Last updated: 20 September 2026
Privacy policy
This page says what LeanFood collects in the app and on this website, why we keep it, and how you can delete it. We do not sell personal data and we do not run advertising networks.
Who we are
LeanFood is the controller of personal data for the LeanFood mobile app and this marketing and account website. The same account works in the app and here. For a privacy request, email info@lean-food.com, or use the account page on this site or settings in the app.
Data we collect in the app
Account: email and an optional name. You may also sign in with Apple or Google. Targets: height, weight, age, sex, activity level and pace — we use these to run the calorie plan. Logs: meals, water and weigh-ins. A profile photo (avatar) is stored on our API if you set one. Progress photos stay on your device. Meal photos you capture or pick for scanning, and short voice clips if you log a meal by speaking. App language and a push notification token. Subscription status from the App Store or Google Play. We do not store your store payment card.
Data we collect on this website
If you only browse, we set a language cookie so the site stays in your language, and our host may record technical logs such as IP address, browser and the page requested. If you log in we keep session cookies so you stay signed in, and we show your email, name and subscription status from the same account as the app. A password reset sends a short-lived code to your email.
Cookies
A language cookie (leanfood-locale) remembers the language you pick for up to one year. After login we set httpOnly session cookies for access and refresh tokens, plus a small signed-in hint cookie. These are needed for the site to work. We do not use advertising or tracking cookies. Clearing cookies in your browser means you pick a language and sign in again.
Photos and AI
When you scan a meal, the photo — or a short voice clip if you log by speaking — is sent to a third-party AI service to estimate a name, calories and macros. LeanFood does not keep a lasting copy of that photo or clip on our servers; a copy may stay on your device with the meal. We may keep the text result of the analysis. This is not a medical diagnosis; the numbers are estimates.
Health data
If you allow it, we read steps, workouts and active calories from Apple Health or Health Connect and save them to your LeanFood diary on our servers so they show in the app. You can revoke that in the operating system; turning the integration off also removes the Health row from your log. We do not use health data for ads and we do not sell it.
Sign-in providers
Email and password accounts live on our API; passwords are stored hashed. Continue with Google or Apple sends us an identity token so we can open the same account. Google and Apple handle that sign-in under their own policies.
Processors
Identity, meals and notifications live on our API. A third-party AI service analyses meal photos and voice clips and may process them outside the EU under that provider’s terms. RevenueCat and the app stores handle payments. In the app, PostHog (EU host) may collect product analytics — screens and usage events, not ads, and not session replay. We do not send sex, diet, goal or health readings to PostHog. The website does not run PostHog or ad pixels; there is no cookie banner because the site only uses language and session cookies. You stop app analytics by deleting the app or your account. The website is served by our hosting provider, which may process request logs. Data may be processed in Europe or another region we operate in.
What we do not do
We do not sell personal data. We do not use health or meal data to advertise to you. We do not run third-party ad pixels on this site.
Children
LeanFood is not directed at children under 16, and we do not knowingly collect their data. If you believe a child created an account, contact us and we will delete it.
Your rights
You can correct your profile (name, height, weight, age, sex, targets) in the app. You can delete your account from this site’s account page or in the app. After you ask us to delete it, we remove meals, profile and photos on the account within 30 days. Cancel a store subscription separately in the App Store or Google Play. For a copy of your data or other requests, email info@lean-food.com.
Retention
Meal and profile data stay while the account does. Session cookies expire or are cleared when you log out. The language cookie stays until you clear cookies or change language. Technical host logs are kept only as long as needed for security and operations.
Changes and contact
We may update this text as the product changes. The date at the top is the latest version. Contact LeanFood at info@lean-food.com, or from the account page on this site or settings in the app.