BioScout Web · last updated 16 October 2026 · back to the app
BioScout is made and run by one person: Dr. Basílio Gonçalves, Vienna, Austria. For anything about your data write to basilio.goncalves7@gmail.com.
Everything stays on your device. Videos you record or open are analysed on the device and are never uploaded. Profiles, sessions, meals, diary, sleep, weight, vitals, water and coffee, cycle, assessments and imported activities are kept in your browser's local storage, and meal photos in its local database. None of this is sent to BioScout or anyone else (the only thing the app sends without an account is the anonymous "online now" signal below). Clearing the browser's data or uninstalling the app deletes it; the Export button makes a file you can keep.
While the app is open, it joins a live "online now" channel on Supabase Realtime (servers in Frankfurt, EU) with a random code made fresh on every visit. The code is not linked to an account, a device or a person, is not written to any database, and disappears when the page closes. It only lets the app's maker see how many copies of BioScout are open right now (for example, a lamp that lights up in the lab when someone starts using it). As with any web connection, Supabase sees the connection's IP address while it is open; BioScout does not keep it. Legal basis: legitimate interest in knowing that the service is being used, with no personal data kept.
If you create an account, these are stored on our server:
Not uploaded: recorded videos, motion curves, meal photos, the help chat, and any other athlete on a shared device.
Why and on what basis. To give you the account and keep your devices in sync. Some of this is health data; it is stored because you ask for it by creating an account and syncing, which is your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)). You can withdraw it at any time by deleting your account.
Who can see it. Your synced logs: only you — not even friends see them. Every table is protected so a signed-in person can read their own rows and nothing else. BioScout does not sell data, show ads or use trackers or analytics.
A post is a picture or short clip you choose and up to 42 characters, shown with your username. A profile picture is optional: if you add one it is cropped to a small square, stored with your posts' pictures, shown next to your name to the same people who can see your posts, and deleted with your account. If your account is open, anyone signed in to BioScout can see your posts and your name; if it is private, only you and your friends can. Your health log is never part of a post unless you put it there yourself.
Friends are mutual: one person asks, the other accepts, and either can end it. A friend sees your posts and your username and display name, even when your account is private — never your training or health logs. Anyone signed in can find you by searching your username (only the username and display name are shown). A username is chosen once and cannot be changed.
Post only what you have the right to share, never other people without their consent, and nothing illegal, hateful or sexual. Posts and accounts that break this can be removed. You keep the rights to what you post and allow BioScout to show it in the app. Deleting a post deletes its picture or clip.
On Supabase (Supabase, Inc.), which hosts the database, the logins, the post media and the sign-up emails, on servers in Frankfurt, Germany (EU). The app itself is served by GitHub Pages; it does not send your data there.
Imports from Strava or from a video link run through a small helper program on your own computer; what they fetch is then stored like everything else you log.
Until you delete it. Deleting an entry deletes it on every synced device. Delete my account (Edit profile → Account) removes your login, your account, every synced record and all your posts and their media from the server at once. Data on your own devices stays unless you tick the box to erase it there too.
You can see and export your data (Edit profile → Export), correct it in the app, delete it or your whole account in the app, and withdraw your consent by deleting your account. For anything else — a copy of what the server holds, a question, a complaint — write to the address above. You can also complain to the Austrian Data Protection Authority, dsb.gv.at.
You must be at least 14 to create an account. For younger athletes a parent or guardian must agree, and should manage the account.
BioScout is a training tool, not a medical device. It does not diagnose, treat or give medical advice; its figures are estimates from video. Ask a professional about anything health-related.
When this notice changes, the app asks you to agree again before you continue.