Privacy Policy

Introduction

Body Visualizer ("we", "our", or "the service") is a free, browser-based body shape visualization tool available at body-visualizer.net. This policy explains what information we handle when you use the service.

The short version: the core preview does not require an account or photo and does not deliberately save a per-user measurement profile. Optional AI analysis sends the data described below to service providers.

Core Preview and Optional Accounts

• No photos. This tool works entirely from numeric measurements you enter manually. You are never asked to upload or capture an image.
• No account is required for the core preview. If optional account features are enabled and you choose to create an account, those features may process your name, email address, authentication credentials, session identifiers, request IP, locale, UTM source, and a profile image or avatar when provided by a social sign-in provider. This account data is separate from the core preview's measurement fields.
• No saved measurement profile in the core preview. Height, weight, chest, waist, hips, and inseam are processed in your browser to render the 3D preview and compute metrics. The application does not deliberately write those fields to a per-user measurement database. Optional AI analysis has the separate data flow described below.

What Happens to Your Measurements

1. Local preview rendering. Your inputs drive the 3D model and the BMI / Waist-to-Height / Waist-to-Hip / Body Fat estimate displayed on the page. This calculation runs in your browser.
2. Optional AI analysis. If you click "Analyze," your browser sends the selected locale, analysis mode, sex, current and goal measurements, calculated metrics, metric labels, validation warnings, and a Cloudflare Turnstile token to our server.
3. Human verification and rate limiting. If Turnstile is configured, our server verifies the token with Cloudflare and may send the request IP as part of that check. We also derive a hash from the request IP to enforce a usage limit. The rate-limit key may be held in server memory or in a configured rate-limit store for the applicable window.
4. AI processing. Our server builds an analysis prompt from the submitted fields and tries configured gateways in order: Kie.ai, then Yunwu, then OpenRouter. It stops after the first successful response, but if an earlier attempt fails, the same prompt may be sent to more than one gateway. Each gateway routes the prompt to a Gemini-family model. The explanation is returned to your browser. The application does not deliberately store the AI request or response as a per-user measurement history, but hosting, verification, gateway, and model providers may retain logs under their own policies.

AI and Verification Providers

The optional analysis may involve Cloudflare Turnstile and the configured AI gateways Kie.ai, Yunwu, and OpenRouter. The server tries available gateways in that order and stops after a successful response; a failed attempt means the same prompt may reach a later gateway as well. Each attempted gateway routes the prompt to a Gemini-family model. The application payload has no dedicated name, email, or photo field, but it includes the measurements and interface context listed above. Service providers and ordinary web infrastructure may receive network metadata such as an IP address, user-agent, and request time under their configurations and privacy terms.

Cookies and Local Storage

• We use local storage in your browser for the theme preference. The selected measurement unit is current application state and is not represented as a saved measurement profile.
• The current language is represented by the route: English uses the unprefixed URL, and German, French, and Spanish use /de, /fr, and /es. The internationalization and hosting layers may use ordinary request headers or cookies for routing.
• If you arrive through a marketing link containing utm_source, we may set a first-party UTM cookie for up to 30 days.
• The current application does not deliberately set third-party advertising cookies on the visualizer. Third-party verification or other configured services may apply their own technologies and policies when those services are used.

Analytics

We may use analytics such as page views or country-level traffic to understand which pages are visited. We do not deliberately add body measurement fields to analytics events. Analytics and hosting services may still receive ordinary request metadata under their configurations.

GDPR and CCPA Privacy Rights

Body Visualizer is designed to limit personal data collection. The core preview does not require an account, email address, photo upload, or saved measurement profile. Optional AI analysis and normal web requests can nevertheless generate provider and infrastructure logs as described above.

If privacy laws such as the GDPR, UK GDPR, or CCPA/CPRA apply to you, you may contact us to ask about access, correction, deletion, portability, objection, restriction, or opt-out rights for any personal information we may hold. We will respond based on the information available to us and the requirements that apply to the request.

We do not sell personal information, and we do not use the body measurements entered into the visualizer for cross-context behavioral advertising.

Children's Privacy

Body Visualizer is intended for general informational use. It is not designed for children under 13, and it should not be used for clinical assessment of minors. Parents and guardians should supervise any use by minors.

Not Medical Advice

The visualizations and metrics produced by Body Visualizer are informational estimates. They are not medical advice, diagnosis, or treatment, and they should not be used to make health decisions or to assess eating disorders.

Changes to This Policy

We may update this policy from time to time. The "created_at" date at the top of this page reflects the most recent revision.

Contact

For questions about this privacy policy, contact us at support@body-visualizer.net.