Privacy Policy

Last updated: 29 October 2026

Bhoto is an iPhone app and a website (bhoto.app) made by Novara LLC, a Virginia limited liability company ("Novara", "we", "us"). This policy explains what happens to your information when you use either one. Novara is responsible for the small amount of personal data we handle.

The short version

Your photos, weight, measurements and notes stay on your iPhone. We never receive them.
There's no account and no login.
There are no analytics, ads, tracking or cookies, in the app or on the website.
We don't sell or share personal data, and we don't use it for advertising.
The only personal data we may hold is an email you send us.

What stays on your iPhone

Your progress photos, and any videos or images you make from them
Weights, tape measurements, your goal and goal weight, notes, and your first name if you add it
Your settings, such as units, reminders and which areas to cover when you share

This is stored in the app's own private storage on your iPhone, protected by iOS encryption while your phone is locked. We have no copy and no way to access it.

How the app looks at your photos

To line your photos up, tell front, side and back apart, and cover your face or body before you share, Bhoto uses Apple's built-in image tools to find your body and face in each photo. This happens entirely on your iPhone. It finds where a face is, not whose face it is: it doesn't recognise anyone and doesn't create a face print or any other template that could identify you. What it works out (for example where your shoulders and hips are) is saved with the photo on your iPhone and deleted with it. We never collect, receive, store or share any of it.

Permissions the app asks for

All of these are optional, and you can change them in iOS Settings at any time.

Camera: to take your progress photos. You can import existing photos instead.
Photos: to save an image or video when you choose Save. Importing uses Apple's photo picker, which gives Bhoto only the photos you pick.
Notifications: for reminders you turn on. They're scheduled on your iPhone and never show your photos or weight.
Face ID: to lock the app if you turn the lock on. Apple handles Face ID; Bhoto never sees your face data.

When data leaves your iPhone (only when you choose)

Sharing. When you share a photo or video, it goes to the app you pick (for example Messages or Instagram), and that app's privacy policy applies. Bhoto removes location and camera details from shared files.
Your iPhone's backup. iCloud Backup or a computer backup can include Bhoto's data. That backup belongs to your Apple Account and is covered by Apple's privacy policy. We can't read it.
Back up to a file. Everything goes into one file locked with a password you choose (AES-256 encryption) and saved where you choose. Nobody can open it without the password, including us, and we never receive it.
Export. "Export all photos and data" makes a zip file saved where you choose. It isn't encrypted, so keep it somewhere private.

The age check

Bhoto is for adults aged 18 and over. Where the law requires apps for adults to confirm your age with the App Store (for example in Texas and Utah, and in Louisiana from July 2027), Bhoto asks Apple when you start. Apple tells the app only whether you're 18 or over. The app uses that only to decide whether it can be used, keeps only the fact that the check passed, on your iPhone, and never sends it anywhere. If Apple says you're under 18, Bhoto can't be used with that Apple Account.

What we do receive

Purchases. Apple sells Bhoto Pro and handles payment. We never see your name, Apple Account or card. The app checks with Apple, on your iPhone, what you've bought. Apple gives us sales reports that don't identify you.
App Store statistics. Apple gives us totals such as downloads and crash counts, and only from people who chose in iOS Settings to share analytics with app developers. We can't link these to you.
Support emails. If you email us, we receive your email address and what you write. We use it only to reply. Please don't send photos or health details; if you do, we use them only to help you and delete them with the conversation.
The website. bhoto.app is hosted by Vercel. To deliver pages and keep the site secure, Vercel processes technical data such as your IP address, browser type and the page you asked for, and keeps it in logs for a short time. We don't use cookies, analytics or tracking on the website, and we don't use this data to identify you.

Legal bases (EEA, UK and Switzerland)

We handle support emails because we have a legitimate interest in answering you, or to take steps you ask for. We handle website logs because we have a legitimate interest in running a secure website. We don't make decisions about you by automated means, and we don't build profiles.

Where data is handled

We're based in the United States. Support emails and website logs may be handled in the United States and other countries by our email and hosting providers, who protect them with safeguards such as the European Commission's Standard Contractual Clauses where required.

How long we keep it

Data in the app: on your iPhone until you delete it. Deleting the app deletes all of it. You can also delete single photos, check-ins and weights, or everything at once (Settings > Your data).
Support emails: up to 12 months after the conversation ends, or sooner if you ask.
Website logs: for the short time our host keeps them.

Security

Your data never leaves your iPhone unless you choose, so there's no server of ours to break into. On your iPhone it's protected by iOS encryption, and you can lock the app with Face ID or your passcode. Backups made in the app are encrypted with a password only you know.

Children

Bhoto is only for adults aged 18 and over. It isn't directed to children, and we don't knowingly collect personal data from anyone under 18. If you believe a child has contacted us, email us and we'll delete the message.

Consumer health data

Some US states, including Washington, Nevada and Connecticut, have laws about consumer health data. Bhoto doesn't collect, share or sell consumer health data: your weight, measurements and photos stay on your iPhone.

Your rights

You're in control of the data in the app: you can see, change, export or delete it at any time, without asking us.

For the personal data we may hold (a support email):

In the EEA, UK and Switzerland, you have the right to access, correct or delete it, to restrict or object to how we use it, to get a copy, and to complain to your data protection authority.
In California and other US states with privacy laws, you have the right to know what we hold, get a copy, correct it and delete it, and to opt out of its sale, sharing for advertising, targeted advertising and profiling. We don't do any of those. We won't treat you differently for using your rights, and we honour Global Privacy Control signals.

To use any of these rights, email support@novarasolutions.app. An authorised agent can write for you. We'll check the request comes from you by replying to the email address involved, and we'll answer within 30 days (or the time your law allows). If we turn down a request, you can appeal by replying to our answer; we'll reply within the time your law allows, and if you're still unhappy you can contact your state attorney general or data protection authority.

California notice at collection. In the last 12 months we may have collected two categories of personal information: identifiers (an email address you sent us) and internet activity (website logs kept by our host). They come from you or your browser, are used only to answer you and run the website, are kept as described above, and are never sold or shared.

Changes

If we change this policy, we'll update the date at the top. If a change affects what the app does with your data, we'll say so in the app's release notes before it takes effect.

Contact

Novara LLC
8401 Mayland Dr, Ste A, Richmond, VA 23294-4648, USA
support@novarasolutions.app