LeanMeals app privacy policy

Last updated: 19 October 2026

Development draft: operator details, service providers and retention arrangements are awaiting confirmation. This page is not final submission information.

LeanMeals is the name of our website and mobile app. The legal operator's details will be confirmed before public launch. Contact info@leanmeals.co.uk for privacy questions or to exercise your rights.

Optional live website analytics

With your permission, LeanMeals collects a random browser-visit identifier, coarse page category, basic device category and selected site actions with timestamps. When signed in, this may be linked to your customer account and first name. Authorised site owners can view recent consenting visits to understand use of the service. We do not record typed form contents, passwords, messages, search terms, recipe identifiers, payment details or health measurements in this analytics feature. Sensitive account pages are grouped as an account area.

This optional analytics uses your consent. You can refuse without affecting your account and withdraw through the Analytics preferences button. Withdrawal stops collection and removes the visit records associated with that browser identifier. The preference is remembered locally for up to one year; a random visit identifier is stored only after permission. Visitors blocking storage are not tracked. For consenting signed-in members we also retain active dates for 90 days and first measured plan-save and food-diary action dates until withdrawal or 90 days of inactivity to assess activation and return visits; withdrawal removes these account-linked analytics. No nutrition or weight values are stored in these analytics. Activity expires from the recent view after 24 hours and older records are removed on subsequent analytics collection or admin visits. Existing server security logs are separate. Contact us using the privacy address above to exercise your rights.

Information we use

When you create an account, we store your name, email address and a protected password hash. We never store your password in the mobile app. Your phone securely stores an authentication token so you can stay signed in.

If you choose to use personal meal targets or progress tracking, we process the date of birth, calculation sex, height, weight, activity level and goal you provide, together with your weight entries. We also store recipes you save, meal plans and shopping-list selections. These records are linked to your account. You may browse public recipes as a guest without supplying these personal records.

Website features may additionally store dietary preferences, allergens, diary entries, uploaded progress photos, personal recipes, household information, feedback and messages that you choose to provide. A fitness-provider connection on the website is optional. The mobile app does not access HealthKit, your location, microphone, contacts or photo library.

Camera access is optional and is used to read product barcodes on your device. Camera images are not uploaded. For food lookup, the barcode is sent through LeanMeals to Open Food Facts; no account identifier or food diary is shared with that service. Saved shopping barcode-to-ingredient links belong to your account or the selected household list owner. Intake entries and portion nutrition are stored in your food diary. Nutrition-label recognition is not included. Shopping stock declarations are saved for the selected plan, including household-owner lists, and are used to calculate remaining shopping quantities and estimated pack leftovers.

Purposes and your choices

We use account information to provide the service you request, authenticate you, synchronise your saved information and respond to support requests. Optional body measurements support the nutrition estimates and tracking you request; you can leave these features unused and request deletion of these records. Security and limited accounting records help protect the service and meet our obligations. We do not sell personal information or use your health and fitness records for advertising.

Garmin connection and activity data

Connecting Garmin is optional. If you authorise the connection, LeanMeals plans to receive the Garmin health and activity information you permit, such as daily steps and recorded activities, and associate it with your LeanMeals account so you can see it on your dashboard. The information available depends on your Garmin permissions and the features we make available. We use it to provide your connected fitness experience, not for advertising or sale.

Garmin provides the connection and sends authorised data to LeanMeals. Fasthosts hosts the LeanMeals website and database and may process or store this data as our hosting provider. No other third parties are currently authorised by LeanMeals to receive or process Garmin data. We do not sell Garmin data or share it with third parties for their own purposes. We do not send Garmin data, or information derived from it, to AI services or use it to train, evaluate or improve AI models.

You can withdraw permission by disconnecting Garmin from the Fitness connections page in your LeanMeals account or through Garmin. Contact info@leanmeals.co.uk to request access, correction, export or deletion of Garmin data held by LeanMeals. If a Garmin record is inaccurate, you can also check or correct it in Garmin where supported. Disconnecting stops future access; contact us to request deletion of any previously stored data. Backups and any legally required retention are handled as described below.

Payments and service providers

Apple handles in-app subscription payments. LeanMeals receives identifiers, product, purchase and expiry information needed to verify membership. We do not receive your full payment-card details. Website payments use Stripe when enabled. Their independent policies apply to their payment services.

Fasthosts hosts our website and database. Transactional email providers deliver account/security messages when configured. Access is restricted to service operation and authorised staff. Expo provides development and build tooling; our app does not include an advertising analytics SDK. Service providers may process information outside your country; appropriate contractual protections and applicable transfer safeguards must be maintained.

Storage and deletion

We keep account and saved-content records while you use your account. Choose Delete Account inside the app to remove your identity, personal profile, plans, tracking records and saved content from the live service and invalidate your sign-in tokens. Private image cleanup is attempted immediately and retried if necessary; contact us if deletion has not completed within 30 days. A minimal anonymous account reference and transaction records remain only for payment reconciliation and required financial retention.

Deleting your account does not cancel subscriptions billed by Apple. You can manage them in your Apple subscription settings before or after deletion. Website billing cancellation is requested separately and retried if its provider is temporarily unavailable; contact us for billing assistance. Deletion is available without first cancelling a subscription.

Backups and service-provider security logs follow their configured retention schedules and access restrictions. Deleted personal information must not be restored for normal use; if a backup is restored, account deletions must be reapplied. Contact us for the applicable provider retention periods and any records we are legally required to retain.

Your rights and support

You can request access, correction, a portable copy, restriction or deletion of your information and raise an objection where applicable. Withdrawing permission for optional health/fitness processing stops that feature without preventing guest recipe browsing. Email info@leanmeals.co.uk; we may verify your identity to protect your records. UK users can also contact the Information Commissioner's Office. The service is intended for adults; personalised nutrition targets are not designed for children.

Policy updates

We update this policy when our processing changes and notify you of material changes where required. Any future trainer-video, upload, social or tracking feature will need an updated disclosure before collecting new information.