Buddy — Privacy
Buddy
Home / Privacy

Your data, and our
promises about it.

Buddy is a coach you text. To coach you well it remembers a lot — so we hold that to a high bar. Here's exactly what we collect, who touches it, and how to make it all disappear.

Last updated June 26, 2026 · Indxr AI
THE SHORT VERSION
Delete everything with one text.
Text delete my data and Buddy erases your entire history — every log, photo, memory, and message — from our database and storage. No forms, no waiting on support.
Erase my data →
We never sell your data
Not to advertisers, not to data brokers. Your weight and your meals are nobody's business but yours and your coach's.
You can leave instantly
One text wipes everything. Text "cancel" to stop billing. You're never locked in.
We collect to coach, not to profile
Everything we store has a coaching reason — your trend, your targets, your injuries. Nothing is gathered "just in case."
Card details never touch us
Payments run through Stripe. We see that you're subscribed — never your card number.
01 · WHAT WE COLLECT

What we collect

Buddy works entirely over text, so your phone number is your account. From there, we only store what you choose to send and what the coaching requires:

Your identity & setup — phone number, the name you give Buddy, your timezone (initially inferred from your number's country and area code, then confirmed by you), units, program style, and chosen coach personality.
Your metabolic profile — birthdate, sex, height, activity level, and body-fat percentage, used to compute and re-tune your nutrition targets.
What you log — weigh-ins, meals and macros, workouts (sets, reps, RPE), goals, reminders, and progress photos.
Photos & voice memos — meal photos and gym-equipment photos (read to estimate or identify, then discarded unless they're progress photos you're tracking), progress photos (stored durably so they can be compared over time), and voice memos (transcribed to text).
Your conversation & memory — your message history for continuity, plus durable "memories" the coach saves (injuries, food preferences, life context, motivation) so it doesn't ask twice.
Billing status — whether your subscription is active. Your actual card details are handled by Stripe and never stored by us.
02 · HOW WE USE IT

How we use it

We use your data to do one job: coach you. Concretely, that means we use it to

  • ✓reply to your texts, log what you send, and smooth your weigh-ins into a real trend;
  • ✓compute and periodically re-tune your calorie and macro targets, and forecast your goal date;
  • ✓send proactive check-ins, reminders, digests, and follow-ups — inside your quiet hours and capped at roughly one a day;
  • ✓process payments and keep your subscription in sync;
  • ✓keep the service secure and prevent abuse (basic per-user rate limiting).

We do not use your data to build advertising profiles, and we do not sell or rent it to anyone.

03 · WHO PROCESSES IT

Who else touches your data

To deliver Buddy we rely on a small set of trusted services. Each gets only what it needs for its job, and is bound by its own data terms.

Anthropic (Claude)
Powers the coach. Processes your message text and the photos you send to generate replies.
SendBlue / Twilio
Delivers and receives your iMessages and SMS. Handles your phone number and message content in transit.
Supabase
Stores your progress photos durably, under a per-user prefix.
Stripe
Handles subscriptions and payments. Your card details go to Stripe, never to us.
Nutritionix
Looks up nutrition facts for foods you describe in plain language.
Open Food Facts
Resolves the barcodes you scan into product nutrition.
Speech-to-text provider
Transcribes your voice memos into text the coach can read.
Railway
Hosts the application and the database where your account lives.

Some of these (food lookups, voice transcription, photo storage, payments) are optional capabilities; if a feature is turned off, its provider receives nothing.

04 · MESSAGING & YOUR CONTROLS

Messaging & your controls

By texting Buddy, you consent to receive texts back — both your replies and a limited number of proactive coaching messages. We hold proactive, unprompted messages to about one per day, always inside the quiet hours we infer or you set. You're in control:

  • →Tell Buddy to message you more or less, or to change your quiet hours, any time.
  • →Text STOP to opt out of messages; cancel to end billing.
  • →Standard carrier message and data rates may apply.
05 · RETENTION & DELETION

How long we keep it — and how to delete it

We keep your data for as long as you have an account, because the coaching depends on your history — your trend, your PRs, your memories. When you want it gone, it's gone:

Text delete my data and Buddy runs a full deletion — purging your records from the database and your photos from storage. This is irreversible; once it's done, your history can't be recovered. Cancelling your subscription stops billing but, on its own, keeps your data so you can pick up where you left off; use the deletion command when you want a clean wipe.

06 · SECURITY

How we protect it

Traffic to and from Buddy is encrypted in transit, inbound webhooks are authenticated with a secret token, and access to your data is limited to what the coaching service needs. We apply per-user rate limiting to prevent abuse. No system is perfectly secure, but we keep the moving parts few and the access tight on purpose.

07 · YOUR RIGHTS, CHILDREN & CHANGES

Your rights, kids, and changes

Your rights. You can ask to access, correct, or delete your data — the fastest path for deletion is the one-text command above. Just ask Buddy, or reach a human at the address below.

Children. Buddy is for adults. It's not intended for anyone under 18, and we don't knowingly collect data from children.

Changes. If we update this policy, we'll change the date at the top and, for anything material, give you a heads-up by text.

Questions about your privacy?

Text the coach, or email privacy@gvq.io. We'll get back to you like a human.

This policy is written in plain language to match how Buddy actually works; it isn't legal advice. Have it reviewed by counsel before you rely on it for compliance.