Policy
Privacy Policy
Effective October 7, 2026. Page updated October 7, 2026.
1. Who we are and what this policy covers
This Privacy Policy explains how BQOME LLC (“BQOME”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you use the BQOME smart scale (the “Device”), the BQOME mobile application for iOS and Android (the “App”) and our website at bqome.com (together, the “Services”).
BQOME LLC is the data controller for the personal information described here.
By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Services. Some data, such as body measurements, is sensitive health information, and we only process it with your explicit consent (see Section 3).
2. Information we collect
We collect only what we need to run the Services. The table below lists each category, where it comes from and whether it is required.
| Category | Examples | Source | Required? |
|---|---|---|---|
| Account information | Name, email address, password (stored hashed), profile photo | You, at sign-up | Yes, to create an account |
| Profile information | Date of birth or age, sex, height, activity level, goals, units of measure | You, in the App | Yes, to calculate body metrics |
| Body measurements (health data) | Weight, BMI, body fat %, muscle mass, bone mass, body water %, visceral fat, BMR, metabolic age, heart rate (if supported by the Device), measurement date and time | The Device, via Bluetooth | Core feature |
| Family or guest profiles | Name, age, sex, height and measurements of other people you add | You | Optional |
| Device information | Scale model, serial number, firmware version, Bluetooth/Wi-Fi identifiers, battery level | The Device | Yes, for pairing and updates |
| Mobile device and technical data | Phone model, operating system, app version, language, time zone, IP address, crash logs, diagnostic data | Your phone, automatically | Yes, for security and support |
| Usage data | Features used, screens viewed, settings chosen | Your phone, automatically | Optional where consent is required |
| Support communications | Messages, emails, attachments you send us | You | Only if you contact us |
| Website data | Pages visited, browser type, cookies (see Section 4) | Your browser | Depends on cookie choices |
App permissions. The App may ask for: Bluetooth (to connect to the Device); Location or “Nearby devices” (required by Android to scan for Bluetooth devices; we do not use it to track where you are); Notifications (reminders and alerts); Camera or Photos (only if you choose a profile picture); and Apple Health or Health Connect (only if you turn on sync). You can withdraw any permission in your phone settings.
What we do not collect. We do not collect precise GPS location, contacts, payment card numbers (purchases are handled by the app store or payment processor), or biometric identifiers such as fingerprints or face data.
3. How we use your information
| Purpose | Data used | Legal basis (EEA/UK users) |
|---|---|---|
| Create and manage your account; sign you in | Account information | Performance of our contract with you |
| Pair the Device, take measurements, calculate and display body metrics, trends and history | Profile information, body measurements, device information | Your explicit consent (health data) |
| Sync your data across your devices and back it up in the cloud | All App data | Contract; explicit consent for health data |
| Sync with Apple Health or Health Connect, when you turn it on | Body measurements | Your explicit consent |
| Send firmware updates, fix bugs, prevent fraud and keep the Services secure | Device, technical and usage data | Our legitimate interests in a safe, working product |
| Respond to support requests | Support communications, account information | Contract; legitimate interests |
| Send service notices (security, policy changes) | Email address | Contract; legal obligation |
| Send marketing emails | Email address | Your consent; you can unsubscribe at any time |
| Improve the Services using aggregated or de-identified statistics | Usage and technical data | Legitimate interests, or consent where required |
| Comply with law and enforce our Terms | Any relevant data | Legal obligation; legitimate interests |
We do not sell your personal information. We do not use your health data for advertising, we do not share it with data brokers, and we do not use it to make decisions with legal or similarly significant effects about you.
Not medical advice. Body metrics shown in the App are estimates for general wellness only. They are not a diagnosis and must not replace advice from a qualified health professional.
4. Health platforms, cookies and sharing
Apple Health (HealthKit) and Google Health Connect. If you turn on sync, the App writes your measurements to, and may read weight and height from, Apple Health or Health Connect. Data obtained through these platforms:
- is used only to provide health and fitness features inside the App;
- is never used for advertising, marketing or data mining, and is never sold or shared with advertising platforms or data brokers;
- is never stored in iCloud by us and is not disclosed to third parties without your express permission;
- can be disconnected at any time in the App or in your phone’s health settings.
The App’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
Cookies on our website. We use strictly necessary cookies to run the website and, with your consent where the law requires it, analytics cookies to understand traffic. You can manage cookies through the banner on our site or your browser settings. The App does not use advertising identifiers.
Who we share information with. We share personal information only as follows:
| Recipient | Why | Data shared |
|---|---|---|
| Cloud hosting providers (Supabase for App data; Medusa Cloud and Vercel for the store and website) | Store and process App and store data | All App data, encrypted; order data |
| Email and support tools (Google Workspace, Resend) | Send service emails, answer support requests | Name, email, support messages |
| Crash and analytics tools (Sentry, PostHog) | Find and fix bugs | Technical and usage data, no health data |
| Payment processor (Stripe) | Take payment for orders on our website | Payment details, billing address |
| Apple Health / Health Connect | Only when you turn on sync | Body measurements |
| Professional advisers, auditors | Legal, accounting, compliance | As needed |
| Authorities | When required by law, court order, or to protect rights and safety | As legally required |
| A buyer or successor | Merger, acquisition or sale of assets, under this Policy | Relevant data, with notice to you |
Our service providers act on our instructions under written contracts and may not use your data for their own purposes. We may share de-identified or aggregated data that cannot reasonably identify you.
5. Retention, account deletion and security
How long we keep data. We keep your account and measurement data while your account is active. If your account is inactive for 24 months, we may notify you and then delete it. Support messages are kept for 24 months. Technical logs are kept for up to 90 days. We keep some records longer only where the law requires it (for example, tax or dispute records).
Deleting your account and data. You can delete your account and all associated data at any time:
- In the App: Profile > Settings > Account > Delete account; or
- On the web, without the App: bqome.com/us/delete-account; or
- By email to support@bqome.com from the address linked to your account.
We delete your account and health data from active systems within 30 days of your request, and from backups within 90 days. You can also delete individual measurements or family profiles in the App at any time. Data already written to Apple Health or Health Connect stays there until you delete it in those apps.
Security. We protect your data with encryption in transit (TLS) and at rest, access controls limited to staff who need it, and regular security reviews. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities as the law requires.
6. Your rights, children, transfers and contact
Your rights. Depending on where you live, you may have the right to: access your data and get a copy; correct it; delete it; export it in a portable format; restrict or object to certain processing; withdraw consent at any time (this does not affect earlier processing); and not be discriminated against for using these rights. You can export your measurements in the App under Settings > Export data. For any other request, email support@bqome.com. We will verify your identity and respond within the time the law requires (usually 30 days in the EEA/UK and 45 days in the US). You may appeal a refusal by replying to our response.
EEA and UK users. You may complain to your local data protection authority.
US users. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct and limit use of sensitive personal information. We do not sell or “share” personal information for cross-context behavioral advertising. Residents of Washington State: our separate Consumer Health Data Privacy Policy explains how we handle consumer health data under the My Health My Data Act. Residents of other states with privacy laws (such as Colorado, Connecticut, Virginia, Texas and Oregon) have similar rights and may contact us the same way.
Children. The Services are not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect their data through their own accounts. A parent or guardian may add a family profile for a child and is responsible for that data. If you believe a child has given us data without consent, contact us and we will delete it.
International transfers. We are based in the United States and our providers may process data in other countries. Where required, we protect transfers with safeguards such as the European Commission’s Standard Contractual Clauses.
Changes to this Policy. We may update this Policy. We will post the new version here with a new effective date and, for material changes, notify you in the App or by email before they take effect.
Contact us. BQOME LLC. Email: support@bqome.com.