Privacy Policy

Last updated: 20 August 2026

What we collect

• Account details. Your email address, an optional display name, and a password. Passwords are stored only as a bcrypt hash — we cannot read your password.
• Health information you enter. Age, sex, height, weight, activity level, goals, meals and macros, water intake, exercise, sleep, and any medication you choose to record, including dosage and schedule.
• Meal photos. Only if you use AI meal scanning. See below.
• Subscription status. Whether you have an active plan, its tier, and when it expires.

We do not collect advertising identifiers, location, or contacts. We run no analytics or advertising SDKs, and we do not track you across other apps or websites.

Meal photos

When you scan a meal, the photo is sent to our AI provider (Anthropic) to estimate its nutrition. We do not store your meal photos. The image is transmitted for analysis and discarded; only the resulting numbers — calories, protein, carbohydrates, fat — are saved to your log, and only if you choose to save that meal.

How we use it

Your data is used to operate the app: to compute your BMR, TDEE, macro targets and hydration goals, to store the log you build, to answer questions you ask the AI coach, and to determine whether your subscription is active. We do not sell your data. We do not share it for advertising. We do not use it to train AI models.

Who processes data on our behalf

• Anthropic — AI meal analysis and nutrition coaching. Receives meal photos and the biometric figures relevant to your question.
• Turso — hosts the database your account and logs are stored in.
• Google Cloud — runs the servers.
• Stripe — processes web payments. Card details go directly to Stripe; they never reach our servers.
• RevenueCat, Apple, Google — process in-app purchases on mobile and tell us only whether a subscription is active.

Retention and deletion

Your data is kept while your account exists. You can request deletion of your account and all associated health data at any time by emailing the address below; we will action it within 30 days. Deletion is permanent.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. If you are in the UK, EU, or California, you have these rights under UK GDPR, GDPR, and the CCPA respectively, and you may also complain to your local data protection authority.

Children

LeanAnchor is not intended for anyone under 13, and we do not knowingly collect data from children. The app is designed for adults managing their own nutrition, in many cases alongside prescription medication.

Security

Traffic is encrypted in transit with TLS. Passwords are hashed with bcrypt. Access to the production database is restricted to the application.

Changes

If this policy changes materially we will update the date above and notify you in the app before the change takes effect.

Contact

Questions, data requests, or deletion requests: privacy@leananchor.com

LeanAnchor is a nutrition tracking tool. It does not provide medical advice and is not a substitute for your doctor or a registered dietitian.