Privacy Policy

Last updated: 31 August 2026

Lean is Law ("we", "us") helps you build fat-loss plans and track your progress. This page explains what we collect, why, and your choices. We aim to collect as little as possible.

What we store

• If you use the app as a guest: your inputs and logs (plan settings, food log, gym log, weigh-ins) are saved only in your own browser (localStorage). We don't receive them.
• If you create an account: we store your email address and a securely hashed password (handled by our auth provider, Supabase — we never see your raw password), plus your four saved data blobs (plan, food log, gym log, weigh-ins) so you can sync across devices. These may include health-related information such as weight, body-fat estimate, and eating logs that you choose to enter.

Photos

Two features let you use your camera: estimating your body fat from a physique photo, and working out the macros in a meal from a photo of your plate. In both cases the image is resized in your own browser, sent once to our AI provider to be analysed, and discarded as soon as the result comes back.

We never store your photos. Not in your browser, not in your account, not on our servers — there is no upload history and nothing to delete afterwards. Only the result is kept: the body-fat percentage if you choose to apply it to your plan, or the food entries if you choose to add them to your log. You can edit or discard either before anything is saved.

The body-fat estimate is for adults only and asks you to confirm that the photo is of you before it will accept one.

What we don't do

• We don't sell your data or share it with advertisers.
• We use no tracking cookies, ad pixels, or third-party analytics. The only browser storage we use is what's strictly necessary to run the app and keep you signed in.

Service providers

• Supabase — authentication and database (stores your account + saved data).
• Vercel — hosting and serving the site.
• Resend — sends transactional emails (e.g. password resets), if you request one.
• Anthropic — generates AI meal/cardio/training suggestions from the plan details you submit, and analyses any photo you send for a body-fat or meal estimate. Under Anthropic's API terms, what we send is not used to train their models. We don't send your email or identity with these requests.

Your choices & rights

• Delete your data: guest data clears when you clear your browser storage or sign out. For an account, email us (below) to delete your account and all associated data, and we'll remove it promptly.
• You may request a copy of the data associated with your account.
• Depending on where you live (e.g. EU/UK, California), you may have additional rights to access, correct, or erase your data — the contact below covers all such requests.

Children

Lean is Law is not intended for anyone under 18. Please don't create an account if you are under 18.

Contact

Questions or deletion requests: kyrispirosv@gmail.com.