Leanbud
Privacy Policy
This policy explains what data Leanbud collects, how it's used, who it's shared with, and the controls you have. It covers the Leanbud apps for iOS and Android and this website.
1. Data we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account | Email address, display name, and a sign-in identifier from Apple or Google if you use them. Passwords are handled by Firebase Authentication; we never see them. | To sign you in and keep your data in sync across devices |
| Profile | Sex, age, height, current and target weight, activity level, fitness goal, dietary preferences, allergies, units, theme and notification preferences | To calculate your daily calorie and macro targets and personalise the app |
| Food logs | Meal names, calories, protein, carbs and fat, ingredients, how the meal was logged (photo, description, label, barcode, search or manual), barcode, photo, time | The core feature: your tracking history |
| Meal descriptions | Text you type to describe a meal or ask for portion suggestions | To estimate the meal's nutrition |
| Photos | Meal and nutrition-label photos you take or choose for AI analysis | To identify the food and estimate its nutrition |
| Water and weight | Amounts of water with times; weight entries with dates | Core features |
| Subscription | Whether you have Leanbud Pro, the plan, and its renewal or expiry date | To unlock Pro features |
| Device | Push notification token, platform (iOS or Android) | To send the reminders you've turned on |
| Diagnostics | Crash reports, performance data, basic usage events | To fix bugs and decide what to improve |
We do not collect your precise location, contacts, advertising identifier, browsing history, Apple Health or Health Connect data, or payment card details. Payments are handled entirely by Apple and Google.
2. How your data is stored and processed
- Account, profile and logs are stored in Google Firebase (Authentication and Cloud Firestore) in the United States. A copy is also kept on your device so the app works offline.
- Photos are uploaded to Google Cloud Storage in the United States. Our server sends them to Anthropic's Claude API to estimate nutrition and returns the result to the app. Photos are kept in your account until you delete your account.
- AI features send only what's needed to Anthropic: the photo or text for that request, and for Pro weekly insights, a summary of that week's logged totals. Anthropic does not use data sent through its API to train its models (Anthropic Trust Center).
- Barcode scans and food searches send the barcode number or search text to Open Food Facts to look up the product. Nothing else about you is sent.
- Diagnostics are collected by Firebase Crashlytics and Firebase Analytics.
- Subscriptions are managed by RevenueCat, which receives your account ID and purchase status, but not your name, email or food data.
All traffic between the app and our servers is encrypted in transit, and Google encrypts the data it stores.
3. Who we share data with
We only share data with the service providers below, to run the features described above. We have no advertising partners, and we never sell or rent your data.
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase | Sign-in, database, storage, push notifications, analytics, crash reporting | Most categories above |
| Anthropic | AI meal analysis and weekly insights | Photos, meal descriptions, weekly totals |
| Open Food Facts | Product lookup | Barcode numbers and search text |
| RevenueCat | Subscription management | Account ID, purchase status |
| Apple and Google | Payments, sign-in, push delivery | What you provide to them directly, under their own policies |
4. Your rights and controls
- Access and export: email help@leanbud.app for a copy of your data.
- Correct: edit your profile, goals and any log entry in the app.
- Delete: in the app, go to Settings → Delete account. This permanently deletes your account, logs, photos and push tokens. It cannot be undone.
- Notifications: turn reminders on or off individually in Settings.
- AI features: these are optional. Manual entry, barcode scans and food search work without sending anything to Anthropic.
- EEA and UK (GDPR): you can request access, correction, deletion, restriction or portability, or object to processing, by emailing us. We reply within 30 days.
- California (CCPA/CPRA): we do not sell or share personal information for advertising. You can request access or deletion as above.
5. Children
Leanbud is for people aged 13 and over. We don't knowingly collect data from children under 13. If you believe a child has used the app, email us and we'll delete the account.
6. Data retention
- Your account data, logs and photos are kept while your account exists.
- When you delete your account, your data is removed immediately from our live systems and from backups within 30 days.
- Diagnostic and analytics data is kept according to Google's Firebase retention settings, up to 14 months.
7. International transfers
Your data is stored in the United States. If you're in the EEA or UK, transfers are covered by Google's Standard Contractual Clauses.
8. Changes to this policy
If we make material changes, we'll post the new version here and let you know in the app before they take effect.
9. Contact
gbyte.io
help@leanbud.app