Last updated: 12 September 2026. Questions, preference changes and privacy requests can be sent through the BestBody contact route.

Information collected by each public form

Access-update form

The short access-update form asks for a full name and email address. Its required consent choice is specifically for an email notification when wider UK access opens. These details are used to register that request and send the access update.

Early-access request

The early-access form asks for first name, last name, email address, mobile number, account type, UK nation and postcode. The account-type choices are individual, coach or personal trainer, and team or organisation. Nation choices are England, Scotland, Wales and Northern Ireland.

A required acknowledgement allows BestBody to use the submitted details to prepare and contact the person about opening an account. Optional BestBody product news by email is a separate, unticked choice and is not required to request early access. A repeat request using the same email address updates the existing early-access record.

Contact form

The contact form asks for a name, email address, selected topic and message. Topic choices cover product questions, early access, privacy requests, security concerns, content corrections, and coach or team enquiries. The name and email address allow the BestBody team to respond; the topic and message provide the context needed to handle the enquiry.

Form choices and sensitive information

The access-update email choice and the early-access service acknowledgement are required for those respective requests. The early-access marketing choice is optional. The contact form also requires acknowledgement that the message will be processed so BestBody can respond. Marketing preferences can be changed through the contact route.

No public form intentionally asks for a password, payment detail, date of birth, body measurement, medical record or health history. Do not put passwords, access tokens, payment information, medical records or urgent health information in a free-text message. Hidden anti-spam fields are checked to screen automated submissions.

How public-form submissions are handled

Early-access requests are validated and stored in the website’s account-request database. Access-update and contact submissions pass through a separate form-delivery endpoint so the BestBody team can receive and handle them. Hosting, storage and message delivery services therefore process the fields needed for the form being used.

A fixed retention period is not published on this page. Use the contact route to ask how long a particular public-form submission is held or to request correction or deletion where applicable.

App data and connected permissions

Meals, workouts, routes, hydration, weight, measurements and other health or fitness records are used to provide the app features the user chooses. Apple Health or Health Connect data is accessed only after the relevant platform permission is granted. Those permissions can be reviewed or withdrawn in the device or platform settings.

Personal health data is not sold

BestBody does not sell personal health data. Health and fitness records are used to provide the features a person chooses and remain subject to their permissions and sharing choices. This commitment does not mean every service provider is avoided: hosting, storage and other necessary processors may handle data to operate the service under their assigned role.

Coaches, teams and sharing

A coach sees only information that the individual has chosen to share for that relationship. Team wellbeing features are designed around appropriate aggregate participation rather than exposing a member’s private weight, meals or health records. Review each sharing choice before enabling it.

AI and automated assistance

BestBot can use the context supplied or permitted by the user to interpret requests and prepare relevant options. AI output is not silently treated as medical fact. Defined calculations, permissions and safety rules remain in structured systems, and plans remain reviewable and editable.

Your data-protection rights

Depending on the information and lawful basis involved, UK data protection law may give you rights to be informed, obtain a copy, correct inaccurate information, request erasure or restriction, receive portable data, and object to particular uses. Some rights do not apply in every circumstance. Use the contact route to make a request about information associated with you.

Your right to object: you can object to direct marketing at any time. Where processing relies on your consent, you can withdraw that consent without affecting processing that took place before withdrawal. Marketing preferences can be changed through the contact route, and connected-data permissions can be changed at platform level.

If a privacy concern is not resolved, you can also raise it with the UK Information Commissioner's Office. The ICO explains the available rights and complaint process in its official data-protection complaints guidance ↗.

Security, data sources and limits

Read Security, Data Sources, How Our AI Works and Limitations for the other parts of the data boundary.

Your health is personal.We build like it.