Consumer Health Data Privacy Policy
Effective October 7, 2026 · version 1
This policy is for people in the United States. It explains how Lesto collects, uses, and shares “consumer health data” as defined by Washington’s My Health My Data Act, Nevada’s consumer health data law (SB 370), and similar state laws, and how you can exercise your rights. It complements our Privacy Policy, which describes everything Lesto does with your data.
The essentials
- Your health data stays on your iPhone. Lesto has no account and no server that keeps your log.
- Only two features send some of it, and only with your consent: the AI coach and meal photo analysis. Nothing is kept by Lesto on its servers.
- We never sell your consumer health data, never use it for advertising, and never share it with anyone other than the service providers below.
- You can see, export, and delete everything from within the app, and withdraw your consent at any time.
1. Consumer health data we collect
Everything below is information you choose to enter in the app. It is stored on your iPhone:
- body data: weight, body measurements, and progress photos;
- training data: workouts, sets, weights, personal records, programs, how you felt, and recovery estimates by muscle;
- nutrition data: meals, foods, water, and calorie and macro targets;
- supplements you plan and take;
- cycle tracking, if you turn it on;
- profile data used to compute your targets: sex, age, height, and training level;
- your conversations with the AI coach and the meal photos you choose to analyze.
Lesto does not collect precise location, biometric data, or data from other apps or devices.
2. Where it comes from
All of it comes from you, when you use the app. Lesto does not buy or receive consumer health data from anyone else.
3. Why we use it
- To provide the features you ask for: your log, your statistics, your targets, and your reminders, computed on your iPhone.
- When you use the AI coach: to answer your question, using only the excerpts of your log needed for the answer.
- When you use meal photo analysis: to recognize the foods in your photo and estimate the quantities.
We do not use your consumer health data for advertising, profiling, or any purpose other than these.
4. Who we share it with
We share consumer health data only with the service providers (processors) that run these two features, and only when you use them:
| Service provider | Role | Data concerned |
|---|---|---|
| Cloudflare, Inc. | hosts the relay servers for the coach and photo analysis; does not keep messages or photos | requests in transit |
| OpenAI (OpenAI API) | AI model for the coach and meal photo analysis; does not train its models on this data and keeps it for 30 days at most, to detect abuse | messages and log excerpts sent to the coach, meal photos |
We have no affiliates. We do not sell consumer health data and do not share it with any other third party. If iCloud Backup is turned on for your iPhone, iOS includes Lesto’s data in it; this is an Apple service you control, to which Lesto has no access.
5. Your consent
Lesto asks for your explicit consent before the first message to the coach and before the first meal photo analysis. Without it, nothing is sent. You can withdraw your consent at any time in Settings › Privacy.
6. Your rights
You have the right to:
- confirm whether we collect, share, or sell your consumer health data, and access it, including the list of the third parties and service providers it was shared with (section 4);
- withdraw your consent to its collection and sharing;
- have it deleted.
- In the app, right away: view your entire log, export all your data (Settings › Data), delete everything (Settings › Data › Delete all my data), and withdraw your consent (Settings › Privacy).
- By email: write to contact@getlesto.app. We answer within 45 days. Since Lesto has no account, the data sent to our service providers is linked neither to your name nor to your email address: we cannot retrieve it item by item, but it is deleted automatically within the periods given in our Privacy Policy.
We will not discriminate against you for exercising these rights.
7. Appeals
If we decline to act on your request, you can appeal by writing to contact@getlesto.app with the subject “Appeal”. We answer within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General (atg.wa.gov/file-complaint) or the attorney general of your state.
8. Changes and contact
If this policy changes, the date at the top of the page is updated, and your consent is requested again before any new collection or sharing of consumer health data. A question? contact@getlesto.app.