Privacy Policy

How AprilNEA LLC processes the personal information of Boji (Lean Muscle Club) users.

Last Updated: October 22, 2026
Effective Date: October 22, 2026

中文版

AprilNEA LLC ("we", "us" or "our") is the developer of Boji (also known as "薄肌", "薄肌俱乐部" and "Lean Muscle Club"). This Privacy Policy (this "Policy") describes how we process your personal information when you use Boji and the rights available to you.

Please read this Policy carefully before you use Boji. Provisions concerning sensitive personal information, cross-border transfers of personal information and other matters that materially affect your rights are shown in bold.

This Policy is published in English and Chinese. In the event of any inconsistency, the English version prevails.

1. Scope

1.1 This Policy applies to the applications, websites and related online services that we provide under the names above (collectively, the "Services").

1.2 This Policy does not apply to products or services provided by third parties. Their processing of your personal information is governed by their own privacy policies.

2. Personal Information We Collect and How We Use It

2.1 We process your personal information lawfully, fairly, in good faith and only to the extent necessary for the purposes described in this Policy. The table below sets out the main categories of personal information and the purposes for which we process them.

CategoryPersonal informationPurpose
Account informationAccount identifiers, contact details and sign-in credentials, including information provided by a third-party account that you use to sign inRegistration, sign-in, authentication and service notices
Membership and service informationMembership details, records of your acknowledgment of applicable rules, and the content that you submit or create through the ServicesProviding, administering and improving the features that you use
Records that you syncThe exercise, sleep and body-related records that you choose to syncSyncing them across your devices and displaying them to you
Device and service informationDevice and service identifiers, such as notification tokens; device information; log informationDelivering notifications, keeping content that you add to your devices up to date, and operating the Services
Security and diagnostic informationLog information and diagnostic informationProtecting accounts and the Services, and finding and fixing faults
CommunicationsContact details and the content of communicationsHandling your inquiries, requests and complaints

2.2 You can use the basic features of the Services without an account. Content that you log in the app is stored locally on your device by default and is not transmitted to us unless you turn on cloud sync or use a feature that requires it. If you decline to provide personal information that is necessary for a feature, you will not be able to use that feature, but you can continue to use the other features.

2.3 Data that you authorize the app to read from a health data platform, such as Apple Health, is not transmitted to our servers without your separate consent and is not used for advertising, marketing or data mining.

2.4 Records uploaded through cloud sync constitute sensitive personal information. If disclosed or used unlawfully, they could harm your personal dignity or personal safety. We process them solely for the purpose of syncing and obtain your separate consent before you turn on cloud sync. You may turn off cloud sync at any time.

2.5 Under applicable law, we may process your personal information without your consent where the processing is necessary to enter into or perform a contract to which you are a party, to fulfill a statutory duty or legal obligation, or in other circumstances provided by law.

2.6 If the purpose or method of processing or the types of personal information change, we will inform you in advance and obtain your consent again where required by law.

3. Cookies and Similar Technologies

We do not use cookies, advertising identifiers or similar technologies to track you or to deliver advertising. Our websites may store settings in your browser that are necessary for the websites to function.

4. Entrusted Processing, Disclosure, Transfer and Publication

4.1 We do not sell your personal information, and we do not disclose it for targeted advertising.

4.2 We engage third parties ("processors") to provide cloud computing, hosting and error monitoring services. The names, countries or regions, categories of personal information processed and purposes of processing of our processors are set out in the Third-Party Data Sharing List. We agree with each processor on the purpose, method and protection obligations of processing, and we supervise their processing activities.

4.3 We do not disclose your personal information to other controllers or make it public, except as described in Section 4.5, with your separate consent, as required by laws or regulations, for litigation or arbitration, or at the request of administrative or judicial authorities.

4.4 If we need to transfer your personal information because of a merger, division, dissolution, bankruptcy or similar event, we will inform you of the name and contact details of the recipient and require the recipient to continue to perform the obligations under this Policy.

4.5 Certain features of the Services rely on services provided by the operator of your device's platform, such as notification and digital wallet services. When you use such a feature, we exchange with that operator the personal information necessary to provide the feature, such as device and service identifiers. The operator processes that information under its own privacy policy. The operators are set out in the Third-Party Data Sharing List.

5. Cross-Border Transfers

The servers of the Services are located in the United States, and our processors may store some personal information in other countries or regions. Wherever you are located, your personal information will be stored and processed in the United States and those other countries or regions, whose data protection laws may differ from the laws where you are located. We take the protective measures required by applicable law.

6. Storage and Security

6.1 We retain your personal information only for the shortest period necessary to achieve the purposes of processing, unless laws or administrative regulations provide otherwise. Upon expiry of that period, we delete or anonymize your personal information.

6.2 We take reasonable administrative and technical measures to protect your personal information against unauthorized access, disclosure, alteration or loss. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal information.

6.3 If a personal information security incident occurs or may occur, we will take remedial measures immediately and notify you and the competent authorities as required by applicable law.

6.4 If we discontinue the Services, we will stop collecting your personal information, notify you, and delete or anonymize your personal information.

7. Your Rights

7.1 Subject to applicable law, you have the right to access, copy, correct, complete and delete your personal information; to restrict or object to its processing; to withdraw your consent; to close your account; to receive a copy of your personal information or request its transfer; and to ask us to explain our processing rules.

7.2 You may close your account in the app or by contacting us as set out in Section 10. We will complete the closure within 15 business days after verifying your identity and delete or anonymize your personal information, unless laws or administrative regulations provide otherwise. A closed account cannot be restored.

7.3 Withdrawal of consent does not affect the validity of processing carried out on the basis of your consent before the withdrawal.

7.4 You may exercise these rights by contacting us as set out in Section 10. We may need to verify your identity and will respond within 15 business days. If we decline your request, we will explain our reasons; you may ask us to reconsider, lodge a complaint with the competent authority or bring legal proceedings. We will not discriminate against you for exercising your rights.

8. Minors

The Services are intended only for adults aged 18 or older. We do not knowingly collect personal information from minors and will promptly delete any such information that we discover.

9. Changes to This Policy

We may revise this Policy and will post the revised version on this page. For material changes, we will notify you prominently before they take effect and obtain your consent again where required by law. We will not reduce your rights under this Policy without your explicit consent.

10. Contact Us

If you have any questions, comments or complaints about this Policy, or wish to exercise your rights, please contact us. We will respond within 15 business days.

  • Email: [email protected]
  • Mail: AprilNEA LLC, 28 Geary St STE 650 Suite #344, San Francisco, California 94108, United States

11. Jurisdiction-Specific Provisions

This Section applies in addition to the rest of this Policy to users located in the following countries or regions. If this Section is inconsistent with the rest of this Policy, this Section prevails.

11.1 Mainland China

Your personal information will be transferred to, stored in and processed in countries or regions outside the People's Republic of China (the United States and the countries or regions set out in the Third-Party Data Sharing List). We do not process your personal information within the People's Republic of China. We will obtain your separate consent to this transfer as required by the Personal Information Protection Law of the People's Republic of China. The names, contact details, purposes of processing and categories of personal information of the overseas recipients are set out in the Third-Party Data Sharing List. You may exercise your rights under Section 7 and lodge a complaint or report with the departments responsible for personal information protection.

11.2 European Economic Area, United Kingdom and Switzerland

  1. AprilNEA LLC is the controller of your personal data.
  2. Our legal bases for processing your personal data are:
    • performance of our contract with you: accounts, membership and service notices;
    • your consent: cloud sync;
    • our legitimate interests: security and troubleshooting; and
    • compliance with legal obligations.
  3. You also have the right to restrict and to object to processing, and to lodge a complaint with your local supervisory authority.
  4. We transfer your personal data to the United States subject to appropriate safeguards under Chapter V of the GDPR, a copy of which you may request from us.

11.3 United States

  1. In the preceding 12 months, we collected the following three categories of personal information from you and your device, and disclosed them for business purposes only to processors and to the platform operators described in Section 4.5:
    • identifiers;
    • internet or other electronic network activity information; and
    • sensitive personal information: sign-in credentials and cloud sync records.
  2. We do not sell or share personal information, engage in targeted advertising, or use sensitive personal information to infer characteristics about you.
  3. You have the right to know, access, delete and correct your personal information, to designate an authorized agent to make requests on your behalf, and to appeal our decisions.
  4. Because we do not track you across third-party websites, we do not change our processing in response to "Do Not Track" or Global Privacy Control (GPC) signals.