Privacy Policy
Your data is yours. Here's exactly what we collect and why.
1. INFORMATION WE COLLECT
Account Data
Name, email, and profile picture when you sign in
Training Data
Workouts, exercises, sets, reps, weights, personal records, body measurements, and goals. This is your own gym log, the foundation of your results.
Health & Wearable Data
With your permission, health metrics from Apple Health, Health Connect, or a connected provider, such as heart-rate variability, resting heart rate, sleep, steps, active energy, workouts, and body measurements. Bion may retain selected normalized history and bounded sleep or workout series privately in Firebase. See the Health & Wearable Data section below.
Dose Plans & Logs
Medication, vitamin, and supplement plans you save, plus the doses you log. A log records what you entered and does not prove a dose was taken or that an unlogged dose was missed.
Plans & Context
Goals, plan settings, reviews, notes, and context you add to help explain your progress
Lab Results
If you choose to upload lab or bloodwork documents, the document and values Bion reads from it to show your results and trends
Location Data
Approximate location, with your permission, for location-aware features and offers you choose
Device Data
Device type, OS version, app version, and crash or performance diagnostics used to improve stability and speed
Usage Data
Features used, session duration, and navigation patterns
Delivery Address
Street, city, postal code, and country when you request delivery, with any saved address kept for future deliveries
Offer Interaction Data
Impressions, taps, detail views, purchases, bookings, and redemptions, used to provide and improve offers and report performance to participating partners
Subscription & Purchase Data
Subscription, purchase, entitlement, and payment-status information used to provide paid features and programmes
2. HOW WE USE YOUR DATA
Provide the Service
Enable health connections, dose and workout logging, goal progress, plan reviews, sharing, and other features you choose
Explain Progress
Organize your score, measurements, training, health context, and plan history into understandable trends and reviews
Personalization
Tailor insights, recommendations, and next actions to your goals
Research & Aggregate Insight
Produce aggregate or de-identified statistics for product improvement, research, market understanding, and approved commercial collaborations, subject to the safeguards in Data Sharing
Location-Aware Features
Show relevant services or offers when you choose to share approximate location
Improvement
Analyze usage patterns to improve features and fix bugs
Communication
Send important updates and respond to support
3. HEALTH & WEARABLE DATA
How Access Works
Bion accesses only the health data types and connected providers you approve. Available access can differ by device, provider, and feature, and you can change platform permissions in device settings.
Private Bion Copy
Bion may store selected normalized history and bounded sleep/workout series privately in Firebase for your signed-in account. Vendor scores retain their vendor, type, period, original scale, source, and version attribution. We exclude all-day continuous heart-rate collection, PPG waveforms, ECG voltage, and routes.
High-Resolution Retention
High-resolution series blobs expire after 12 months. Retained normalized history, vendor scores, and session or minute summaries remain under the account policy after those blobs expire.
Your Control
You can export or delete the Bion copy of your health data. Revoking Apple Health or Health Connect access is separate: it stops platform access and does not itself delete the Bion copy. You can manage platform access in your device settings.
4. GOOGLE CALENDAR DATA
Optional Access
Google Calendar is optional. Bion connects only after you approve Google's permissions. Bion uses free/busy blocks, not the titles or contents of existing events, to show availability.
Scheduling & Storage
Bion can create, update, or delete Bion booking events, including the time, booking participants, and a Google Meet link. An encrypted OAuth token, Google event identifier, and necessary booking details are stored so sync can continue.
Disconnect & Limited Use
Disconnecting deletes Bion's OAuth token and stops future access; existing Calendar events remain until deleted. Bion uses Google Calendar data only for visible scheduling features. Bion's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. DATA SHARING
Care & Programmes
A feature may let you share selected information with clinics, coaches, or programme operators for care, coaching, programme delivery, or progress review. Before user-level information is shared, Bion provides a separate, clear choice that identifies the recipient, purpose, and data involved, unless disclosure is otherwise permitted by law.
Aggregate & Commercial Insight
Bion may produce aggregate or de-identified statistics, including patterns in logged doses or frequency, for research, product improvement, market understanding, or commercial partners. We use group-size, data-minimisation, contractual, and technical safeguards appropriate to re-identification risk. If information remains personal or reasonably linkable, we use or disclose it only for a notified purpose and with the consent or other legal basis required by law.
Service Providers
Trusted service providers such as cloud, payment, analytics, support, and AI providers process only the information needed for their role under contractual and security requirements
Legal Requirements
We may share data when required by law or legal process
Offers & Fulfilment
A fulfilment partner receives only the redemption, booking, contact, delivery, or other information needed to provide the offer or service you requested, unless a separate sharing choice says otherwise.
6. LOCATION DATA
Purpose
We use approximate location for location-aware features or offers you choose
Control
Location access is optional and can be disabled in your device settings at any time
Precision
We only use city or region-level location, never precise GPS coordinates
Storage
Location data is not stored long-term unless a feature clearly says otherwise
7. AI FEATURES & DATA
On-Device Technology
For some features, Bion processes data locally on your device using Apple Foundation Models (iOS) or Google Gemini Nano (Android). This data never leaves your device.
Cloud AI Processing
To generate personalized insights and power the chat, we may share your fitness profile, goals, uploaded photos, and text descriptions with the Google Gemini Cloud API.
Data Protection
We require third-party AI providers such as Google to protect your data to the same standard set out in this policy. We do not use your personal data to train cloud AI models.
Your rights
Access
Correct
Delete
Export
Exercise these rights by contacting privacy@getbion.com
SECURITY
We use industry-standard encryption (TLS/SSL), secure cloud infrastructure, and access controls. No system is 100% secure, but we'll notify you of any data breach as required by law.
DATA RETENTION
We keep your data while your account is active. After deletion, we remove or anonymize it within 90 days unless legally required to retain it.
CHILDREN'S PRIVACY
Bion is not for children under 13. We don't knowingly collect data from minors. If we discover such data, we delete it promptly.
CHANGES
We may update this policy. Material changes will be posted here with an updated date. Continued use means you accept the new terms.