Privacy
Privacy policy.
Last updated : 2026-09-08
Answers are used only to calculate, assemble and deliver your guide. Sensitive information is encrypted, never sold and automatically deleted according to the retention schedule.
1. Data controller
Body Cheat Code. General contact: contact@bodycheatcode.com. To exercise a data right: privacy@bodycheatcode.com.
2. Data processed
- first name and email address
- age, height, weight and optional waist measurement
- goal, food habits, preferences, allergies and exclusions
- activity, equipment, availability, sleep, stress and daily-life constraints
- general safety indicators without asking for medication names or a detailed medical record
- order and payment information; Stripe processes card data and Body Cheat Code does not store it
3. Purposes
Data is used to display a preliminary analysis, exclude incompatible content, generate and deliver the ordered PDF, provide support and process the order. Marketing messages are not sent without separate consent.
4. Legal bases
Service delivery and payment rely on the contract. Answers that may reveal health information are used on the basis of explicit consent. Accounting duties rely on a legal obligation. Abuse prevention and service security rely on legitimate interests.
5. Personalisation logic
The system applies deterministic rules: allergies, exclusions, pain and unavailable equipment are hard constraints; preferences, budget, time and plan style then rank compatible options. The service does not make a diagnosis or a decision with legal effect. Certain indicators may stop automated sales and recommend professional advice.
6. Retention periods
- profile without an order: 7 days
- detailed answers for a delivered guide: 90 days for support, followed by automatic deletion
- server copy of the PDF: 30 days
- temporary calculation files: no more than 48 hours
- delivery logs: 12 months
- billing data required by law: the applicable statutory period, generally 10 years
7. Recipients and providers
Necessary data may be processed by o2switch for hosting in France, Stripe for payment and Resend for email delivery. The PDF is attached to the email, but raw questionnaire answers are not sent to the email provider. Profiles are never sold to advertisers.
8. Security
Questionnaire answers are encrypted in the database. Communications use HTTPS/TLS. Temporary files and server PDFs are stored outside public indexing and deleted according to the stated periods.
9. Your rights
You may request access, rectification, deletion, restriction, portability or object to certain processing. You may withdraw consent for the future by writing to privacy@bodycheatcode.com. If a problem remains unresolved, you may complain to https://www.cnil.fr.
10. Cookies and aggregate measurement
One technical cookie remembers only the selected language. No advertising cookie or third-party behavioural tracking is used. To improve the journey, Body Cheat Code stores anonymous daily totals only, such as page views, questionnaire steps and completed purchases, without an IP address, device identifier, email address or user profile.