Privacy policy

Privacy is the deal. This page describes what the imigz.com website collects — which is almost nothing — why, and the choices you have. When the imigz app launches, it will have its own privacy policy covering health and fitness data, held to a stricter standard still. One website feature does handle health data today — the private body-scan beta at /scan — and it is described in Body scans below.

What we collect

• Waitlist email. If you join the waitlist, we store the email address you give us and the time you joined. We use it for exactly one thing: telling you when the app opens. It is never sold, never shared for marketing, and deleted on request.
• One consent cookie. A single first-party cookie (imigz_consent) remembers your cookie choices for up to 180 days. It contains your choice, a random identifier, and a timestamp — no tracking, no profile.
• Consent receipts. When you make a cookie choice, we record it (the random identifier, the choice, and a server timestamp) so we can demonstrate your consent was real. We deliberately do not store your IP address or browser details with it.
• Visitor identification — only with your opt-in. If (and only if) you allow the "analytics & visitor identification" category, we use VisualVisitor, a third-party service that can identify visiting organizations and business contacts, which we use for partnership outreach. It does not load before you consent, it never loads if you decline or send a Global Privacy Control signal, and you can revoke consent at any time from the footer. VisualVisitor may set its own cookies once allowed; its processing is described in its own privacy policy.
• Infrastructure logs. Our host, Cloudflare, processes IP addresses transiently to serve the site and defend against abuse, as every website host does.

Body scans — how we share and disclose them

This section applies only to the private body-scan beta. If you have not been invited to it and accepted its consent screens, nothing here applies to you.

The body-scan beta is for adults 18 and over. The rest of this site is not directed to children under 13; body scanning sets a higher floor because of the kind of data it involves.

When you do a body scan through our Service, we send images of you and other data about you (including gender, height, weight and birth year, but not name or contact info) to Prism Labs Inc. (“Prism”) to make 3D scans of you from head to toe, calculate insights like body composition, and — only if you separately agree — improve Prism’s technology. Prism sends us body insights and measurements, which we use to display body metrics and trends.

Because the 3D scans include rough measurements of face geometry, data in those scans may be considered “biometric identifiers” under laws such as the Illinois Biometric Information Privacy Act (BIPA), and health data under the Washington My Health My Data Act. Neither Prism nor imigz uses the scans to identify you.

Who holds what. The scans containing face geometry are created and held by Prism. imigz never receives them: we do not request, download or store the 3D avatar, the model or texture files, the capture video, or the face geometry, and we have no technical means of retrieving them. What reaches imigz is a set of derived numbers. We ask for your consent before any of this happens because we direct the collection, not because we hold the biometric scans.

What imigz itself stores. Derived numbers only — body fat percentage, lean mass, circumference measurements and the like — tied to your tester code rather than to your name. We do not sell this data, and we do not share it with other testers or with anyone else.

Destruction of face geometry. For known residents of Illinois, subject to any applicable exception under BIPA, Prism will permanently destroy any scans of face geometry when the first of the following occurs: (i) the purpose for collecting such information has been satisfied; or (ii) three years have passed since your last interaction with imigz. To select a destruction method, imigz will take into consideration (i) available technology, (ii) the nature of the data, and (iii) the means by which the data has been stored. imigz may retain other data about Illinois residents, as well as scans and other data about individuals who reside elsewhere, under different retention policies and procedures.

How long imigz keeps your measurements. We keep the derived numbers for as long as you are in the beta and for twelve months after your last scan, and then delete them. You can have them deleted sooner at any time by emailing info@imigz.com — we do not require a reason. When we delete your record we also ask Prism to delete their copy, and we keep a minimal deletion log recording that the request was made and honoured, and which consent versions were in force at the time. That log contains no measurements and no body data; it exists so we can demonstrate both that your consent was properly obtained and that your deletion was carried out.

Prism’s own handling. Prism’s collection, use, disclosure, and storage of the 3D scans and other data is subject to Prism’s own policies, not this Privacy Policy — see Prism’s privacy policy and consumer health data privacy policy.

Your choices. Helping improve Prism’s technology is optional and declining it changes nothing about your scans or results. You can change that choice at any time by emailing info@imigz.com, and we action it against Prism directly. Once body scanning is switched on, the same control appears in a “Your data” panel on the scan page. Deleting a scan from your record does not by itself remove data from Prism’s research database — withdrawing the research consent does.

What we don't do

• Nothing non-essential runs before you consent. No tracking script, identification service, or analytics tool loads unless you opt in — the consent controls enforce this on every page load.
• No advertising cookies, no retargeting pixels, no fingerprinting. We do not sell personal information. Consent-gated visitor identification data is processed by VisualVisitor on our behalf for our own partnership outreach, not for advertising resale.
• No third-party font or CDN calls that leak your IP before consent — fonts are served from our own domain.

Your choices and rights

• Cookie choices: change them any time via "Cookie preferences" in the footer, or clear the imigz_consent cookie in your browser.
• Global Privacy Control: if your browser sends a GPC signal, we honor it automatically as an opt-out of non-essential cookies — no banner, no friction.
• Access and deletion: email info@imigz.com and we'll show you what we hold about you, or delete it. For most visitors that is a single email address. For body-scan beta testers it also includes your body measurements, body composition figures and consent records, and we will send you all of it. We respond to verified requests within 30 days, and to requests under the GDPR, CCPA/CPRA, and similar state laws in the timelines they require.

Children

This site is not directed to children under 13, and we do not knowingly collect their information.

Changes

If this policy changes materially, the effective date above changes with it, and we'll note the change here. We won't quietly weaken it.

August 18, 2026: added the Body scans section covering the private body-scan beta and our use of Prism Labs.

August 31, 2026: clarified that the scans containing face geometry are held by Prism and never received by imigz; added a retention period for the measurements imigz does hold; corrected the opt-out route while scanning is not yet live; and expanded the access and deletion description to cover beta testers.

Contact

imigz · info@imigz.com