LeucyThis notice explains how Leucy handles consumer health data, as defined by the Washington My Health My Data Act, Nevada Senate Bill 370, the Connecticut Data Privacy Act and similar laws. It adds to our Privacy Policy, which covers everything else.
In brief
- We collect health data only to show you your own numbers, targets, reminders and estimates.
- By default it stays on your device.
- We never sell it and never use it for advertising.
- You can access, export, delete or stop sharing it at any time.
Categories of consumer health data we collect
- The medication you use, the doses and times you log, your escalation plan and injection sites.
- Side effects, their severity and notes.
- Weight, height, goal weight, body measurements and progress photos.
- Birth month and year, gender, activity level, appetite and the health concerns you choose during setup.
- Food you log, meal photos you scan and nutrition estimates, which can reveal diet and health information.
- Weight and steps from Apple Health, if you connect it.
- Messages you send to the food coach, which may mention how you feel.
- Inferences the App draws from the above, such as your daily protein target, weight trend and side-effect patterns.
Sources
We get this data directly from you when you enter it, from your camera or photo library when you scan, and from Apple Health if you connect it.
Why we collect and use it
Only to provide the App's features to you: to estimate nutrition, set targets, schedule reminders, show trends, insights and the estimated medication curve, back up your data if you ask, and create reports you choose to share. We do not use consumer health data for advertising, marketing profiles or sale.
Where it is stored
On your device by default. If you turn on backup, copies of your meals, doses, side effects and weights are stored in your private account with Supabase in the United States, encrypted at rest. Meal photos, menu photos and coach messages are sent to our servers only to get an AI answer and are not stored by us.
Categories of consumer health data we share
We share consumer health data only with processors that act on our instructions to deliver the feature you are using:
| Third party | Data shared | Purpose |
|---|---|---|
| Supabase (hosting) | Scan and coach requests in transit; backup records if you opt in | Running our servers and storing your backup |
| Anthropic (AI provider) | Meal and menu photos, typed meals, coach messages, protein target and intake, most noticeable recent side effect | Estimating nutrition and answering coach questions |
We do not share consumer health data with affiliates, advertisers, data brokers or analytics providers. Analytics events never contain health values. Apple Health data is never shared with anyone.
Your consent
We ask for your consent before collecting consumer health data, when you tap Accept and Continue during setup. We ask again before connecting Apple Health and before turning on backup. We record the date you consented. You may withdraw consent at any time by turning off Apple Health or backup, deleting your data in the App or contacting us.
Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and access that data, including a list of the third parties and affiliates it has been shared with, along with their contact details;
- withdraw your consent to collection and sharing;
- have your consumer health data deleted, including from our processors;
- not be discriminated against for exercising these rights.
You can do most of this yourself in the App under Profile, then Privacy and data: export your data, or delete all of it. To delete your backup account or make any other request, email dbromberg1@gmail.com with the subject "Health data request". We will confirm receipt and respond within 45 days. If we need more time, we may extend this once by 45 days and will tell you why.
Appeals
If we decline your request, you may appeal by replying to our decision with the word "Appeal" or by emailing dbromberg1@gmail.com with the subject "Appeal". We will respond in writing within 45 days and explain our reasons. If your appeal is denied, you may contact your state Attorney General. Washington residents can submit a complaint at atg.wa.gov.
Geofencing
We do not use geofences around healthcare facilities, and the App does not collect your precise location.