Privacy Policy
Last updated: September 2026
1. Who we are
The Body Swap ("we", "us", "our") operates thebodyswap.com and provides online fitness coaching and nutrition programmes. We are the data controller for the personal data described in this policy.
2. What we collect
- Account details: name, email address and/or phone number, and sign-in credentials.
- Health and fitness metrics you choose to enter: height, weight, age, gender, activity level, goals, sleep, food logs, progress photos, and workout logs.
- Communication preferences, such as your marketing opt-in and preferred contact method.
- Payment status information (payments are processed by Stripe; we never see or store your full card details).
3. How we use it
- To provide your account, programmes, targets, and coaching feedback.
- To personalise calorie, protein, water, and training recommendations.
- To manage rewards, vouchers, and programme access.
- To send you exclusive discounts and updates where you have opted in — you can opt out at any time by contacting us.
4. Legal basis (UK GDPR)
We process your data to perform our contract with you (providing the programmes you sign up for), based on your consent (marketing messages and optional progress photos), and for our legitimate interests (improving and securing the service). Health-related data you enter is processed with your explicit consent, which you can withdraw by deleting entries or your account.
5. Who we share it with
We use trusted service providers to run the service, including cloud hosting and database infrastructure and Stripe for payments. These providers process data only on our instructions. We do not sell your personal data.
6. Retention and security
We keep your data while your account is active and for a reasonable period afterwards to meet legal and accounting obligations. Access to your data is restricted and protected using industry-standard security controls.
7. Your rights
You have the right to access, correct, export, or delete your personal data, and to withdraw consent or object to certain processing. To exercise any of these rights, contact us through the website. You also have the right to complain to the UK Information Commissioner's Office (ICO).
8. Cookies
We use essential cookies and local storage only where needed to keep you signed in and make the app function. We do not use third-party advertising cookies.
9. Changes
We may update this policy from time to time. The latest version will always be on this page, and significant changes will be flagged when you next sign in.