Privacy Policy

Last updated May 2026

Who we are

mybmi.ai (“the app”) is operated by Arrays Global LLC (“we”, “us”). This policy explains what we collect, why, and the choices you have. It applies to users worldwide, including under the EU/UK GDPR, the California CCPA/CPRA, and India’s DPDP Act 2023.

Data we collect

  • Health inputs you enter: name, age, sex, weight, height and optional body measurements (neck/waist/hip).
  • Derived metrics we compute from those inputs: BMI, BMR, TDEE, body-fat %, and targets.
  • Account data when you sign up: email address and authentication identifiers (via Supabase).
  • Approximate country, derived from your IP/region at the network edge, used only to decide regional eligibility of certain features.
  • Basic device/storage data needed to run the app (see our Cookie Policy).

We do not knowingly collect lab results, photos, or data from anyone under 18.

How your data is stored

If you use the app without an account, your data stays in your browser’s local storage on your device. If you create an account, your profile and check-ins are also synced to our database (Supabase) so you can access them across devices. Row-Level Security ensures each account can only access its own rows.

How we use your data

  • To calculate and display your health metrics and generate your personalized plan.
  • To save and sync your check-ins to your account.
  • To protect the service from abuse (bot/anti-fraud checks).
  • We do not sell your personal data.

Third parties / processors

  • Supabase — authentication and database hosting.
  • Cloudflare Turnstile — bot protection on sign-up/sign-in.
  • A geo-IP lookup — to determine approximate country for feature eligibility.
  • Where applicable (US only), a licensed partner for medical-weight-loss eligibility, which you reach only if you choose to.

Your rights

Depending on your region, you can access, correct, export, or delete your data, and withdraw consent. You can exercise these directly in the app under Account → Privacy & Data (one-tap export and account deletion), or by contacting us at privacy@mybmi.ai.

Not medical advice

The app is for informational and wellness purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider.

Contact

Arrays Global LLC · privacy@mybmi.ai