Privacy policy

LeanScan is a product of Pocketleaf. Contact: support@trypocketleaf.com. [проверить: legal entity name and postal address for the store listings and GDPR/CCPA notices.]

When you run a scan, the photo is resized on your phone and sent over HTTPS to our server at trypocketleaf.com. The server forwards it to our AI provider, Anthropic, which returns the body-fat range and the band. The request also carries your sex, goal and activity level, and the previous range with how many days ago it was, so the estimate has context.

We do not keep the photo on our servers after the request. Our server keeps only usage counters (see section 07). [проверить: confirm that no request bodies are written to hosting logs, including Vercel function logs, and what Anthropic retains for our API account and for how long.]

Photos you keep for the before/after comparison are encrypted on your phone with AES-256-GCM. The key is generated on the device and stored in the iOS Keychain with a this-device-only setting, so it does not sync to other devices. On Android the key is stored in the system-backed secure storage. [проверить: Android key storage and whether encrypted photo files are excluded from Android Auto Backup and from iCloud device backup.]

Encrypted photos stay in the app's private storage. A decrypted photo exists only in memory while it is shown. Because the key does not move to a new phone, photos do not carry over to a new device.

Scan results (range, band, coaching text) and your history are stored on your phone, not on our servers. Use Erase all data in Settings to remove photos and local data from the device. [проверить: confirm that Erase all data clears scan history, settings and widget data, not only photos.]

An export creates a file with your scan history and settings. It never includes photos. The file is encrypted with a password you choose: the key is derived with scrypt and the data is encrypted with AES-256-GCM. We do not receive the backup file, and we cannot recover a backup if you forget its password.

Subscriptions are processed by Apple or Google. We use RevenueCat to check your subscription status. RevenueCat receives an app user identifier and purchase information. [проверить: link RevenueCat's privacy policy and confirm the data-processing terms are in place.]

To enforce scan limits, our server keeps counters per app user identifier: scans used in the current 30-day period, extra scan credits and daily request counts. These counters contain no photos and no results. [проверить: state whether IP-based or device-based rate limits are active at launch; if they are, disclose them here.]

The camera is requested the first time you take a scan. Notifications are requested after your first completed scan. Reminders are scheduled on your device and sent as local notifications.

LeanScan does not read from or write to Apple Health or Google Health Connect. Body-composition estimates are health-related information. We treat them as sensitive and use them only to show the scan, trend and widget you asked for. [проверить: legal basis and consent wording for health-related data under GDPR/UK GDPR; the first-scan consent screen must match this text.]

LeanScan does not include advertising SDKs or third-party analytics SDKs. Third parties involved are Apple or Google (purchases and system services), RevenueCat (subscription status) and Anthropic (the one-time estimate request). [проверить: confirm that no crash-reporting SDK is added to the production build.]

Our server and our AI provider may process requests in the United States and other countries. [проверить: region of the hosting functions and of Anthropic processing, and the transfer mechanism stated for EU/UK users.]

LeanScan is not intended for anyone under 18. [проверить: age policy and the age rating declared in App Store Connect and Google Play.]

You can delete individual scans, erase all data in Settings, turn off reminders and use Numbers Off. To ask us to delete the server usage counters linked to your app user identifier, email us from the address you use with the app. [проверить: the deletion request process and reply time.]

Depending on where you live (for example under GDPR, UK GDPR or CCPA), you may have the right to access, correct, delete or port your data, and to object to or restrict some processing. Email us to exercise these rights.

We will change the date above when this policy changes. If a change is material, we will say so in the app before it takes effect.