Privacy,
in plain language.

Your scans on your Mac

The current Body4D Mac app reads the scans you choose and runs reconstruction, organ recognition and supported research simulations locally. Your scan files and derived anatomy are not sent to Body4D’s website or a cloud AI service for this processing.

Local storage and exports

Studies, derived results, interrupted jobs and app-managed backups are stored in the Body4D folder under your user Library/Application Support. Saved views and recent-folder preferences are also kept locally. Scan metadata can contain identifiers from the original DICOM files; local processing does not automatically make that data anonymous.

You control any images or files you export and share. Check exports for identifying details before sending them to anyone. Copies in a cloud-synced folder, operating-system backup or another service are governed by the settings and policies of that destination.

When the app needs the internet

Installing optional organ-recognition components downloads software and model weights. Download providers receive normal connection information, such as your IP address and the requested files; your scans are not part of those downloads. Once the required components are installed, scan processing runs on the Mac.

Choosing Send feedback opens the website. You decide what to submit; the app does not attach your scans to a feedback message.

Browsing and forms

This website has no scan or attachment upload feature. Please do not send medical records or sensitive health details through its forms. Its demonstration videos are prerecorded, and its research illustrations use synthetic examples rather than data inferred about you.

When you browse

Cloudflare hosts and protects the site and processes technical request information, such as IP addresses, browser information and requested pages or files, to deliver and secure it. Body4D does not add advertising trackers or third-party analytics. Website fonts and demonstration media are served with the site.

When you send an enquiry

The contact form sends your name, email address, selected topic and message to Body4D’s owner so your enquiry can be read and answered. The same applies to Nasal Lab collaboration enquiries. Include only what is needed to explain your question.

When you request the beta

The beta form sends your name, organization, role, email address and reasons for requesting access. These details are used to review your application and, if approved, email your invitation. A beta request is not a scan upload or a subscription to marketing emails.

Spam protection and browser storage

Form fields are sent when you submit. Cloudflare Turnstile can run when a form loads and processes technical signals such as your IP address, browser information and site origin. All public forms share a limit of one accepted submission per minute and three per rolling 24 hours per IP address. The service stores keyed hashes of IP addresses with submission times to enforce these limits; raw IP addresses are not stored in the form database. It also keeps a random submission identifier and a keyed fingerprint for 24 hours so a retry cannot send a duplicate email. Submitted messages and approval links are not written to application logs.

Body4D’s website does not save form drafts in its own cookies or browser storage. Your browser may remember form entries through its autofill settings. Cloudflare’s security services may use necessary cookies or other browser mechanisms under its own policies. See the Turnstile Privacy Addendum.

Service providers

Cloudflare provides website hosting, security, Turnstile, the form-processing service, temporary beta-request storage, a temporary email delivery queue and form rate limits.

Resend delivers enquiry and beta-request notifications to the owner and approved beta invitations to applicants. It receives the recipient’s email address and the email contents, including the form details needed for the owner to respond or review an application. Mailbox providers also process email when delivering and storing messages.

These services may process information in countries other than your own and have their own retention and privacy practices. Read Cloudflare’s Privacy Policy, the Turnstile Privacy Addendum and Resend’s Privacy Policy. The provider acknowledgements in our footer do not mean your scans are sent to those providers.

How long details are kept

Scans and studies

Local studies stay on your Mac until you delete them. Saved studies provides deletion of app-managed studies, including interrupted jobs and app-owned backups. Original source scans, installed recognition components, exported copies and operating-system backups are kept separately and are not removed by that action.

Enquiries and email

After a form is safely saved, the website confirms receipt while email delivery runs in the background. Contact messages and beta-request notifications are temporarily stored in a private delivery queue. Their queued contents are deleted as soon as the email provider accepts them. Failed deliveries can retry for up to 23 hours; expired queue contents are removed by scheduled cleanup, normally within another minute. Messages delivered to the owner’s inbox may remain in email history to answer and follow up on your enquiry. There is no automatic 14-day deletion rule for email. Email services and their backups have their own retention practices.

Beta applications

Requests expire after 14 days. Expired database records are removed by scheduled cleanup, normally within another minute. After an invitation is successfully sent, the applicant’s name, organization, role, email and reasons are immediately cleared from the active database record; a one-time approval marker remains until expiry. Requests with failed or unfinished delivery keep their details until cleanup.

Database cleanup does not delete the owner’s notification email, delivered invitations or provider backups. Those copies follow their separate email or backup retention practices.

Your choices & contact

You can browse without submitting a form. To manage scans, use the app’s local study controls and your own file and backup settings; Body4D’s website has no copy of those local scans to delete.

For privacy questions, or to request access, correction or deletion of details you submitted through this website, contact Body4D or reply to a Body4D email. We may need to verify that a request concerns your information. Please do not send scans, medical records or sensitive health details to make a privacy request.

This page describes the current app and website. It will be updated when their data handling changes; the date above identifies this version.

Demo scan sources & attribution

Purpose & safety

Body4D is for exploration, understanding and research. It is not a diagnostic tool and does not provide medical advice, validated surgical planning or predictions of treatment outcomes. Labs are separate from the core app beta.

Use only CT scans already taken for proper medical reasons. Never get a CT scan just to use Body4D. CT uses ionizing radiation. Read about CT safety.