Version 1.0 — Effective date: September 30, 2026
This summary is for convenience; the full policy below is the complete notice.
The controller responsible for processing your personal data is:
| Company | FAMBOD LTD |
| Registration number | 517177127 (Israel) |
| Address | Hartglas 8, Tel Aviv 6997109, Israel |
| support@fambod.com | |
| Website | fambod.com |
This policy covers the FamBod mobile application and the fambod.com website (the “Service”). It does not cover third-party products or services we do not control.
We tell you in the app which information is required: account information is necessary to create an account and use FamBod — without it, we cannot provide the Service. The opt-in items in Sections 2.4 and 2.5 are entirely voluntary, and declining them has no consequence for your use of the app.
Your email address, name, and password (never stored in plain text) — or, if you sign in with Google, Apple, or Facebook, the information you authorize that provider to share with us, typically your name, email address, and basic profile details. (Apple may provide a private relay email address instead of your real one.) Those providers act under their own privacy policies for the sign-in itself, and you can control what they share through their settings.
Your date of birth and your self-assigned role (“Mom” or “Dad”). We use these to tailor workouts and content to you, and we use your date of birth to verify that you meet the minimum age requirement (18+).
Your in-app activity (such as which exercises and workout plans you start, complete, or stop, and your progress) and your settings (such as language, notification preferences, and other customization choices). We use this to deliver the core product: personalized exercise plans, relevant content and notifications, and an app that remembers how you like it. This is first-party data processed to provide the Service — it is separate from the optional analytics below and does not depend on any opt-in.
If you switch on the analytics toggle (“Share usage data to help improve FamBod”), we collect product analytics through PostHog: a pseudonymous user identifier and behavioral events such as screen views, button taps, and exercise started/completed/stopped events. We use this solely to understand how FamBod is used and to improve it.
Session replay. Analytics may also include session replay: a reconstruction of how the app’s post-signup workout screens were used, with all text inputs and personal details masked so they are never captured. Onboarding screens are never recorded. Session replay is covered by the same analytics consent — if your analytics toggle is on, it may include replay; if it is off, no analytics of any kind, including replay, are collected.
You can switch analytics off at any time in Settings, which stops collection going forward (see Section 4 for how consent works).
If you switch on the marketing toggle (“Send me FamBod tips and updates by email and notifications”), we send you product tips, updates, and promotions by email and push notification. You can withdraw at any time — in Settings, via the unsubscribe link in every marketing email, or by disabling notifications in your device settings (see Section 4). When we engage a marketing platform, it will act as our processor and we will name it in Section 5. Service communications (such as security notices or material changes to these documents) are not marketing and are sent regardless of this toggle.
Standard server logs and technical information: IP address, timestamps, device and operating system information, and app version. We use these to operate, secure, and debug the Service and to prevent fraud and abuse. If you enable push notifications, a device push token is processed through our notification provider (Section 5) to deliver them; you control notifications in the app’s settings and your device’s OS settings.
Every consent action you take — granting, declining, or withdrawing — is logged append-only with: your user ID, the action, a UTC timestamp, the document type, version, and exact text or content hash you saw, your locale, app version, platform, IP address, and user agent. We keep these records to demonstrate that consent was validly given and to honor your choices accurately. Documents are versioned and archived, and material changes trigger re-acceptance in the app.
Sections 2.1–2.7 are the complete picture of what FamBod collects. Children are not users of FamBod and are not data subjects of this Service; the only child-related element in the product is a safety acknowledgment you give as a parent (“…I confirm my child is at least 6 months old and can hold their head up”), which we record as your acceptance of the safety notice, not as information about your child.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Creating and securing your account and verifying eligibility (18+); providing the app and its core features; personalizing your workout plans, content, notifications, and app experience | Account, profile, activity & preferences | Performance of a contract (Art 6(1)(b)) |
| Product analytics, including masked session replay | Pseudonymous ID, behavioral events (§2.4) | Your consent (Art 6(1)(a)) — withdrawable anytime |
| Marketing communications (email and push) | Email address, device push token (§2.5) | Your consent (Art 6(1)(a)) — withdrawable anytime |
| Security, fraud and abuse prevention; debugging; service-related communications; enforcing our Terms | Technical & security data, account data | Our legitimate interests (Art 6(1)(f)) in keeping the Service safe and operational |
| Keeping consent records; complying with legal obligations and lawful requests; establishing or defending legal claims | Consent records, relevant records | Legal obligation (Art 6(1)(c)) and legitimate interests (Art 6(1)(f)) |
Under Israel’s Privacy Protection Law, we process your data on the basis of the informed consent you give at collection, with the disclosures in this policy: the purposes above, which data is required versus voluntary (Section 2), who may receive data (Section 5), and your rights of access and correction (Section 8).
At signup you see one required checkbox (agreeing to the Terms of Service and this Privacy Policy — required to create an account) and two separate, optional toggles, off by default: analytics and marketing. The optional toggles never block signup or any functionality.
You can change either toggle at any time in Settings. Withdrawing consent is as easy as giving it, takes effect going forward, and doesn’t affect the lawfulness of processing before withdrawal. The required items are viewable in Settings with links to the current documents.
We do not sell personal data and do not share it with anyone for their own purposes. The vendors below are processors under contract, acting only on our instructions, and receive only what they need for their function:
| Provider | Function | Location |
|---|---|---|
| Firebase (Google LLC) | Backend infrastructure, database, and authentication | USA |
| PostHog Inc. | Product analytics and session replay — only if you opt in | USA |
| OneSignal, Inc. | Push notification delivery | USA |
When you sign in with Google, Apple, or Facebook, those companies act as independent services under their own privacy policies for the sign-in itself (Section 2.1).
We may also disclose data where required by law, court order, or other legal process; to exercise or defend legal claims; or to investigate fraud, abuse, or violations of our Terms. If FamBod is involved in a merger, acquisition, or sale of assets, personal data may be among the transferred assets, and we will notify you of any resulting material changes to this policy.
FamBod is operated from Israel, and your data may be processed in Israel and by the processors listed above.
| Category | Retention |
|---|---|
| Account, profile, activity & preferences | For the life of your account; purged within 30 days of account deletion |
| Analytics events and session recordings (PostHog) | Up to 24 months from collection, then deleted or aggregated (collection only occurs while your opt-in is active) |
| Marketing consent status | Until you withdraw consent or delete your account |
| Server and security logs | Up to 90 days |
| Support correspondence | Up to 24 months after the matter is resolved |
| Consent records | 7 years after account deletion, to demonstrate compliance within statutory limitation periods |
| Encrypted backups | Deleted data may persist in backups for up to 30 additional days before being purged |
We may retain specific data longer where required by law or necessary to resolve disputes or enforce our agreements, and we may keep aggregated, de-identified statistics that no longer relate to you.
Depending on where you live, you have rights including:
To exercise any right, use the in-app controls where available (Settings; account deletion) or email support@fambod.com. We may need to verify your identity, and we will respond within the timeframes required by applicable law. Exercising your rights is free of charge except where the law allows otherwise.
You can delete your account directly in the app. Deletion permanently removes your account, profile, and activity data and disassociates or deletes your analytics data with our processors, within the windows in Section 7. Consent records and data we must keep for legal compliance are retained as described above. Deletion cannot be undone.
We protect your data with industry-standard measures, including encryption in transit and at rest, access controls, and contractual security obligations on our processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but if we learn of a breach affecting your data, we will act in accordance with applicable breach notification laws.
FamBod is for adults aged 18 and over. Children may not create accounts and are not users of the Service, and we do not knowingly collect personal data from children (see Section 2.8 on the safety acknowledgment). If you believe a child has provided us personal data, contact support@fambod.com and we will delete it.
This policy is versioned, and previous versions are archived. If we make a material change, we will notify you and ask you to review and accept the updated policy in the app before it applies to you; we record that acceptance as described in Section 2.7. Non-material changes take effect when posted, with the new version number and effective date shown below.
FAMBOD LTD · Hartglas 8, Tel Aviv 6997109, Israel · support@fambod.com
FamBod Privacy Policy — Version 1.0 — Effective date: September 30, 2026