1. Overview
This policy explains what BMI Tracker ("the Service") collects, why it is collected, how long it is kept and what control you have over it. It applies to the Service only. The Adarsh Yadav website has its own privacy policy.
The Service is operated by Adarsh Yadav, an independent software developer working as a sole trader rather than an incorporated company. The guiding principle is simple: collect the minimum needed to make the product work, be explicit about it, and delete it when it is no longer needed.
Height, weight, BMI, and the optional calorie-profile fields (age, biological sex, activity level) can be sensitive personal information. All of it is processed and stored locally on your device only, is never uploaded automatically, and BMI Tracker makes no network calls of any kind — there is no server for it to reach even if it tried.
2. What is collected and why
Every category of data handled by the Service is listed below, together with its purpose and retention period.
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| BMI history | Height, weight, computed BMI value, and timestamp for each saved measurement | To track your BMI and weight over time and show trend charts | Stored locally until you delete an entry or use Reset App Data |
| Weight goal | Target weight, optional target date, and progress toward the goal | To track progress toward a personal weight goal | Stored locally until changed or deleted |
| App settings | Unit system (Metric/Imperial), color theme, appearance (Light/Dark/System) | To remember how you like the app set up | Stored locally until changed or the app is deleted |
| Notification preferences | Whether reminders are on, the scheduled time, frequency, and weekday | To schedule optional local check-in reminders | Stored locally until changed or deleted; contains no BMI, weight, or goal values itself |
| Calorie profile | Age, biological sex, and self-reported activity level | Optional — used only to estimate a daily calorie target for your weight goal, computed entirely on-device | Stored locally until changed or deleted; a separate, optional data point you're never required to enter |
| Onboarding status | A single flag recording whether onboarding has been completed | To decide whether to show the onboarding flow | Stored locally until the app is deleted |
3. Permissions the app requests
Each permission is requested in context, with an explanation, at the moment it is first needed — never in a burst at first launch. Optional permissions can be declined and the app keeps working without them.
| Permission | Platform identifier | Why | Required |
|---|---|---|---|
| Notifications | UNUserNotificationCenter | Optional — local reminders to log a new BMI/weight measurement. The notification text is a fixed, neutral message and never includes your actual BMI, weight, or goal values. | Optional |
Any permission can be revoked at any time in your device settings. Revoking a required permission stops the features that depend on it, but does not delete your account or your data.
4. What is never done
- Your data is never sold, rented or traded.
- Your content is never used to train machine learning models.
- There is no advertising in the Service and no advertising trackers are embedded.
- No data is shared with data brokers.
- No profile is built about you for any purpose beyond operating the Service.
5. Legal basis for processing
Personal information is handled in line with applicable privacy law wherever you are. Where GDPR-style law applies, processing rests on one of the following bases:
- Contract — processing needed to provide the Service you signed up for.
- Legitimate interests — keeping the Service secure, reliable and free from abuse, balanced against your rights.
- Consent — optional features such as marketing email, which you can withdraw at any time.
- Legal obligation — retaining billing records where tax or accounting law requires it.
6. Service providers
BMI Tracker does not use any third-party infrastructure, hosting or analytics providers to operate. It works entirely on your device, so there is no server for your data to pass through and no provider for it to be shared with.
7. Security
- Your data is protected by the same on-device encryption and sandboxing Apple applies to every app's local storage.
- There is no developer-operated server, so your data is never uploaded to one. Any outside connection the app makes is listed under Service providers above and uses HTTPS.
- BMI Tracker does not currently offer any in-app purchase or subscription — no payment or billing information is collected.
- If you export a backup file, its security in transit and at rest becomes your responsibility once it leaves the app.
No system is perfectly secure. If you believe you have found a security issue, email support@adarshyadav.com and it will be looked at promptly.
8. Your rights
Regardless of where you live, you can exercise all of the following:
- Access — request a copy of the data held about you.
- Correction — fix anything inaccurate.
- Deletion — remove any data you have entered, at any time, from within the app.
- Portability — export your data in a machine-readable format.
- Objection and restriction — object to or limit certain processing.
- Withdraw consent — for anything based on consent, at any time.
Most of these are self-service inside the Service. For anything else, email support@adarshyadav.com and it will be actioned within 30 days.
9. Regional privacy rights
The rights above are offered to everyone, everywhere. Some regions add specific rights or wording, set out below. Exercising any of them is free, and you will never be treated differently for doing so.
| Region | Framework | What it adds |
|---|---|---|
| European Economic Area | GDPR | Legal bases as listed above, data portability, objection to processing, and the right to lodge a complaint with your supervisory authority. |
| United Kingdom | UK GDPR & Data Protection Act 2018 | The same rights as the EEA, with complaints directed to the Information Commissioner's Office (ico.org.uk). |
| California | CCPA / CPRA | Rights to know, delete, correct and opt out of sale or sharing. No personal information is sold or shared for cross-context behavioural advertising, so there is nothing to opt out of. Sensitive information is used only to provide the Service. |
| Canada | PIPEDA | Access and correction rights, meaningful consent, and the right to complain to the Office of the Privacy Commissioner of Canada. |
| Brazil | LGPD | Confirmation of processing, access, correction, anonymisation, portability, deletion, and information about data sharing. |
If your region is not listed, the rights in the previous section still apply — email support@adarshyadav.com and your request will be handled the same way.
No authorised agent, verification fee or account requirement stands between you and these rights. Requests are verified only to the extent needed to confirm you are the person the data relates to.
10. Retention and deletion
There are no accounts and no backend, so there is nothing held on a server to retain or delete. Data you enter stays on your device until you delete it — either individually, by archiving or removing it in the app, or entirely by deleting the app. Any backup file you have exported persists wherever you chose to save it until you delete it yourself.
11. Children
The Service is not directed at children under 13. If you believe a child has provided personal data that reached us directly (for example, in a support email), email support@adarshyadav.com and it will be deleted promptly.
12. Changes to this policy
If this policy changes materially, the effective date at the top of this page is updated and the current version is always available here and inside the app. Past versions are available on request.
13. Contact
Questions, requests or complaints about privacy: support@adarshyadav.com. If you are not satisfied with the response, you can complain to the data protection authority in your country.