Privacy Policy

This Privacy Policy explains how Leucy ("Leucy", "we", "us") handles information when you use the Leucy mobile app (the "App") and this website (the "Site"). We wrote it in plain English. If anything is unclear, email dbromberg1@gmail.com.

1. Data stored on your device

Most of what you enter stays in a database on your phone and is never sent to us. This includes:

• Setup answers: height, weight, goal weight, birth month and year, gender, activity level, appetite, motivation and the concerns you pick during onboarding.
• Medication: the medication you select, the dose amounts and times you log, your escalation plan and the injection sites you tap.
• Food: meals, nutrition estimates, water, fiber and meal photos you keep.
• Side effects: the effects you log, their severity, notes and the time since your last dose.
• Progress: weigh-ins, progress photos, milestones and summaries.
• Settings: targets, units, reminders, appearance and the date you gave health-data consent.

This data is protected by your phone's own security. It is included in your device backups, such as iCloud or computer backups, under Apple's terms if you have them turned on. Deleting the App removes it from the phone.

2. Data we process on our servers

Some features need a server. Here is exactly what is sent and why.

Meal scans, barcode lookups and menu scans

When you scan a meal or a menu, the photo is resized on your phone and sent with your appetite setting to our scan service, which runs on Supabase. The scan service passes it to Anthropic's Claude API, an AI model that estimates the foods and nutrition. If you type a meal, the text you type is sent instead. If you scan a barcode, the barcode number is looked up in the Open Food Facts public database. The photo or text is processed in memory to return a result and is not saved by our scan service.

Food coach

When you use the food coach, we send your recent messages in that conversation, your daily protein target, the protein you have logged today and, if you have logged one, the name of your most noticeable recent side effect. They go through our server to Anthropic to generate a reply. We do not store coach conversations on our servers. Please do not include your name or other identifying details in coach messages.

Anthropic processes this data to provide the service to us. Under its commercial terms it does not use our API data to train its models, and it may keep inputs and outputs for a limited period for safety and abuse monitoring before deleting them.

Backup and sync (optional)

Backup is off unless you turn it on. If you sign in with Apple to back up your data, we receive an Apple account identifier and the email address Apple shares, which may be a private relay address if you choose "Hide My Email". We then store copies of these records in your account:

• Meals: name, time, calories, protein, carbs, fat, fiber, confidence, portion and how it was logged.
• Doses: medication, dose amount, time, injection site and note.
• Side effects: type, severity, note and hours since your last dose.
• Weights: value, time and source.

Photos are never backed up. Your records are stored with Supabase in the United States, encrypted at rest and in transit, and protected by row-level security so that only your signed-in account can read them. You can turn sync off or sign out at any time in Profile.

Purchases

Subscriptions are sold and billed by Apple. We use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous app user ID, your purchase and subscription history, the App Store country and basic device and app information. We never receive your payment card details.

Product analytics

We use PostHog to understand how the App is used so we can improve it. We send event names, such as an onboarding screen being viewed, the paywall being shown, a trial starting, a scan finishing or a dose being logged, together with a random identifier stored on your device and the App version. For scans we include the input type, such as photo or barcode, and the confidence score. We never send health values, food names, weights, doses, side effects or photos to analytics. Like any internet service, PostHog receives your IP address when an event is sent, which may be used to estimate your approximate location.

Support

If you email us, we receive your email address and whatever you include in your message, such as screenshots. We use it only to help you.

3. Device permissions

The App asks for permission before using these features. You can change your choices any time in your iPhone Settings.

Apple Health data is used only to provide the App's features. It is never sent to our servers, never shared with third parties, never used for advertising or data mining, and never sold, in line with Apple's HealthKit rules. Home and lock screen widgets read from a shared space on your device.

4. How we use information

• To provide the App's features, such as nutrition estimates, targets, reminders, insights, backup and reports.
• To process and verify subscriptions and restore purchases.
• To answer support requests and send messages you ask for.
• To understand overall usage and fix problems, using the analytics described above.
• To keep the service secure and prevent abuse.
• To comply with the law and enforce our Terms of Use.

We do not use your information to make decisions that have legal or similarly significant effects on you.

5. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Explicit consent for health data, which you give during setup and again when you connect Apple Health or turn on backup. You can withdraw consent at any time.
• Performance of a contract to provide the App and your subscription.
• Legitimate interests in keeping the App secure and understanding usage through limited analytics that contain no health data. You can object at any time.
• Legal obligation where the law requires us to keep or disclose information.

6. Who we share it with

We share information only with service providers that help us run the App. They act on our instructions under contract and may not use your data for their own purposes.

We may also disclose information if the law requires it, to protect anyone's safety or rights, or as part of a merger, acquisition or sale of assets. In that case this policy will continue to apply to your information, or we will tell you before a new policy applies.

7. What we never do

• We do not sell personal information or consumer health data.
• We do not share personal information for targeted or cross-context behavioral advertising.
• We do not show ads in the App.
• We do not use health data to profile you for anything other than showing you your own numbers.
• We do not give dosing advice. The App shows what you enter.

8. How long we keep it

9. Security

We use encryption in transit for every request, encryption at rest for backups, row-level security that limits each record to its owner, and keys that live only on our servers, never in the App. No system is perfectly secure, so we also keep what we collect to a minimum. If we learn of a breach that affects your information, we will notify you and the authorities as the law requires.

10. Your choices and rights

• Export: in the App, open Profile, then Privacy and data, then Export my data.
• Delete from your device: Profile, then Privacy and data, then Delete all my data.
• Delete your backup and account: follow the steps on our Delete your data page.
• Withdraw consent: turn off Apple Health or backup in Profile, or revoke permissions in iPhone Settings.
• Notifications: change reminders in Profile or turn notifications off in iPhone Settings.

Depending on where you live, you may also have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email dbromberg1@gmail.com. We may need to verify your request, for example by asking you to write from the email linked to your backup account. We respond within the time the law requires, usually within 30 days, or 45 days under US state laws. You can also complain to your local data protection authority.

We will not treat you differently for exercising your privacy rights.

11. US state privacy rights

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with privacy laws have the rights described above. In the last 12 months we have collected these categories of personal information: identifiers, such as a random app ID and, if you opt in, an Apple account ID and email; commercial information, such as subscription status; internet activity, such as App usage events; approximate location from IP address; and sensitive personal information, namely health data you enter. We use sensitive personal information only to provide the App. We have not sold or shared personal information for cross-context behavioral advertising, and we do not knowingly do so for anyone under 16.

If you live in Washington, Nevada or Connecticut, please also read our Consumer Health Data Notice. You may use an authorized agent to make a request, and you may appeal our decision by replying to our response with the word "Appeal".

12. International transfers

We and our providers process data in the United States and possibly other countries. Where the law requires it, we use safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum for transfers out of the EEA and UK.

13. Children

Leucy is intended for people 16 and older and is rated 16+ on the App Store. We do not knowingly collect information from anyone under 16. If you believe someone under 16 has given us information, contact us and we will delete it.

14. This website

This Site does not use cookies, analytics, advertising pixels or third-party fonts. Our hosting provider may keep standard server logs, such as IP address, browser type and the pages requested, for security and to keep the Site running. If you email us from the Site, we handle your message as described in the Support section above.

15. Changes to this policy

We may update this policy as the App changes. We will post the new version here and update the date at the top. If a change is significant, we will tell you in the App before it takes effect.

16. Contact us

Questions or requests: dbromberg1@gmail.com