1. About this Policy
This Privacy Policy explains how bmi.sg collects, uses, discloses, stores and protects information when you use our BMI calculator, AI meal-plan generator, email-delivery feature and related services.
For privacy-related questions or requests, contact: hello@bmi.sg
2. Information we collect
Depending on how you use bmi.sg, we may collect the following information.
BMI calculation information
- height;
- weight;
- age range;
- gender selection;
- calculated BMI;
- BMI classification;
- date and time of calculation.
We use age ranges rather than asking for an exact date of birth.
Meal-plan preferences
- selected goal;
- usual eating locations;
- preferred food styles;
- dietary requirements;
- whether you entered allergies or foods to avoid;
- the exclusions you voluntarily enter;
- generated meal-plan content.
Information about allergies, dietary exclusions or health-related preferences can be sensitive. Only enter information necessary for generating the plan.
Email-delivery information
When you ask us to send a meal plan, we collect:
- the email address entered;
- delivery status;
- date and time sent;
- technical message identifier supplied by the email provider.
Submitting an email address for plan delivery does not automatically subscribe you to marketing.
Technical and service information
We may collect:
- an anonymous browser or session identifier;
- device category;
- browser type;
- approximate request time;
- truncated, transformed or hashed network-address information;
- rate-limit information;
- generation success or failure;
- generation time;
- AI token usage and estimated service cost;
- security and error logs.
We should not intentionally store a raw network address longer than necessary for security and operational purposes.
3. How we use information
We may use information to:
- calculate and display your BMI;
- classify BMI using Singapore adult ranges;
- generate a personalised meal plan;
- apply selected dietary and food preferences;
- email your full seven-day plan when requested;
- operate, secure and troubleshoot the website;
- enforce generation limits;
- prevent abuse, bots and fraudulent use;
- measure whether users complete each step;
- understand anonymous BMI and food-preference trends;
- improve the service and generated results;
- comply with legal obligations;
- respond to privacy or support requests.
We do not use an email provided solely for plan delivery to send marketing unless you separately consent.
4. Anonymous and aggregated analytics
We may create aggregated statistics such as:
- number of BMI calculations;
- average or median BMI by age range;
- BMI-category distribution;
- aggregate patterns by gender selection;
- number of meal plans generated;
- selected eating locations;
- selected food styles;
- selected goals;
- plan-to-email completion rates;
- generation success rates and costs.
These reports should be displayed only in aggregate form.
We do not intend to use aggregate reporting to identify an individual.
Where a demographic segment contains too few records, we may suppress or combine it to reduce identification risk.
5. AI processing
Information selected or entered for meal-plan generation may be sent to an artificial-intelligence service provider.
The information sent may include:
- BMI result or category;
- age range;
- gender selection;
- goal;
- eating locations;
- food styles;
- dietary requirements;
- allergies or foods to avoid.
We should configure AI requests to avoid sending a person’s name, account identity or unnecessary direct identifiers.
AI providers may process information according to their contractual terms and privacy safeguards.
- AI provider
- OpenAI
- Purpose
- Generate structured seven-day meal plans
- Processing location
- May involve processing outside Singapore
6. Service providers
We may use service providers for:
- hosting and application delivery;
- database and temporary storage;
- AI generation;
- transactional email delivery;
- security and abuse prevention;
- performance and error monitoring.
Providers receive only information reasonably needed to perform their functions.
7. Storage and retention
We retain information only for as long as reasonably necessary for the purposes described in this Policy, operational requirements and legal obligations.
Proposed Phase 1 retention periods:
- Rate-limit identifiers: approximately 24–48 hours
- Generated meal-plan content: up to 48 hours
- Allergy or food-exclusion text: up to 48 hours with the generated plan
- Email-delivery records: up to 30 days
- Security and error logs: up to 30–90 days
- Anonymous aggregated analytics: may be retained for longer because they are not intended to identify an individual
When personal data is no longer required, we may delete it, anonymise it or remove identifying elements.
8. Cookies and local browser storage
bmi.sg may use local browser storage, cookies or similar technology to:
- preserve progress between steps;
- remember the generated plan temporarily;
- prevent excessive meal-plan generation;
- maintain security;
- improve basic website functionality.
9. Disclosure of information
We may disclose information:
- to service providers supporting bmi.sg;
- when required by law, regulation, court order or lawful authority;
- to investigate fraud, misuse or security incidents;
- to protect the rights, safety or integrity of users, bmi.sg or others;
- as part of a business transfer, restructuring or sale, subject to appropriate safeguards.
We do not sell personal data.
We do not disclose plan-delivery email addresses to advertisers for their independent marketing.
10. Overseas processing
Some service providers may process or store information outside Singapore.
Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that it receives a standard of protection comparable to the protection required under applicable Singapore data-protection law.
11. Protection of information
We use reasonable administrative and technical safeguards, which may include:
- encrypted HTTPS connections;
- restricted database access;
- server-side secret management;
- role-based administrative access;
- hashed or transformed rate-limit identifiers;
- limited retention;
- service monitoring;
- access logging;
- bot and abuse prevention.
No internet service or method of storage is completely secure. We cannot guarantee absolute security.
12. Access and correction
Subject to applicable law and relevant exceptions, you may contact us to ask about personal data we hold about you or request correction of inaccurate personal data.
We may need sufficient information to verify and process a request.
Send requests to: hello@bmi.sg
13. Withdrawal of consent
Where we rely on consent, you may contact us to withdraw that consent.
Withdrawal will not affect processing that occurred before the withdrawal.
Depending on the request, withdrawing consent may mean we cannot continue providing a particular feature, such as email delivery.
14. Children
bmi.sg’s BMI calculator and meal-plan generator are intended for adults aged 18 and above.
We do not knowingly offer adult BMI interpretation or AI meal planning to children through this service.
15. Marketing communications
Requesting a meal plan by email is a transactional request and is separate from marketing consent.
16. External links
The website may contain links to third-party websites.
Their privacy practices are governed by their own policies. We are not responsible for their content, security or privacy practices.
17. Changes to this Policy
We may update this Privacy Policy when the service, providers or legal obligations change.
The “Last updated” date will identify the latest version.
Material changes should be communicated through the website where appropriate.
18. Contact and complaints
Questions, requests or concerns regarding personal data may be sent to hello@bmi.sg
We will review and respond to legitimate privacy concerns within a reasonable period.
You may also have the right to raise a concern with the relevant data-protection authority in Singapore.
