Privacy Policy

1. What this covers

[Legal entity name] ("LeanStreak", "we", "us") is the controller of the personal data described here. This policy covers the LeanStreak app and the services behind it.

LeanStreak holds health and fitness information about you. We treat all of it as sensitive, whether or not the law where you live calls it that.

2. What we collect

Account: your email address, and the name and profile details a sign-in provider gives us if you sign in with Facebook, Google, or Apple. We never receive or store your password, and we never read your friends, posts, or photos on those services.

About your body: age, sex, height, weight, body fat when you measure it, activity level, your goal, and your answers to LeanStreak’s health questions.

What you log: meals and their foods, workouts and their sets, progress photographs, the transcripts of what you dictate, and the foods and meals you define yourself.

Technical: device and app version, crash reports, and request logs. Request logs record which route was called and how long it took — never what you dictated, the photographs, or your health values.

3. Why we use it

To run LeanStreak for you: to work out your calorie and macro targets, read what you dictate into entries, show your day and your history, and keep your data safe and backed up.

To keep LeanStreak working and secure: diagnosing faults, preventing abuse, and enforcing our terms.

To meet legal obligations, including keeping the record of when you accepted these documents and which version of them you were shown.

We do not sell your personal data, we do not share it with advertisers, and we do not use your health data for advertising. Where LeanStreak reads from Apple Health or Google Health Connect, that data is used only to show and improve your own logs, as those platforms require.

4. AI processing

Turning speech into text happens on your device. The resulting text, and photographs of meals or of handwritten workouts, are sent to our servers and processed by an AI model running inside our own cloud account, in the region we operate in.

Prompts and outputs are not used to train the model, and are not shared with the model’s provider for that purpose.

5. Who else sees it

Amazon Web Services hosts LeanStreak and processes data on our instructions. Apple and Google process subscription payments and deliver push notifications. A sign-in provider you choose confirms your identity to us.

We disclose data otherwise only when the law requires it, and we will tell you when we are allowed to.

6. How it is protected

Everything is encrypted in transit and at rest. Your data is separated from other users’ by your account identity on every request. Progress photographs are private: they are never public, and the app reaches them through links that expire within minutes.

Access inside LeanStreak is limited to the people who need it to run the service.

7. How long we keep it

We keep what you log for as long as your account exists, because your history is the point of the app.

When you delete your account, you are signed out on every device and your account is removed 30 days later. Until then you can sign back in and cancel; nothing is removed in the meantime.

After those 30 days we delete your profile, targets, entries, measurements, photographs, the foods, exercises and meals you created, the record of which terms you accepted, and your sign-in identity. We keep only a record that an account was deleted and when, which does not include your name, email address, or anything you logged.

Copies of deleted data can remain in our encrypted backups for up to [35] days after it is deleted, until those backups expire. They are not used for anything else in that time.

[Counsel to confirm what must be retained after deletion — including the record of accepted terms — and for how long.]

8. Your choices

You can see and correct everything on your profile from inside the app, export all of your data, and delete your account. Once the 30 days after you ask to delete it are over, deletion is permanent.

Depending on where you live you may also have the right to object to or restrict certain processing, to complain to a data protection authority, and to ask us not to sell or share your personal information — LeanStreak does neither. Write to [privacy email] to exercise any of these.

9. Children

LeanStreak is not for children under [minimum age]. We do not knowingly collect their data. If you believe a child has an account, write to [privacy email] and we will remove it.

10. Changes

If we change this policy we will ask you to accept the new version in the app, and the record keeps which version you were shown and when you agreed to it.

11. Contact

Privacy questions, and requests about your data: [privacy email]. Postal address: [registered address].