BodyRate · ascend & forget

Privacy Policy

Last updated: July 12, 2026

This Policy describes what data the BodyRate web service and its related Telegram bots (together, the "Service", bodyrate.ru) process and how it is used. By using the Service, you agree to the terms of this Policy.

If your uploaded photo shows a recognizable person, that image may constitute biometric personal data. Processing is performed only with your consent, given by uploading a photo and accepting the Terms of Use. You may stop using the Service at any time.

1. What data is processed

Uploaded image — the photo you add for physique analysis. Used solely to process a single request.
Telegram account data — account identifier, name, and username (if set). Used for sign-in, quota tracking, and linking a purchase to your account. We do not request your phone number.
Payment data — which plan was purchased, the amount, payment method (Telegram Stars / cryptocurrency / bank card), and the time of purchase. Card or crypto wallet details are never sent to or stored by the Service — they are processed exclusively by the payment provider.
Support messages — the text of a support-bot conversation once escalated to an operator; stored temporarily to respond to the request.
Feedback form responses — 1–10 ratings (design, features, analysis quality), free-text suggestions, and, if you indicate interest in collaborating, a contact you voluntarily provide. Available once per account; used to improve the Service and, where collaboration interest was expressed, to get back in touch with you.
Technical data — IP address. Used automatically to protect the Service from abuse (rate limiting). Not used to identify you personally.
Local browser data (localStorage) — your numeric result (score), score history, consent acceptance flag, sound settings. Stored only on your device and never sent to the server.

2. Purposes and legal basis

Purpose — generating an entertainment physique score from the uploaded image, tracking and delivering purchased access, and responding to support requests.
Legal basis for processing the image — your consent. Legal basis for processing payment data — performance of a contract (delivering the access you paid for).

3. How the image is processed

For the text score, the image is sent via a secure proxy to a third-party AI model provider. This is required for the scoring feature to work.
The Service does not maintain persistent storage of uploaded photos: the image is used for a single request and is not retained after the response is generated.

4. Third-party sharing

Operating the Service involves data processing by:

An AI model provider (via the OpenRouter routing service) — to generate the text score from the image;
Telegram (Bot API) — for sign-in, notifications, bot operation, and Stars payments;
Payment providers — a cryptocurrency payment service and, where that payment method is available, a card acquiring provider — to process card/crypto payments. Card/wallet details are processed exclusively by these providers;
Infrastructure providers (Cloudflare — proxy, protection, and storage of account/quota data; GitHub Pages — static file hosting).

These providers may process data on servers outside your country of residence. The Service does not share data for any other purpose and does not sell it.

5. Retention periods

The uploaded image is not retained after the request is processed.
Account data (Telegram identifier, credit/unlimited balance) is kept for as long as the account is in use.
Payment records are kept for as long as necessary for accounting, dispute resolution, and compliance with applicable law.
Support messages are stored temporarily, typically no longer than a few months, and can be deleted on request.
Feedback form responses are kept for as long as needed to analyze and improve the Service, and can be deleted on request.
Local data (score, history) is stored in your browser until you clear it (clearing site data / browser history).

6. Your rights

Withdraw consent and stop using the Service at any time.
Request deletion of your account data, including support history, by contacting @BodyRateSupport_bot (payment records required for accounting may be retained longer under applicable law).
Delete local data by clearing your browser's site data.
Choose not to upload an image if you disagree with the processing.

7. Cookies and similar technologies

The Service does not use advertising cookies. Only localStorage is used to store settings and results on your device.

8. Changes

This Policy may be updated. The current version is always available on this page.

← Home