your progress photos, on your phone, and nowhere else.
Bearing Log keeps a record of what your body actually looks like over time. Three frames a session, your own measurements next to them, and the dates. That is the whole product.
Everything sits in the app's own storage on your iPhone. There is no account, no server, and no upload step, so there is nowhere else for it to end up.

Three frames, the same mark, every week
Front, side, back. The capture screen puts the last session's frame under the live camera at low opacity so you stand where you stood before, and a level tells you when the phone is straight. Same distance, same light, same pose. That is what makes two photos worth comparing at all.
Weight, body fat, and lean mass come in from Apple Health if you allow it, or you type them yourself. They attach to the session and stay attached.
Any two sessions, side by side
Pick two and the app sets them against each other with a slider between them, plus a table of what moved and by how much. Eight weeks apart reads differently than the bathroom mirror does at six in the morning.

Numbers reported, not judged
Trends draw what you logged and stop there. An arrow says which way a number went. It does not tell you that up is bad or down is good, because the app has no idea what you are training toward, and pretending otherwise is how these apps start lying to you.
Gaps show as gaps. A stale reading says it is stale. The run counts the weeks you actually showed up, and that is the only thing it rewards.

What it doesn't do
no account
Nothing to sign up for. There is no server to sign up to.
no feed
Nobody sees these. Not other users, not us, not a moderation queue.
no coaching
The app has no opinion about your body and never offers one.
no scoring
Your food, your workouts, and your weight are not graded here.
no nagging
One reminder on the cadence you pick, or none at all. It never guilts you for a gap.
no subscription trap
Nothing behind a paywall that was working yesterday.
Privacy, stated plainly
The app makes no network requests. No telemetry, no crash reporting, no third-party SDKs, and the transport security settings are configured so one cannot quietly appear in a later build. Photos and records are written with complete file protection, which means that while your phone is locked they are unreadable, including by the app itself.
Export gives you the originals plus JSON and CSV whenever you want them. Delete removes the files. Since nothing was ever sent anywhere, there is no copy elsewhere to ask about. The full policy has the detail.