Privacy Policy

Namatan AI (“Namatan”, “we”, “us”) provides an AI-powered body composition analysis service delivered through the Namatan mobile application and this website.

Unit 2727, 2nd Floor, 25 Sinchon-ro, Seodaemun-gu, Seoul, South Korea 03770
Business license: 62-3870-3868
Contact: info@namatanai.com

We collect only what we need to operate the Service. Everything below is collected directly from you inside the Namatan app — we do not buy data, and we do not collect it from other sources or data brokers.

• Account information — first name, last name, email address, and password (stored in hashed form). Collected from the registration form you complete in the app.
• Body photographs — front, side and optional back images. Collected either from your device camera, when you grant camera permission and take a photo in the app, or from your photo library, when you grant photo access and select an existing image.
• Physical attributes — height, weight, age, and biological sex. Collected from the profile form you fill in; all are optional except where needed for an estimate.
• Optional profile information you choose to provide
• AI-generated analysis results, including estimated body composition and measurements, and their history over time
• Subscription and entitlement status, processed via Apple and our payments provider — we never receive your full payment card details
• Team membership information, where you join or manage a team
• Device identifiers and technical information necessary to operate the Service. Collected automatically by the app and our servers when you use it.
• Security, diagnostic, and usage logs. Generated automatically by our servers and error monitoring when you use the Service.

We process your information to:

• Provide AI body composition analysis and return your results
• Create and maintain your account and, where applicable, your team
• Operate, maintain, and improve the reliability, performance, and security of the Service
• Process subscriptions and manage entitlements
• Detect and prevent fraud, abuse, and unauthorised use
• Provide customer support and respond to your requests
• Comply with legal obligations

We do not sell your personal information. Unless you separately and explicitly agree, your personal data and photographs are not used to train or improve our AI models.

Photographs deserve special mention because they are the most sensitive information you give us.

• Your photographs are processed solely to generate the analysis you requested.
• They are transmitted to OpenAI, L.L.C. (United States) and processed by its GPT-4.1 model, which returns body composition estimates to us.
• They are not stored on Namatan servers. Only the resulting numbers are saved to your result history.
• OpenAI does not use data submitted through its API to train or improve its models, and retains API data only briefly for abuse monitoring before deleting it.
• You are asked for explicit permission inside the app before your first analysis, and you can withdraw it at any time.
• They are never sold, and never shared with third parties for advertising purposes.
• They are transmitted over encrypted connections and stored with access restricted to systems and personnel that require it.

You may request deletion of your photographs at any time by contacting us.

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Consent — for processing your photographs and physical attributes to produce a body composition analysis. You give this consent during registration and may withdraw it at any time.
• Performance of a contract — to provide the Service you signed up for, including account management and subscriptions.
• Legitimate interests — to secure the Service, prevent abuse, and improve reliability, balanced against your rights.
• Legal obligation — where we are required to retain or disclose information by law.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We do not sell your data. We share it only with service providers who process it on our behalf, under contract, and only as needed to run the Service.

• OpenAI, L.L.C. (United States) — receives your body photographs together with your height and weight, solely to generate body composition estimates. This is the only third party that receives your photographs. OpenAI processes this data as our service provider under its API data usage policies, does not use it to train its models, and provides contractual protections equivalent to those described in this policy.
• Apple and RevenueCat — receive subscription and entitlement information. They never receive your photographs or analysis results.
• Cloud hosting, storage, and error monitoring providers — process account and diagnostic data needed to operate and secure the Service.

Every provider above is bound by contract to process your data only on our instructions, to protect it to a standard equivalent to this policy, and not to use it for their own purposes.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

We are based in South Korea and our service providers may process data in other countries. Where personal data is transferred out of your jurisdiction, we take steps to ensure it remains protected by appropriate safeguards, such as standard contractual clauses or an equivalent mechanism recognised under applicable law.

We keep your account information and analysis history for as long as your account remains active, so that you can track progress over time. Photographs are retained only as long as necessary to provide and display the analysis you requested.

When you delete your account, we delete or irreversibly anonymise your personal data, except where we are required to retain records to meet a legal obligation or to resolve disputes.

We implement reasonable administrative, technical, and organisational safeguards to protect your information, including encryption of data in transit, hashed password storage, and access controls limiting who can reach your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data
• Withdraw consent you previously gave
• Object to or restrict certain processing
• Receive a copy of your data in a portable format
• Request information about how your data is processed
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email info@namatanai.com from the address associated with your account. We respond within the period required by applicable law.

Namatan is not directed at children. You may use the Service only if you have reached the minimum legal age required in your country, or you have valid consent from a parent or legal guardian where applicable law requires it. If we learn that we have collected personal data from a child without the required consent, we will delete it.

You confirm that the photographs you upload are of yourself, or that you have the explicit permission of the person shown. Do not upload images of another individual without their permission.

We may update this policy to reflect legal, technical, or operational changes. The current version is always available in the app and on this page, and the effective date above will be updated. Where changes are significant, we will provide additional notice.

Questions or privacy requests can be sent to info@namatanai.com, or by post to the address in section 1. For help with the app, see our Support page.