Simple by design.
Effective July 17, 2026
Who operates BodyReply
MIDWEST AUTO & COMMERCE LLC, a Missouri limited liability company, operates BodyReply. In this notice, “BodyReply,” “we,” “us,” and “our” refer to MIDWEST AUTO & COMMERCE LLC when it provides the BodyReply website, apps, and related services.
Information you provide
The BodyReply early-access form collects your email address, the optional interest category you select, the page that referred your submission, and the time of submission. The product alpha may also receive your sign-in identity, device name, and the health-data permissions you choose to grant.
Connected health data
When you connect a provider or pair a phone, BodyReply may receive authorized health and fitness records such as glucose, sleep, heart rate, HRV, activity, workouts, body measurements, blood pressure, or oxygen saturation. The exact data depends on the provider permissions you approve. BodyReply does not ask for your provider password.
Information generated by the service
We may create normalized health records, daily summaries, predicted responses, wellness scores, recommendations, connection logs, and other inferences from the information you authorize. These outputs can be incomplete or inaccurate and are provided for general wellness and educational use.
How we use information
We use information to operate the alpha, synchronize connected sources, build your personal timeline, calculate summaries, generate wellness insights, secure the service, troubleshoot errors, manage early access, improve reliability and models, comply with law, and communicate relevant product updates.
Security and provider connections
Provider access and refresh tokens are stored server-side and encrypted at rest. Native device pairing tokens are stored as one-way hashes on the server and should be protected in the phone’s secure keychain or keystore. No system can guarantee absolute security, and the alpha should not be used as the only record of important health information.
Sharing and retention
We do not sell personal health data or use it for targeted advertising. We may disclose information to infrastructure, analytics, security, communications, and professional service providers that help us operate BodyReply; when you direct or consent to the disclosure; in a business transaction; or when required to protect users, the service, our rights, or comply with law. Connected data is retained while needed to operate the alpha, until you disconnect and delete a source, or as required by law.
Your choices
Provider access is opt-in and may be revoked. Disconnecting a source removes its stored BodyReply connection and imported records. You may also manage permissions in Apple Health, Health Connect, or the provider’s own settings. To request access, correction, or deletion, email privacy@bodyreply.com. We may need to verify your identity before fulfilling a request.
Health and regulatory status
BodyReply is currently a consumer wellness alpha and is not presented as a covered healthcare provider, health plan, medical record system, or emergency service. Product capabilities and regulatory obligations will be reviewed before broader release.
Children
BodyReply is not directed to children under 13, and the alpha is intended for adults. We do not knowingly collect personal information from children under 13.
Contact
Contact MIDWEST AUTO & COMMERCE LLC at privacy@bodyreply.com. The company is organized in Missouri, United States.
Changes
This notice will evolve as the BodyReply product develops. Material changes will be reflected on this page with a new effective date.