Privacy Policy
How LeanMindset collects, uses, shares, safeguards, and deletes personal information
Published by VERIXLABS
Effective date: August 19, 2026
Website: https://www.leanmindset.app
Contact: hello@leanmindset.app
1. Scope and Who We Are
This Privacy Policy explains how VERIXLABS ("VERIXLABS," "we," "us," or "our") handles personal information when you use LeanMindset, our related websites, support channels, and services (collectively, the "Service").
For questions or privacy requests, contact our Privacy Contact at hello@leanmindset.app or hello@leanmindset.app.
2. Information We May Collect
2.1 Account and Profile Information
Name, username, email address, phone number if used, authentication identifiers, and account settings.
Age or date-of-birth range where needed for eligibility, safety, or personalization.
Profile information you choose to provide, such as gender, height, weight, goals, activity level, food preferences, dietary preferences, fitness experience, and similar wellness information.
2.2 Health, Fitness and Wellness Information
Depending on the features you use, you may provide information that can be sensitive, including weight history, body measurements, nutrition logs, calorie or macro information, exercise and activity records, sleep or recovery information, goals, progress entries, photos, wellness responses, and information you choose to share with a coach or support team.
If LeanMindset integrates with Apple Health/HealthKit, Health Connect, wearables, or similar platforms, we may receive only the data types you authorize and only for enabled features. The exact permissions requested should be disclosed at the time of connection.
2.3 Meal, Exercise and App Activity Data
Meals, foods, grocery items, recipes, nutrition preferences, exercise selections, completed workouts, habits, goals, check-ins, and progress history.
Feature usage, screen interactions, timestamps, crash information, device type, operating-system version, app version, and diagnostic information.
Approximate region or locale derived from device settings or network information where needed for language, units, legal notices, fraud prevention, or service operation.
2.4 Communications and Support
When you contact us, we may collect the content of your request, attachments you provide, contact details, and information needed to investigate or resolve the issue. If coaching or messaging features are available, communications may be processed and stored to provide those features, enforce safety rules, and address complaints.
2.5 Payment and Subscription Information
For purchases through Apple or Google, payment-card information is generally processed by the applicable app store and is not provided to us in full. We may receive subscription status, product identifier, purchase or renewal status, transaction identifiers, country/region, and related entitlement information. If we later offer direct payments, the payment processor and relevant data handling must be added to this Policy.
3. How We Use Personal Information
Create, authenticate, maintain, and secure your account.
Provide personalized fitness, nutrition, habit, coaching, and progress-tracking features.
Calculate or estimate goals, calories, activity, trends, progress, and recommendations.
Operate subscriptions and determine feature entitlements.
Provide support, respond to requests, investigate technical problems, and communicate important service notices.
Protect users, prevent fraud and abuse, enforce our Terms and Community Guidelines, and maintain service security.
Debug, analyze, maintain, and improve product reliability and usability.
Comply with legal obligations and establish, exercise, or defend legal claims.
Send marketing communications only where permitted and with any consent required by law.
4. Automated Recommendations and AI
LeanMindset may use automated systems or artificial intelligence to generate or help generate suggestions, summaries, meal ideas, exercise plans, behavioral prompts, or other personalized content. Inputs may include information you provide and information generated through your use of LeanMindset. Automated outputs may be inaccurate and are not medical advice.
We will not represent automated recommendations as professional medical diagnosis or treatment. If a third-party AI provider processes user data, that provider and the categories of data sent must be identified before publication of this Policy.
5. Consent and Your Choices
Where consent is the appropriate legal basis, we seek consent that is appropriate to the sensitivity of the information and the context. You may withdraw consent for optional processing, subject to legal or contractual restrictions and reasonable notice. Withdrawing certain permissions may disable related features.
Health-platform permissions can generally be changed in your device or platform settings.
Push notifications can be changed in device settings.
Marketing emails can be unsubscribed from using the link provided in the message, where applicable.
Optional profile fields may be edited or removed through available account controls.
You may request access, correction, or deletion as described below.
6. When We Share Personal Information
We do not sell personal information in the ordinary meaning of a sale for money. We may disclose personal information to the following categories of recipients when necessary for the purposes described in this Policy:
Cloud hosting, database, authentication, email, customer-support, analytics, crash-reporting, communications, and infrastructure providers acting on our behalf.
Apple, Google, payment platforms, health platforms, wearables, or other services you choose to connect.
Coaches or service providers where you request or enable a coaching/service relationship and the information is needed to provide that service.
Professional advisers, auditors, insurers, or transaction counterparties subject to appropriate confidentiality obligations.
Law enforcement, regulators, courts, or other parties where disclosure is required or permitted by law or reasonably necessary to protect rights, safety, and security.
A successor or purchaser in connection with a merger, financing, reorganization, acquisition, or sale of assets, subject to applicable privacy requirements.
Before publishing, VERIXLABS should list or link to material third-party subprocessors and ensure this section matches all SDKs and backend vendors actually used by LeanMindset.
7. Advertising and Tracking
[CHOOSE AND EDIT BEFORE PUBLISHING] If LeanMindset does not use third-party behavioral advertising or cross-app tracking, state clearly: “LeanMindset does not use health or fitness data for targeted advertising and does not sell health or fitness data to advertising platforms.” If advertising or tracking technologies are introduced, this Policy and app-store disclosures must be updated before deployment, and required consent must be obtained.
8. Health and Fitness Data Protections
Health and fitness information is treated as sensitive. We aim to limit collection to data reasonably necessary for enabled features and restrict access according to role and need. Data obtained through Apple Health/HealthKit, Health Connect, or similar restricted APIs will be handled in accordance with applicable platform requirements and will not be used for purposes prohibited by those platforms.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide the Service, maintain legitimate business records, resolve disputes, enforce agreements, protect security, and meet legal obligations. Retention periods may vary by data category.
Active account/profile data: generally retained while the account remains active.
User-generated wellness history: retained while needed to provide history/progress features unless deleted earlier by the user or account deletion process.
Support and safety records: retained for a period reasonably necessary to resolve issues, prevent abuse, and meet legal requirements.
Transaction and subscription records: retained as required for accounting, fraud prevention, tax, and legal obligations.
Backups: deleted or overwritten on a rolling schedule consistent with our backup architecture, subject to legal holds and technical limitations.
Before publication, replace general retention wording with any fixed retention periods actually implemented by LeanMindset.
10. Account and Data Deletion
If you have a LeanMindset account, you may request account deletion using the in-app deletion path or the web/contact method we provide. We will delete or de-identify personal information associated with the account unless we must retain specific information for legal, security, fraud-prevention, financial, or dispute-resolution purposes.
Deleting the app from your device does not itself delete your LeanMindset account. Deleting your account also does not automatically cancel a subscription billed by Apple or Google; you must manage store subscriptions separately.
11. Access, Correction and Privacy Rights
Depending on your jurisdiction, you may have rights to request access to personal information, correction of inaccurate information, deletion, withdrawal of consent, portability, restriction or objection, or information about how data is used and disclosed. Some rights are subject to exceptions under applicable law.
To submit a request, contact hello@leanmindset.app or use the in-app privacy controls where available. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights.
12. Security
We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. Measures may include encryption in transit, access controls, secrets management, authentication safeguards, logging, secure development practices, and restricted production access. No system can be guaranteed completely secure.
13. International Processing
Our service providers may process information in Canada, the United States, or other countries. Information processed outside your province, state, or country may be subject to the laws and lawful-access regimes of the jurisdiction where it is processed. We use contractual and other safeguards where appropriate.
14. Children and Minors
LeanMindset is not intended for children under the minimum age stated in our Terms unless we launch a separate experience that satisfies applicable parental-consent and youth-privacy requirements. We do not knowingly seek to collect personal information from children in violation of applicable law. If you believe a child has provided information improperly, contact us so we can investigate and take appropriate action.
15. Cookies and Web Technologies
Our website may use necessary cookies or similar technologies for security, session management, preferences, fraud prevention, and basic analytics. If we use optional analytics, advertising, or tracking cookies that require consent, we will provide appropriate choices and update our cookie disclosures.
16. Push Notifications, Email and SMS
If enabled, LeanMindset may send transactional messages, reminders, progress prompts, support communications, or marketing communications. You can manage push notifications in your device settings and unsubscribe from marketing emails where available. SMS or other messaging will be used only in accordance with applicable consent and opt-out requirements.
17. Third-Party Links
The Service may link to websites or services controlled by third parties. Their privacy practices are governed by their own policies. Review those policies before providing personal information to them.
18. Privacy Breaches
If a privacy or security incident occurs, we will investigate and take steps appropriate to the nature of the incident. Where required by applicable law, we will notify affected individuals and regulators and maintain required breach records.
19. Changes to This Privacy Policy
We may update this Privacy Policy as our Service, technology, providers, or legal obligations change. We will update the effective date and provide additional notice for material changes where appropriate. If a change requires new consent, we will seek that consent before applying the new processing where required.
20. Contact and Complaints
Privacy Contact: VERIXLABS, hello@leanmindset.app, hello@leanmindset.app. You may contact us with questions, concerns, access/correction requests, consent withdrawals, or deletion requests. You may also have the right to complain to the privacy regulator responsible for your jurisdiction.
21. App Store and Platform Disclosures
The privacy information shown in Apple App Store and Google Play must accurately reflect LeanMindset’s actual collection, use, sharing, tracking, health-data access, and deletion practices, including practices of third-party SDKs integrated into the app. These store disclosures are separate from, but must be consistent with, this Privacy Policy.
Publication Notes - Remove Before Going Live
Insert the exact privacy email, support email, website URL, and business mailing address.
Inventory every SDK/vendor and specify what each receives (for example: hosting, database, authentication, analytics, crash reporting, email, push, AI, payments).
Confirm whether any precise location, photos, camera, contacts, device identifiers, advertising identifiers, or health platform data are collected; add/remove sections accordingly.
Define the actual retention/deletion behavior in the backend, including backups.
Make Apple App Privacy labels, Google Data Safety, Health Apps declaration, permission prompts, and this Policy match the implemented app.
Have qualified privacy/legal counsel review the final public version for launch jurisdictions.