Privacy Policy

Last updated: 5 August 2026

This Privacy Policy explains how Absly ("Absly", "we", "us" or "our") collects, uses and protects your information when you use the Absly mobile application (the "App").

Absly is a body-scanning fitness app. That means we handle photos of your body and measurements you give us about yourself. We treat that data as sensitive, and this policy spells out exactly what happens to it. If you do not agree with this policy, please do not use the App.

1. Who is responsible for your data

Absly is the data controller for the personal data described in this policy. For any privacy question or request, contact us at support@absly.app.

2. What we collect

2.1 Information you give us

• Account details. When you create an account we collect your email address, and — depending on the sign-in method you choose — your name, phone number, or the identifier returned by Apple, Google or Facebook. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address.
• Onboarding and body profile. Information you enter to build your program, such as your age, gender, height, weight, activity level and goals.
• Scan photos. Photos of your torso that you capture with the camera to run an abs scan.
• Progress photos. Photos you optionally add after a workout to build your transformation timelapse.
• Feedback. Anything you write when you send us feedback or a feature request.

2.2 Information generated by your use of the App

• Scan results. Your Abs Score and the measurements derived from each scan.
• Training data. Completed workouts, sessions, streaks, program phase and progress history.
• Subscription status. Whether you hold an active subscription or trial, and the anonymous purchase identifiers provided by the App Store. We never see or store your payment card details.
• Technical and usage data. Device model, operating system version, app version, language, time zone, a device installation identifier, push notification token, in-app events (for example "scan completed", "workout finished") and crash reports.

2.3 Health-related data

Your scan photos, progress photos, body measurements and Abs Score describe your physical condition. Where applicable law treats this as a special category of personal data, we process it only on the basis of your explicit consent, which you give by capturing a scan or adding a progress photo. You can withdraw that consent at any time by deleting the relevant photos or your account. Absly does not read from or write to Apple Health.

3. How we use your data

We do not sell your personal data. We do not use your photos for advertising, and we do not share them with advertisers or data brokers.

4. How your photos are handled

4.1 Your photos stay on your device

• Scan photos and progress photos are saved in the App's private storage on your own device. We do not upload them to our servers for storage, they are not kept in our database, and nobody at Absly can browse them.
• They are removed when you delete them in the App, or when you delete the App. Because they are local, they are not transferred to a new device unless your device backup includes them.
• Only the numeric results of a scan — your Abs Score, definition, symmetry, leanness and the date — are saved to your account so you can track progress over time. The image itself is never part of that record.
• We do not use your photos to train AI models, ours or anyone else's, and we never share them with advertisers or data brokers.

4.2 AI analysis of your scan photo (third-party processing)

The Abs Score is computed by a third-party artificial intelligence service. This is the only case in which a photo leaves your device, and it only happens when you choose to run a scan.

• What happens. When you take a scan, the photo is resized on your device (max 512 pixels on its longest side) and sent over an encrypted connection to our server function, which forwards it to the Google Gemini API (Google Ireland Ltd. / Google LLC) for analysis.
• What is sent. Only the image and a fixed text instruction describing the scoring rubric. No name, email address, account identifier, device identifier, IP-derived location, or any other personal information is attached to the request.
• What comes back. Four numbers between 0 and 100 (definition, symmetry, leanness and the resulting Abs Score).
• Retention. We never store the image: it exists in our server function's memory only for the duration of the request, and is discarded immediately afterwards. Google processes it to serve that request; under the Gemini API terms applicable to our paid usage, Google does not use it to train or improve its models, and retains it only transiently for abuse monitoring before deleting it.
• Your consent. Before you take a scan photo, the App displays this information directly above the capture button, with a link to this policy. Taking the photo is your explicit agreement to that transfer, on the legal basis of your consent. Scanning is entirely optional — the App's workouts, program and timelapse work without it — and you can withdraw your consent at any time by simply not running further scans.

4.3 On-device analysis (nothing is transferred)

During a workout, the App can count your repetitions in real time using the camera. That analysis runs entirely on your device with Apple's Vision framework: the camera frames are processed locally, are never recorded, never saved, and never sent to us or to any third party. Only anonymous body-joint coordinates are used, in memory, to count reps. No face detection or face recognition is performed at any point.

5. Service providers

We rely on a small number of processors to run Absly. They act on our instructions and are bound by contract to protect your data:

Your scan and progress photos are never sent to our analytics or crash-reporting providers.

6. International transfers

Some of these providers are established in, or store data in, the United States. When personal data is transferred outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

7. How long we keep your data

• Scan and progress photos: kept on your device only, for as long as you keep them. We hold no copy, so there is nothing for us to delete on our side.
• Photos sent for AI analysis: not retained by us at all — discarded as soon as the analysis returns (see section 4.2).
• Account, profile, scan results and training history: kept for as long as your account exists.
• After you delete your account: your data is deleted from our live systems within 30 days. Encrypted backups are rotated and fully purged within 90 days.
• Crash and analytics data: retained for up to 12 months in pseudonymous form.
• Billing and transaction records: retained for as long as accounting law requires (generally 10 years in the EU).

8. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

Deleting your account. You can delete your account and all associated data directly in the App, under Settings → Delete my account. This is immediate and irreversible. Photos live on your device, so deleting the App (or the photos themselves in the App) removes them. You can also email us at support@absly.app and we will action any request within 30 days.

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising those rights. Absly does not sell or share personal information as those terms are defined under the CCPA/CPRA.

9. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and authenticated, and a small number of our staff can access stored account data only when strictly necessary to operate the service, investigate abuse or comply with the law — this never includes your photos, which we do not hold. Credentials stored on your device are kept in the platform's secure keychain. No system is perfectly secure, but we take reasonable and appropriate measures to protect your data and will notify you and the competent authority of a breach where the law requires it.

10. Children

Absly is not intended for children. You must be at least 16 years old (or the minimum age of digital consent in your country, whichever is higher) to create an account. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us at support@absly.app and we will delete it.

11. Permissions we ask for

• Camera — to capture the photo used for your abs scan, and to count your repetitions on-device during a workout (section 4.3).
• Photo library — to save your scan and progress photos so you can build your timelapse.
• Notifications — to send workout reminders and streak alerts.

Each permission is optional and can be revoked at any time in your device settings. Revoking the camera permission will prevent you from running new scans.

12. Changes to this policy

We may update this policy. When we make a material change, we will update the "last updated" date above and, where required, notify you in the App before the change takes effect.

13. Contact

Questions about this policy or about your data? Write to support@absly.app.