Privacy Policy
Your health information is personal. This page explains what you add to Body OS, how it is used, and the controls available to you.
Last updated: October 4, 2026
Who to contact
This policy describes MAHA Body OS at mahaos.org. For privacy questions or requests, contact contact@mahaos.org. Account help is available at support@mahaos.org.
Information you provide
- Account information, including your name, email, and authentication details.
- Profile information you choose to add, such as goals, measurements, routines, and health background.
- Meals, hydration, sleep, cycle entries, symptoms, journal notes, and other records you log.
- Documents you upload, including lab reports, prescriptions, and other health files.
- Questions, attachments, and conversations you submit to Ask, plus support messages you send us.
How information is used
We use this information to maintain your account, show your records and daily overview, calculate targets and estimates, respond to requests, and operate the features you use. Authentication and security information helps protect your account and investigate errors or misuse.
Food searches use USDA FoodData Central. Care searches use the CMS Provider Data Catalog and the search criteria needed to find relevant results. Those public datasets are separate from your personal medical records.
Ask and document analysis
Ask uses your question and the categories of context you enable in its sharing controls. Context you disable is excluded from future context assembly. Information you type directly into a question or attach to it is also part of that request. Changing a sharing preference does not retroactively remove earlier messages.
AI requests are processed by the AI services configured for Body OS. Document analysis requires your confirmation before sending the selected content for analysis. Review what you share and avoid including information you do not want processed. Contact us for details about the providers used for your deployment.
What we don’t do
- We don’t sell your personal or health information.
- We don’t show ads, and the site has no advertising or analytics trackers.
- We don’t use your health information for marketing.
Health data rights in the U.S.
Some U.S. states, including Washington, Nevada and Connecticut, give you extra rights over consumer health data. Wherever you live, you can see, export and delete your data in Settings, and withdraw your consent by deleting your account. To make a request by email, write to contact@mahaos.org.
Storage, service providers, and cookies
Body OS uses hosting, storage, email, and AI services to deliver its features. These services process the information needed for their role. Account cookies keep you signed in and support secure requests. Interface preferences, such as your selected theme, are stored in your browser. Our Cookie Policy lists each one.
Your saved records remain available in your account until you remove them or delete the account. The account deletion feature removes active account records and uploaded files. Security logs and provider backups can have separate retention rules; contact us for the current retention and processing-location details.
Your choices and requests
In Settings, you can update your profile, export your data, delete your records, or delete your account. Sensitive account actions require confirmation. Ask has separate controls for the health context it may use.
You can also email us about access, correction, deletion, or other privacy rights that apply where you live. We may need to verify account ownership before responding. Where applicable, you may raise a concern with your local data protection authority.
Updates and other sites
We will update this page when the product or its data practices change. Links to external services have their own privacy policies. See our Terms of Service for how to use Body OS.