Version 2026-08 — effective August 2, 2026.
1. Data controller
Personal-data contact: support@bodyrelay.com.
2. Data processed and required fields
- Account: email address, hashed password, display name, and preferences.
- Compliance: accepted versions and timestamps for the Terms and Privacy Policy, synchronization consent, and withdrawal.
- Providers: technical identifiers, connection status, and encrypted tokens.
- Selected measurements: weight, body composition, and other values made available by Withings and compatible with Garmin.
- Operations: synchronization status and technical history, transactional emails, IP address, session, security logs, and support exchanges.
Data identified as necessary to create an account and provide the service is required; without it, BodyRelay cannot open the account or perform synchronization. Display name and optional communications remain optional.
3. Purposes, legal bases, and sensitive data
- Create and secure the account, perform requested synchronizations, and provide support: performance of a contract.
- Read, queue, and transmit body measurements that may constitute health data: explicit consent under Article 9 GDPR, withdrawable at any time.
- Prevent abuse, maintain security, diagnose incidents, and produce aggregated technical statistics: BodyRelay’s legitimate interests, subject to users’ rights and freedoms.
- Retain information required by law or respond to a competent authority: applicable legal obligation.
- Send non-essential communications when offered: specific consent.
BodyRelay performs no profiling or decision producing legal or similarly significant effects based solely on automated processing.
4. Sources, recipients, and roles
Data comes from the user, Withings, and Garmin. It is accessible only to authorized BodyRelay personnel and, as necessary, contractually governed hosting, email, backup, and monitoring providers. Selected measurements are sent to Garmin on the user’s instructions. Withings and Garmin also process data for their own services under their own policies. Data is not sold, rented, or used for advertising.
5. Retention periods
- Measurements in transit: up to 30 days before processing, then 7 days after successful delivery.
- Sessions and email tokens: deleted on expiry and no later than 7 days after revocation or use.
- OAuth states: deleted on expiry and no later than 1 day after use.
- Account data and connections: for the lifetime of the account, then active data is deleted on request.
- Security logs: only as long as required for security and evidence, no more than 12 months unless an incident or legal obligation applies.
- Encrypted backups: rotation of 7 daily, 4 weekly, and 6 monthly backups.
6. Deletion and backups
Account deletion immediately removes active data and revokes connections where technically available. Residual copies disappear according to backup rotation and are not restored to production except during incident recovery. An external deletion-request register is used to reapply deletions after a restore.
7. Security, hosting in France, and transfers
Data hosted by BodyRelay and technical processing under its direct control take place in France on infrastructure supplied by OVH SAS, a French host whose data centers used by BodyRelay are located in France. Communications are encrypted in transit, passwords are hashed, and provider tokens are encrypted at rest. Access is restricted and application logs exclude measurements.
When users connect Withings or Garmin, data required for synchronization is also sent to that provider. These third parties process data under their own policies and may perform some processing outside France or the European Economic Area. BodyRelay documents the relevant parties, regions, countries, and safeguards, such as adequacy decisions or standard contractual clauses.
8. Your rights
You may request access, correction, deletion, restriction, objection, and portability, and withdraw consent without retroactive effect. Use the export and deletion tools in your account or write to support@bodyrelay.com. A response is generally provided within one month, subject to extensions and identity checks allowed by law. You may also define instructions concerning your data after death and complain to the CNIL if you believe your rights have not been respected.
9. Minors
The service is restricted to adults. BodyRelay does not knowingly seek to collect a minor’s data; reports may be sent to the personal-data contact.
10. Cookies
BodyRelay uses only technical session and CSRF-protection cookies strictly necessary for authentication and service security. No advertising or audience-measurement cookies are currently placed. If that changes, information and, where required, consent will be implemented before placement.
11. Updates
The applicable version and date appear on this page. New acceptance is requested for material changes.