or a legal representative may submit a deletion request. The available methods are described in Section 6 above and on the separate account deletion page linked in the app and in the app stores.
The date of birth cannot be freely changed after it is first recorded. If it was entered incorrectly, it can only be corrected through a manual request submitted in the app, not by editing the field directly.
Every request sent to the server is verified by a signature — in Telegram that's Telegram's own signature, in the standalone iOS/Android app it's a key tied to your linked device. Both are equally reliable: another person cannot substitute your identifier and access your data either way. Communication takes place over an encrypted connection (HTTPS). Only the app's creator has access to the database.
No one can guarantee absolute security. If a data breach does occur, we will notify users through the bot rather than conceal it.
If this Policy changes in a material way, the app will show it to you again and ask for your consent again. The date of the latest update appears at the top of this document.