Privacy Policy

Data Lean may use

Lean stores account and profile details such as your email, display name, goals, training preferences, and optional profile photo. Lean also stores the workouts, sets, RPE, notes, and pain or form flags you log. Progress check-in photos stay local in the current app unless you explicitly choose to share them. The current release does not send Progress or Food photos for AI analysis. When external Coach AI is enabled, text or images you explicitly attach to Coach may be sent to OpenAI to answer that request. If you grant Apple Health access, the current build may read weight, body measurements, height, date of birth, biological sex, workouts, active energy, and heart-rate data to personalize plans and recaps. On iOS 26, Lean may add a workout record for an eligible completed strength workout after saving it locally, when the rollout is enabled and you allow workout writing. That record does not include sets, reps, RPE, notes, heart-rate zones, or estimated calories. It contains no richer workout details. Body-measurement writing remains off. Lean does not connect to, import from, or send data directly to WHOOP. WHOOP may independently read the eligible workout record from Apple Health if you configure that access outside Lean.

Waitlist

When you join the waitlist on this website, Lean stores the email address you submit, along with a short non-identifying source tag and the referring page (referrer), in our backend (Convex). This information is used only to email you when early access opens. It is not used for advertising and is not sold. To be removed from the waitlist, email hello@liftwithlean.com.

How data is used

Your data is used to personalize your training, summarize completed workouts, and surface coaching proposals. Lean does not sell personal health or workout data.

Optional website analytics

If you choose Allow analytics on this website, Google Analytics 4 records only whether a valid waitlist submission was attempted or a new signup succeeded, plus whether it came from the first or final signup section. PostHog records a limited, pseudonymous product funnel: coarse onboarding goal and routine categories, plan creation, paywall and purchase steps, workout start or completion, and Coach proposal lifecycle and scope categories. These events do not include workout contents, exercise values, workout or proposal identifiers, counts, health data, notes, or other free text.

Lean does not send your email, page URL, query, or referrer to these analytics services. Google Analytics receives a fixed landing-page label instead of your current URL, page title, query, or referrer. Google Analytics may process a device category and approximate location derived from network information. Advertising personalization, Google Signals, automatic page views, session recording, and autocapture are disabled.

Analytics is off until you opt in. If enabled, Google may set _gacookies to distinguish visits. You can select Privacy choices on the landing or privacy page to withdraw consent; Lean then stops future browser-based Google Analytics and PostHog collection and removes accessible Google Analytics cookies. Lean does not send Stripe customer, checkout, subscription, or invoice identifiers to PostHog from billing webhooks. Lean’s GA4 setup uses a two-month event-data retention period. These records are used to improve the signup experience, not for advertising.

Data retention

Lean keeps your logged data and account while your account is active. When you delete your account, the associated data is removed. Limited operational logs may persist briefly.

Deletion and control

You can delete your account and its data in the app at Settings → Delete Account or by emailing hello@liftwithlean.com. You can revoke Apple Health and other permissions at any time in system settings. Coaching changes are proposals and require your approval before they affect training.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or object to the processing of your personal data. To exercise any of these, email hello@liftwithlean.com. Lean’s processors (Convex, OpenAI, Superwall, Stripe, PostHog, Google Analytics) are US-based, so your data may be processed in the United States.

Third-party processors

Lean uses Convex for backend storage and sync, OpenAI to power coaching proposals and chat, Superwall to manage subscriptions and the paywall, Stripe to process web billing, PostHog for consented coarse product-funnel analytics, and Google Analytics for consented, limited, manually captured waitlist analytics. Autocapture, session recording, automatic page views, Google Signals, and advertising personalization are not used. These providers process data only to provide and improve the service.

Security

Your data is stored with reputable infrastructure providers under access controls and is encrypted in transit. No method of storage or transmission is perfectly secure, but Lean works to protect your information.

Children

Lean is not directed to children under 13, or under the minimum age required in your country. Do not use Lean if you are under that age.

Changes

Lean may update this policy from time to time. The last updated date above reflects the current version, and continued use after that date means you accept the updated policy.

Contact

For privacy or support questions, contact hello@liftwithlean.com.