Governance

BodyFit’s governance framework defines how we make decisions, manage risk, and maintain the trust our users place in us. It spans AI, data, privacy, security, and ethics.

BodyFit operates in compliance with applicable UK and international regulations governing data protection, AI, and digital health.

BodyFit identifies, assesses, and mitigates risks across technology, data, AI, and operations to protect our users and our platform.

BodyFit’s AI Governance framework ensures our AI Coach is responsible, explainable, safe, and accountable — especially because it makes recommendations about users’ health and fitness.

BodyFit’s Data Governance framework defines how we collect, store, use, and protect user data — ensuring accuracy, privacy, and lawful processing.

Privacy is foundational at BodyFit. Our Privacy Governance framework ensures user data is protected, user rights are respected, and privacy is built into everything we do.

BodyFit’s Security Programme protects user data and platform integrity through preventive, detective, and responsive security controls.

Responsible AI means building AI systems that are safe, fair, transparent, and accountable — and that serve users’ best interests, not just engagement metrics.

BodyFit maintains audit trails and conducts assurance reviews to verify our governance, security, and AI practices operate as intended.

BodyFit publishes transparency information about our practices, requests, and assurance activities to build and maintain user trust.

BodyFit maintains a comprehensive library of policies and standards that govern our operations, all versioned, dated, and publicly available.

Our ethics statement defines the principles that guide BodyFit’s decisions, especially when technology, data, and health intersect.

The BodyFit Trust Centre is your central resource for understanding our security, privacy, and AI practices — all in one place.

Technical details of how BodyFit secures our platform, infrastructure, and user data against unauthorised access and threats.

If you find a security vulnerability in BodyFit, we want to hear from you. Our responsible disclosure programme ensures reports are handled respectfully.

Detailed guidance on reporting security vulnerabilities to BodyFit and what happens after you submit a report.

BodyFit’s security certifications and compliance attestations demonstrate our commitment to protecting user data.

BodyFit’s Business Continuity plan ensures we can continue operating and serving users during disruptions.

BodyFit’s Disaster Recovery plan defines how we restore services and data after significant incidents.

BodyFit’s Modern Slavery Statement sets out the steps we take to ensure slavery and human trafficking are not present in our business or supply chain.

BodyFit’s Anti-Bribery Policy sets out our zero-tolerance approach to bribery and corruption in all business dealings.

BodyFit’s Whistleblowing Policy provides a safe, confidential channel for reporting concerns about wrongdoing in our organisation.