🔥 Lean Machine — Privacy Policy

1. What information we collect

Lean Machine collects only the information you choose to enter into the app:

• Account details: username and password (stored locally, password is hashed)
• Profile data: age, sex, height, weight, activity level, training experience, fitness goal
• Health context (optional, user-provided): injuries and physical limitations, food allergies and dietary restrictions, food preferences, supplements you report taking, and whether you use hormone therapy (TRT) or peptides. This information exists only so the AI coach can personalize advice safely, and is stored only on your device.
• Body composition data: InBody or similar test results you enter or scan (weight, skeletal muscle mass, body fat percentage, visceral fat level, BMR)
• Tracking data: weight log entries, workout sets and reps, schedule completion, daily check-ins
• Photos: body progress photos you choose to capture or upload
• AI activation data: if you subscribe, a Google Play purchase token (used only to verify your subscription); if you activate via a gym, your gym code and a random device identifier (used only for seat counting). If you use the advanced own-API-key option, the key you provide (stored only on your device).

2. Where your data is stored

All data listed above is stored in your device's local browser storage (localStorage). It never leaves your device unless you explicitly choose to use a feature that requires it to.

We — the publisher — do not operate a server. We cannot see, access, or recover any of your data. If you uninstall the app or clear your browser data, all your information is permanently deleted.

3. Optional AI features

The app offers optional AI-powered features (progress analysis, body composition analysis, meal optimization, workout coaching). These features require an API key from Anthropic.

When you use these features:

• Your relevant data (weight log, workouts, profile including health context and food profile, InBody results, and — only when you choose — a photo such as a physique photo, meal photo, or a picture of a body composition test sheet) is sent from your device through our stateless relay to Anthropic's API, and the answer is returned to your device. The relay does not store this content.
• This communication uses HTTPS encryption
• We do not intercept, store, or have access to this data
• Anthropic's handling of this data is governed by their own privacy policy: anthropic.com/legal/privacy

4. Photos and camera access

The app may request camera or photo library access so you can capture or upload body progress photos. Photos are stored only on your device. They are sent to the AI service only if you explicitly tap "Analyze with AI" on a photo.

5. What we DON'T collect

• We do not use analytics, tracking pixels, or cookies
• We do not show advertising and do not share data with advertisers
• We do not collect device identifiers, location, contacts, or any data outside the app itself
• We do not have user accounts on any server — your account exists only on your device. Subscription state lives with Google Play; gym activations are tracked only as an anonymous device identifier against a seat count.

6. Children

Subscriptions & payments

The optional AI subscription ($9.90/month) is billed entirely by Google Play. We never see or store your payment details. To verify your subscription, our relay checks your Google Play purchase token with Google and issues a short-lived access token to your device. If your gym provides Lean Machine AI, activation uses a gym code and counts one seat per device; no personal information is required.

Lean Machine is intended for adults aged 18 and over (designed for adults 18 and above). The app requires an age of 18+ during setup and collects health-related personal data that is not appropriate for minors. We do not knowingly collect data from anyone under 18. If you are a parent and believe your child has used the app, you can clear all data by resetting the app from the user menu.

Not medical advice

Lean Machine is a fitness tracking and coaching tool. Nothing in the app — including AI-generated coaching, body composition estimates, and meal or training suggestions — is medical advice, diagnosis, or treatment. The app never provides dosing or protocol guidance for medications, hormone therapy, or peptides. Always consult a qualified physician before changing your diet, training, supplements, medications, or hormone therapy.

7. Your rights

Since all data is stored on your device, you have full control:

• Access: view any data from inside the app
• Modify: edit your profile, weight log, photos, and settings anytime
• Delete: remove specific entries, or use "Reset Everything" in the user menu to wipe your entire account
• Portability: your data is stored in standard browser storage; advanced users can export it via browser developer tools

8. Security

Your password is hashed (SHA-256) before being stored locally. However, because the app runs entirely on your device, the security of your data depends on the security of your device. We recommend:

• Using a device lock (PIN, biometrics)
• Not sharing your device with people who shouldn't see your fitness data
• Keeping your browser and operating system updated

9. Changes to this policy

If we update this privacy policy, the "Last updated" date above will change. Significant changes will be announced in the app.

Lean Machine — Built for people serious about their physique.