Effective Date: May 8, 2026
Body Notes is operated by Guided Decisions Group LLC, doing business as Body Notes (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect information when you use the Body Notes mobile application, website, and related services (collectively, the “Service”).
By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
1. Who We Are
Body Notes is a personal wellness tracking tool designed to help you record information about your daily life, including food, sleep, stress, mood, symptoms, and other observations that matter to you. The Service is a self-management tool. It does not provide medical advice, diagnosis, or treatment, and we are not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA).
2. Information We Collect
Information You Provide Directly
- Account information, such as your name, email address, password, and date of birth
- Subscription and payment information, processed by our third-party payment processor
- Wellness tracking data you choose to log, such as food and beverages, sleep, stress, mood, symptoms, activities, medications you record, photos, voice notes, and any other entries you make
- Communications you send to us, including support requests and feedback
- Proof-of-purchase information, such as an order number or receipt, when redeeming a journal-included subscription
Information Collected Automatically
- Device information, such as device type, operating system, unique device identifiers, and mobile network information
- Usage information, such as pages or screens viewed, features used, and dates and times of access
- Log information, such as IP address, browser type, and referring URLs
- Cookies and similar technologies, as described below
Information from Third Parties
- Information from authentication providers if you sign in using a third-party account
- Information from our payment processor about subscription status and renewals
3. How We Use Your Information
We use your information to:
- Provide, operate, and improve the Service
- Create and manage your account
- Process subscription payments and renewals
- Generate summaries and reports you can review or share at your discretion
- Send you transactional messages about your account, subscription, or the Service
- Respond to your questions and provide customer support
- Send marketing communications, where permitted, with the option to unsubscribe at any time
- Detect, investigate, and prevent fraud, abuse, or security incidents
- Comply with legal obligations and enforce our Terms of Service
- Conduct research and analytics in aggregated or de-identified form
We do not sell your personal information.
4. How We Share Your Information
We share information only as described below.
Service Providers
We share information with vendors who perform services on our behalf, such as cloud hosting and application infrastructure (including Lovable, our application platform), payment processing, email delivery, customer support tools, and analytics providers. These vendors are bound by contractual obligations to protect your information and may only use it as needed to perform services for us.
At Your Direction
You control what you share. If you choose to export, email, print, or otherwise share summaries with a healthcare provider, family member, or anyone else, that sharing is your decision and your responsibility.
Legal Requirements
We may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, respond to valid legal process, protect the rights, property, or safety of Body Notes, our users, or others, or enforce our agreements.
Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, your information may be transferred as part of that transaction.
Aggregated or De-Identified Information
We may share aggregated or de-identified information that cannot reasonably be used to identify you for any lawful purpose, including analytics, research, and marketing.
5. Your Health and Wellness Information
Body Notes is a wellness tracking tool, not a medical device or healthcare service. The information you log is personal information you choose to record, and we treat it with care. Please understand:
- We are not a HIPAA-covered entity. Information you enter into the Service is not protected health information (PHI) under HIPAA.
- We do not provide medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider with questions about your health.
- You decide what to log and what to share. The Service is designed to support conversations with your care team, but we do not transmit your information to providers automatically.
6. Cookies and Tracking Technologies
We and our service providers use cookies, web beacons, and similar technologies to keep you signed in, remember your preferences, understand how the Service is used, measure performance and reliability, and support security and fraud prevention.
You can control cookies through your browser settings. Disabling cookies may affect how the Service works for you. The Service does not currently respond to Do Not Track signals.
7. Data Security
We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, and ongoing monitoring. No system is completely secure, however, and we cannot guarantee that unauthorized parties will never gain access to your information. You are responsible for keeping your account credentials confidential and notifying us promptly if you suspect unauthorized use.
8. Data Retention
We retain your information for as long as your account is active and as needed to provide the Service. After you delete your account, we may retain certain information to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. De-identified or aggregated information may be retained indefinitely.
9. Your Rights and Choices
Depending on where you live, you may have the following rights:
- Access: request a copy of the personal information we hold about you
- Correction: ask us to correct inaccurate information
- Deletion: request that we delete your information
- Portability: request a copy of your information in a portable format
- Objection or restriction: object to or restrict certain processing
- Withdrawal of consent: withdraw consent where processing is based on consent
- Non-discrimination: not be discriminated against for exercising your rights
To exercise these rights, contact us using the information at the end of this Policy. We may need to verify your identity before responding, and we will respond within the time required by applicable law.
You can also:
- Update your account information from within the app
- Unsubscribe from marketing emails using the link in each message
- Delete your account at any time from your account settings
10. State-Specific Privacy Rights
California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights regarding your personal information, including the rights described in Section 9. We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under California law.
Other U.S. State Residents
Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws may have similar rights. Contact us using the information below to exercise your rights.
Authorized Agents
You may designate an authorized agent to make a request on your behalf. We will require verification of the agent’s authority before fulfilling the request.
11. Children’s Privacy
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete the information. Users between 13 and 18 should use the Service only with the involvement of a parent or guardian.
12. International Users
Body Notes is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
13. Third-Party Links and Services
The Service may contain links to third-party websites or services we do not control. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy practices before sharing information.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email, through the Service, or by other reasonable means before the changes take effect. The Effective Date at the top of this Policy reflects the most recent revision.
15. Governing Law
This Privacy Policy is governed by the laws of the State of Missouri, without regard to its conflict of law principles. Any dispute arising out of or related to this Privacy Policy is subject to the venue and jurisdiction provisions in our Terms of Service, which provide for venue in the state and federal courts located in Cole County, Missouri.
16. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:
Guided Decisions Group LLC
Body Notes
Email: bodynotes.app@gmail.com