Privacy Policy

Lesto is designed so that your log stays on your iPhone. This page states precisely what stays on your phone, what leaves it, when, to whom, for how long, and how to exercise your rights. This is an English translation for convenience; if it differs from the French version, the French version prevails.

The essentials

• No account, no server that keeps your log. Your workouts, meals, supplements, measurements, and photos are stored on your iPhone.
• Three features send data, only when you use them: the AI coach and meal photo analysis (with your explicit consent), and product search in Open Food Facts.
• Nothing is kept by Lesto on its servers: neither your messages to the coach nor your photos. Our AI providers do not train their models on them.
• No advertising, no tracking, no reselling. No audience measurement tool is built into the app.
• Your data belongs to you: free full export and deletion of everything in one step, from within the app.

1. Who is responsible

The data controller is being completed, publisher of Lesto, being completed.

For any question about your data or to exercise your rights: contact@getlesto.app. The founder reads and replies, within one month at most.

2. What stays on your iPhone

Everything you enter in Lesto is stored in the app’s private space, on your phone. Lesto has no server that receives or keeps this data: we have no access to it.

Backups

Every day, Lesto makes an automatic backup on your phone and keeps the last seven: data you delete may therefore remain there for up to seven days. “Delete all my data” also erases these backups. You can export all your data (full backup file or CSV): the file goes wherever you choose to send it.

If iCloud Backup is turned on for your iPhone, iOS includes app data in it, including Lesto’s. This is an Apple service, governed by Apple’s privacy policy, to which Lesto has no access.

3. The AI coach

The coach (Lesto Premium, plus one free workout review) answers your questions, prepares entries for your log, builds workouts, and writes workout reviews. To do this, it needs an artificial intelligence model that runs off your phone. Lesto asks for your explicit consent before the first transmission, and you can withdraw it at any time in Settings › Privacy. Without this consent, nothing is sent: the conversation with the coach stays paused and workout reviews are calculated on your phone, offline.

What is sent

• your message and the latest exchanges in the conversation (twelve messages at most);
• the date, the time, and your weight unit;
• the excerpts from your log that the coach looks up to answer you, and only those: workouts, sets and personal records, meals and intake, supplements taken, weight, measurements and goals, program, recovery by muscle, and, if it needs them, your sex, age, height, level, and equipment;
• for a workout review: a numerical summary of the workout (sets, volume, personal records, progress).

Never sent: your first name, your exact date of birth, your photos, your cycle tracking, or any account identifier. Only an anonymous device identifier, randomly generated at installation, accompanies the request in order to count your questions.

Where it goes, and what remains

• Lesto’s relay server, hosted by Cloudflare: it forwards the request to the model and sends you back the answer. It keeps neither your messages nor the answers. It keeps a technical log with no content (request type, tools looked up, duration, result), deleted after 7 days at most. It counts your questions (daily limit) and their cost under a non-reversible fingerprint of the device identifier.
• OpenAI’s GPT model (OpenAI API): it writes the answer. OpenAI does not train its models on data from its API and keeps it for 30 days at most, to detect abuse.
• On your iPhone: the conversation stays in the app until you start a new conversation or delete your data.

Legal basis: your explicit consent (Articles 6(1)(a) and 9(2)(a) of the GDPR), because this information reveals information about your health.

4. Meal photo analysis

A Lesto Premium feature: you take a photo of your plate, Lesto recognizes the foods and estimates the quantities, then you make corrections before adding them. Your consent is requested before the first photo, and you can withdraw it in Settings › Privacy.

• What is sent: the photo of the meal, the meal it is for (breakfast, lunch…), the app language, and an identifier created by the app, used only to count your analyses (twenty per day at most). Not your name, your weight, or your log.
• Lesto’s relay server (Cloudflare): it does not keep the photo. It keeps the day’s analysis counter, linked to a fingerprint (hash) of the identifier and of your IP address, automatically deleted after 36 hours, and a technical log without the photo (beginning of the identifier’s fingerprint, image size, number of foods recognized, duration, result), deleted after 7 days at most.
• OpenAI’s GPT model (OpenAI API): it analyzes the photo, along with the meal it is for. OpenAI does not train its models on data from its API and keeps it for 30 days at most, to detect abuse.
• On your iPhone: the photo is deleted as soon as you confirm or abandon the analysis; an analysis left unfinished (app closed, error) is deleted no later than 24 hours afterward.

Legal basis: your consent (Article 6(1)(a) of the GDPR).

5. Product search

When you scan a barcode or search for a store-bought product, the app queries Open Food Facts directly, the collaborative food product database run by a French nonprofit association. It sends the barcode or the search text, without any identifier; as with any connection, their servers see your phone’s IP address, and product photos are loaded from their servers. Open Food Facts processes these requests under its own privacy policy.

Generic foods come from the Ciqual food composition table (French agency Anses), built into the app: searching them never leaves your phone.

Legal basis: performance of the service you request (Article 6(1)(b) of the GDPR).

6. Purchases, reminders, statistics, emails

Purchases and subscription

Purchases go through the App Store and are handled by Apple. Lesto receives neither your name, your email address, nor your payment method. being completed

Reminders

Reminders (workout, supplements, meals) are scheduled on your iPhone. No server sends them.

Statistics and crashes

The app includes no third-party audience measurement or crash reporting tool. If you have agreed, in your iPhone settings, to share analytics with developers, Apple sends us anonymous crash reports. If we ever add usage statistics, they will be turned off by default, will contain no health data, and this page will be updated beforehand.

If you write to us

Your email address and your message are used only to reply to you. They are kept for three years at most after our last exchange, then deleted. Email service used: Apple’s iCloud+ (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). Legal basis: our legitimate interest in replying to people who contact us (Article 6(1)(f) of the GDPR).

7. Health data

Your weight, measurements, workouts, diet, supplements, and cycle may reveal information about your health: we treat them as health data within the meaning of Article 9 of the GDPR. They stay on your iPhone. They leave it only through the AI coach, with your explicit consent, and only the excerpts needed for the answer. They are never used for advertising, profiling, or reselling. If you live in the United States, our Consumer Health Data Privacy Policy also applies.

The coach’s goals, estimates, and answers are for information only: they do not replace the advice of a doctor or health professional.

8. Service providers and transfers

No data is sold, rented, or used for advertising. Only these service providers are involved:

Cloudflare and OpenAI may process this data outside the European Union, in particular in the United States. These transfers are governed by the European Commission’s adequacy decision for companies certified under the EU–U.S. Data Privacy Framework and, failing that, by the European Commission’s standard contractual clauses included in their data processing terms.

9. Retention periods

10. Your rights

You have the rights of access, rectification, erasure, restriction, objection, and portability, the right to withdraw your consent at any time, and the right to set instructions regarding what happens to your data after your death.

• In the app, right away: view and correct your entire log; export all your data (Settings › Data); delete everything (Settings › Data › Delete all my data); withdraw your consent for the coach or photo analysis (Settings › Privacy).
• By email: write to contact@getlesto.app. Since Lesto does not ask you for an account, the data sent to our service providers is linked neither to your name nor to your address: we cannot retrieve it item by item, but it is automatically deleted within the periods above.
• Complaint: if you believe your rights are not being respected, you can file a complaint with the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr/fr/plaintes).

11. Minimum age

Lesto is intended for people aged 16 and over. The features that send data (AI coach, photo analysis) require a consent that only a person of that age can give on their own.

12. Security

• All connections are encrypted (HTTPS).
• The access keys to the AI models are kept on the relay server, never in the app.
• On your iPhone, the app’s data is protected by iOS encryption.

13. This website

This website sets no cookies, uses no audience measurement, and loads its fonts from its own server. Its host, Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (+1 650 319 8930), cloudflare.com, records visitors’ IP addresses in its technical logs, for the security of the service.

14. Changes and contact

If this policy changes, the date at the top of the page is updated; a significant change (new service provider, new data sent) is announced in the app before it takes effect, and your consent is requested again when needed.

A question? contact@getlesto.app.