Legal
Last updated: 22 July 2026
bodyrepair.app is the data controller for the personal information you provide through the platform. You can reach us at hello@dmst.co.uk.
We collect account information (name, email), clinical screening responses, somatic mapping selections, plan logs, consent records, communications with the AI consultant, and payment metadata provided by our payment processor. We do not store full payment card numbers.
We rely on your explicit consent for clinical data, on contract for delivery of your subscription, and on legitimate interests for operational analytics, security monitoring and abuse prevention. Special-category health data is processed on the basis of your explicit consent and for the provision of health-related services.
Your data is used to personalise clinical, nutritional and training protocols, to enforce safety guards, to enable practitioner sharing where you request it, to fulfil orders with botanical partners, and to comply with our legal obligations. We do not sell your data.
We share data with infrastructure providers, our AI gateway, payment processors and, where you explicitly authorise it, clinicians via secure shared links. Every processor is bound by a data-processing agreement.
Clinical records are retained for the duration of your account and for a reasonable period afterwards to meet clinical audit and legal requirements. Consent-ledger entries are retained as an immutable audit trail.
Under UK GDPR you have the right to access, correct, port or erase your data, to restrict or object to processing, and to withdraw consent. You may exercise these rights via your profile or by writing to hello@dmst.co.uk. You may lodge a complaint with the Information Commissioner’s Office.
Data is protected by row-level access policies, encrypted transport, isolated server-side execution for privileged actions, and an immutable compliance ledger for clinical writes.
Some processors operate outside the United Kingdom. Where this occurs we rely on adequacy decisions or the UK international data-transfer addendum to standard contractual clauses.
Privacy questions should be sent to hello@dmst.co.uk.