Privacy policy

Effective 7 July 2026

LeanFrame is a food diary with optional AI coaching and photo estimates. This policy explains, in plain language, what data LeanFrame collects, why, who processes it, and how you can have it deleted. The short version: we collect what the app needs to work, we don't run ads, and we never sell your data.

1. What we collect

• Photos. Body check-in photos (front and side) and meal photos you choose to take. These are the core of how LeanFrame works — see section 2.
• Food log and health metrics. The foods you log, meal macros, body weight entries, and the body-composition estimates the app generates for you (body fat %, FFMI and lean mass).
• Plan settings. Your goal (cut, recomp, lean bulk), targets, and preferences such as units.
• Account and device information. An account identifier so your data can sync, and basic technical and product-usage data (device model, OS version, app version, in-app interaction analytics) used to keep the app working and improve it. We use Sign in with Apple to create your account; we receive only the account identifier Apple provides — we do not request your name or email.
• Purchase status. Whether you have an active Pro subscription. Payment itself is handled entirely by Apple — we never see your card details.

We do not collect your contacts, location, or advertising identifiers.

2. How your photos are used

When you take a body check-in or scan a meal, the photo is uploaded to our servers and analysed by an AI model to produce your body-composition estimates or meal macros. We use Google Gemini in the current 1.0.x app and Anthropic Claude in version 1.1. Photos, your messages, saved coach preferences and relevant diary context are sent when needed to answer your request. Do not include information you do not want to send to the AI service. Provider retention and processing are governed by its API terms and privacy policy.

Check-in photos are stored securely on our servers so that each new scan can be compared against your previous one and so your progress-photo timeline works. Photos are used only to provide these features to you. They are never used for advertising, never shared with third parties beyond the processors listed below, and never sold.

3. How the rest of your data is used

• To keep a server copy of recent food logs for coaching. This is not a complete recovery service. Optional iCloud backup and restore are separate features. Chat history and saved coach preferences stay on your device; relevant context is sent with AI requests.
• To generate coaching advice: the AI coach reads your food log and scan history to answer your questions and, when you ask it to, edit your log (every edit is shown to you for confirmation).
• To understand how the app is used and keep the service reliable (in-app analytics).

We do not use your data for advertising, and we do not sell or rent it to anyone.

4. Who processes your data

• Google (Gemini API, version 1.0.x): AI processing of photos, messages and relevant diary context. See Google privacy information.
• Anthropic (Claude API, version 1.1): AI processing of photos, messages and relevant diary context. See Anthropic privacy information.
• Cloudflare: backend request handling.
• Supabase: account records, recent food logs, purchases, scans and photo storage.
• Apple — App Store distribution, subscription billing and Sign in with Apple. Apple acts under its own privacy policy for payments.
• PostHog — privacy-focused product analytics (how the app is used) to help us improve it. Session replay is disabled. We do not include your photos, chat messages or meal notes in analytics events.

We share data with these providers only as needed to run LeanFrame, and with no one else unless required by law.

5. Data retention and deletion

Check-in photos stay until you delete them. Meal photos are normally removed by a daily cleanup after all scans that use them are more than 48 hours old. Cleanup failures can delay removal. Scan results and correction records remain until account deletion. Open Settings in the app and choose Delete account to remove server records, server photos and active local data. A failed server deletion shows an error so you can retry. Chat history and coach preferences can also be cleared on this device. Apple-managed iCloud backups and copies on other devices are separate and may remain; manage them in your Apple iCloud settings. Deletion does not cancel an App Store subscription. For help, email leanframeapp@gmail.com.

6. Security

Your data is transmitted over encrypted connections (HTTPS/TLS) and stored on secured servers with access limited to what is needed to operate the service. No system is perfectly secure, but we treat your photos and health data as sensitive and protect them accordingly.

7. Your rights

We handle personal information in line with the Australian Privacy Principles, and we extend the same rights to users everywhere (including those under the GDPR and similar laws): you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Contact leanframeapp@gmail.com to exercise any of these rights. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local supervisory authority; in Australia, with the OAIC.

8. Children

LeanFrame is not directed at children and is intended for users aged 16 and over. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

If we make material changes, we will update this page and note the new effective date above. Continued use of LeanFrame after a change means you accept the updated policy.

10. Contact

Questions about privacy or your data: leanframeapp@gmail.com.