Delete your Bild Health data

Bildbot Inc. ("Bild Health") builds the Bild Health app for iOS and Android. This page is the short version of how to delete what the app holds about you. It restates, without changing, the deletion and retention terms of our Privacy Policy, which remains the authoritative document.

Most of your data never leaves your device. Your measurements, medication logs, goals, and imported DEXA results are stored on the phone itself, so deleting them in the app removes them outright — there is no copy on our servers to chase.

Everything below is quoted from the Privacy Policy; section numbers inside a quotation refer to that document.

Delete your data in the app

• Delete on-device data — individual entries in place, or Settings → Manage My Data → Delete all my data, which erases everything the App stores on the device, including your BodySpec sign-in.
• Disable sync — if you have enabled cross-device sync, disabling it (Settings → Manage My Data) deletes the synced copy from our servers; your on-device data is unaffected.
• Delete your account — if you have created one: on the Site, in your account page, or on iOS in Settings → Manage My Data. Deletion removes your account record, sessions, entitlement state, and any synced data from our servers. (The Android App currently has no accounts, so Android-only use leaves no account on our servers to delete.) Our payment processor retains its own records of completed payments as required for tax, accounting, and audit purposes.
• Withdraw permissions — disconnect BodySpec in Settings → DEXA Scans; revoke health-data access in your platform's health settings (the App links there from Settings).

Ask us to delete it for you

For any other request: privacy@bildhealth.com. We respond within 30 days, and you may appeal an outcome by replying "appeal."

What is deleted, and what is kept

On-device data is protected by device encryption; your health entries additionally use the strongest file protection the platform provides and are excluded from device backups; BodySpec tokens reside in the platform's secure credential store and are marked non-transferable. Server records are encrypted in transit and at rest and are limited to the categories described in Section 4. Retention of health data follows your choices: on-device health data remains on your device until you delete it, and is not carried into your device backup, and synced data remains on our servers until you disable sync or delete your account, whichever comes first. Account records are retained until you delete your account; our payment processor retains its own transaction records thereafter as required by law. Anonymous analytics are retained for 12 months. In the event of an unauthorized disclosure of identifiable health information, we will provide the notifications required by the FTC Health Breach Notification Rule.