Privacy Policy

Leanmend is a personal tracking app for people on a weight-loss journey. Your health information is sensitive, so we collect as little as we can, never sell it, and let you delete it at any time. This policy explains what we collect, why, and the choices you have. It also serves as our Consumer Health Data Privacy Policy.

Information we collect

Account information. Your email address and a password. Passwords are stored by our authentication provider in hashed form; we never see them.

Health and wellness information you enter (“consumer health data”). This includes the medication name and dose you choose to record, injection days and sites, weight, starting and goal weight, protein intake and food notes, and how you feel (for example nausea, tiredness, appetite, digestion and mood), plus any notes you add. You decide what to enter.

Profile preferences. An optional display name and your protein goal.

Payment information. If you choose Premium, payments are processed by Stripe. We do not receive or store your full card number. We receive limited details such as your subscription status, plan, and renewal date.

Technical information. Basic information needed to run and secure the service, such as IP address, browser type, and error logs, kept by our hosting providers for a limited time.

How we use your information

• To provide the app: save your logs, show your dashboard, charts and progress.
• For Premium members: to generate insights, the doctor-ready report and site rotation, using only your own logs.
• To manage your account and subscription, send service emails (like confirming your email or resetting your password), and respond to you.
• To keep the service secure, prevent abuse, and fix problems.
• To comply with the law.

We collect and use your health information only to provide the features you ask for, and only with your consent, which you give when you create your account. You can withdraw consent at any time by deleting your account.

What we never do

• We never sell your personal information or health information.
• We do not use your health information for advertising, and we do not place advertising or tracking pixels inside the logged-in app.
• We do not share your logs with employers, insurers, or data brokers.
• We do not provide medical advice, and Leanmend is not a medical device.

Who we share information with

We share information only with service providers that help us run Leanmend, under contracts that limit their use of your data to providing their service to us:

• Lovable / Supabase: app hosting, database and sign-in.
• Cloudflare: content delivery and security for the website.
• Stripe: payment processing for Premium.
• Google: ad measurement on public pages only (see “Cookies and ad measurement”).

We may also disclose information if required by law or to protect the rights and safety of our users, or as part of a business transfer, in which case this policy will continue to apply to your information.

Cookies and ad measurement

On our public pages (the homepage, pricing, FAQ, legal pages, and the sign-up page) we use the Google Ads tag to measure whether our ads lead to sign-ups. It may set cookies and receive technical information such as the page visited and an ad click ID. It never runs inside the logged-in app, never receives your health information or logs, and we do not send your email address to Google for advertising. You can block these cookies in your browser settings without affecting how Leanmend works.

Where your data is stored

Leanmend is operated from Brazil and our providers may store and process data in the United States and other countries. We use providers that apply industry-standard safeguards to international transfers.

How long we keep it

We keep your information while your account is active. When you delete your account in Settings, your profile and all dose, weight, protein, and symptom logs are deleted immediately from our database. Backups held by our providers are overwritten on their normal schedule. Payment records may be kept by Stripe as required by tax and financial laws.

Your rights and choices

Depending on where you live (including California, Washington, Nevada, Colorado, Connecticut, Virginia and other U.S. states, and Brazil under the LGPD), you may have the right to:

• access the personal and health information we hold about you, and get a copy of it;
• correct inaccurate information;
• delete your information (you can do this yourself in Settings);
• withdraw your consent to our collection of your health information;
• know which third parties receive your information;
• appeal a decision we make about your request.

To make a request, email support@leanmend.com. We will verify your request using the email on your account and respond within the time required by law (generally 30 to 45 days). We will not discriminate against you for using your rights.

Security

Your data is encrypted in transit (HTTPS) and protected at rest by our database provider. Each account can only read its own records. No system is perfectly secure, but if a breach affecting your information ever occurs, we will notify you and, where required, regulators such as the U.S. Federal Trade Commission, as the law requires.

Children

Leanmend is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

If we make material changes, we will update the date above and notify you in the app or by email before the changes take effect. We will ask for your consent again before using health information in a new way.

Contact us

Questions or requests? Email us at support@leanmend.com. We aim to reply within 30 days, and sooner for urgent privacy or security matters.