LeanMaxxPrivacy Policy
Effective October 7, 2026
This policy explains what the LeanMaxx iPhone app and this website ("LeanMaxx", "we", "us") collect, why, who we share it with, and how you can delete it. If anything here is unclear, email cyntaxai@gmail.com.
The short version. LeanMaxx has no accounts — no name, email or password. Your weight, measurements, meals and daily logs stay on your phone. Scan photos go to our server and our AI providers only to run your scan and your 10% projection, are never used to train AI models, and are deleted automatically (originals after 30 days, projections after 90) or immediately when you delete your data in the app. We don't sell your data and we don't track you across other apps or websites.
1. What stays on your phone
Most of what you enter in LeanMaxx is stored only on your device and never sent to us:
- Your onboarding answers, height, weight, waist and neck measurements, and goals.
- Meals, calories, macros, steps, water, workouts, habits and check-ins.
- Step count and body weight read from Apple Health, if you connect it (see section 5).
- Copies of your scan photos and projections, so you can see your progress.
If you delete the app, this data is deleted with it. You can also export or delete it at any time from Profile → Settings → Your data.
2. What we collect and why
| Data | Why we use it |
|---|---|
| Anonymous install ID | A random identifier created when you install the app. It signs requests to our server so your photos and results stay tied to your device. It isn't linked to your name or Apple ID. |
| Scan photos | The body photo you take for a Lean Scan, used to estimate your body-fat range and to create your 10% projection. |
| Face photo (optional) | Only if you choose to add one for the face projection. It's used only for that projection, never for your body-fat estimate. |
| Scan details | Your height, weight, optional measurements and estimated body-fat range, sent with a scan or projection request so the AI can produce a result. |
| Workout descriptions | When you describe a workout (for example "45 min spin class"), the text is sent to estimate the calories it burned. |
| Purchase history | Whether you have an active subscription, so we can unlock the features you paid for. We never see your payment details — Apple handles payment. |
| Usage events | Which screens you visit and which steps of onboarding you finish, with values rounded into bands. These never include photos, weights, names or anything you type. We use them to find and fix where the app is confusing. |
| IP address | When the app first registers, we store a one-way keyed hash of your IP address (never the address itself) to limit abuse. Our hosting provider also processes IP addresses to deliver the service. |
3. AI processing
LeanMaxx uses third-party AI models to analyze photos and generate visualizations:
- Google Gemini estimates your body-fat range from your scan photo and details, and estimates calories for workouts you describe.
- fal.ai generates the body projection — an image of you at around 10% body fat.
- OpenAI generates the optional face projection.
We send these providers only what each request needs. We don't use your photos to train AI models, and we use these providers' developer APIs, whose terms don't permit them to train their models on the data we send. Providers may keep request data for a limited time for security and abuse monitoring under their own policies. You'll be asked for consent in the app before any photo is uploaded.
Every projection is an AI visualization, not a prediction or guarantee of how you will look.
4. Who we share data with
We don't sell or rent your personal data, and we don't share it for advertising. We share data only with the service providers that run LeanMaxx, under contracts that limit how they can use it:
- Supabase — database and photo storage.
- Vercel — hosting for our server and this website.
- Google (Gemini), fal.ai and OpenAI — AI processing, as described above.
- RevenueCat — manages subscription status. It receives your anonymous install ID and purchase information from Apple.
- PostHog — product analytics for the usage events described above, identified only by your anonymous install ID.
- Apple — payments, subscriptions and app distribution, under Apple's privacy policy.
Food search sends the words you search for to the USDA FoodData Central database, and barcode scanning sends the barcode number to Open Food Facts. Neither receives your install ID or any other information about you.
We may also disclose information if required by law, or to protect the rights, safety or property of our users or others.
5. Apple Health
If you choose to connect Apple Health, LeanMaxx reads your step count and body weight to fill your daily step target and weight trend. This data stays on your phone: it's never sent to our servers or any third party, never used for advertising, and LeanMaxx doesn't write anything to Apple Health. You can turn access off at any time in the Health app or in Profile → Settings → Apple Health.
6. How long we keep data
- Original scan and face photos are deleted from our servers 30 days after upload.
- Projection images are deleted from our servers 90 days after they're created.
- Everything tied to your install ID is deleted as soon as you use Delete my data in the app.
- Subscription records may be kept as long as needed for accounting, tax and fraud-prevention obligations.
7. Your choices and rights
- Export — Profile → Settings → Your data → Export my data gives you a copy of your data, including what's on our server.
- Delete — Profile → Settings → Your data → Delete my data erases everything on your phone and asks our server to delete your photos, projections and results.
- Apple Health and notifications — you can stop either at any time from Profile → Settings or your iPhone's Settings app.
Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. Because we don't have accounts, the fastest way to exercise these rights is in the app. You can also email cyntaxai@gmail.com; we'll respond within 30 days. You can also complain to your local data-protection authority.
Where the GDPR applies, we process your data to provide the service you asked for (contract), with your consent for photo uploads and Apple Health, and for our legitimate interest in keeping the service secure and improving it (analytics and abuse prevention).
8. Security
Data is encrypted in transit. Photos are stored in a private bucket and accessed only through short-lived signed links, and our server requires a signed install token on every request. No system is perfectly secure, but we work to protect your data and limit what we keep.
9. International transfers
Our servers and providers are mainly located in the United States. If you use LeanMaxx from elsewhere, your data will be processed in the United States and other countries where our providers operate, with appropriate safeguards where the law requires them.
10. Age requirement
LeanMaxx is for adults 18 and over. We don't knowingly collect data from anyone under 18. If you believe a minor has used the app, email us and we'll delete the data.
11. This website
This website doesn't use cookies or analytics. Our host processes standard request logs (such as IP address and browser type) to serve and secure the site. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
12. Changes to this policy
If we change this policy, we'll update the date at the top of this page, and if the changes are significant we'll let you know in the app before they take effect.
13. Contact
Questions or requests about your privacy: cyntaxai@gmail.com.