Privacy
Who we are
BodyScan is the tool at bodyscan.space. We are not a clinic. For privacy, email bodyscan@mail.grokbot.com.
The photo
To make the estimate, the photo is sent to our AI provider (Google Gemini). That processing is done by the provider and follows its own terms and policies. BodyScan does not store the photo: it never goes into our database or onto the share card; it is only held in memory during the request.
What we do store
The range, the level, the confidence note, short visual notes, optional stats (sex, age, height, weight, goal), your email if you give it, the language, the link source (site, X, TikTok, or a directory), and the payment status.
We use the email to send your result and, if you pay, your full plan. Only if you tick the optional box do we send tips and news, plus the 4-week re-scan reminder (you can also ask for just that reminder at checkout). We store your answer. If a MailerLite key is set, we add you to the BodyScan group with the link source, status and your marketing consent (bs_consent). Every email has an unsubscribe link.
Payment
If you get the full plan, Stripe handles the payment. We do not see your full card number. Stripe keeps its own payment record.
Rate limit
We keep a short counter for your network. It is a hash, not the raw address. It expires in under a day. It stops one network from burning the API budget.
Cookies
We do not set ad cookies or our own analytics cookies. Stripe may use cookies on its payment page. If we turn on Cloudflare Web Analytics, that beacon does not use a cookie.
Delete your data
Email bodyscan@mail.grokbot.com from the same address you used. We delete the scan, the lead, and the order in our database. Stripe keeps its payment record.