Leanly is an AI calorie tracker made by Kickpop Studio (Furkan Çetin). This policy explains what data the app uses, where it goes and how you control it. In short: there is no account, your meal log stays on your iPhone, and meal photos are sent for AI analysis only after you agree.
Data stored on your device
Everything you log is stored in the app on your iPhone or iPad: meals and their photos, foods you save, water, weight, fasting sessions, workouts, progress photos, reminders and the profile you enter during setup (sex, birth year, height, weight, goal and activity level). We do not receive a copy of this data.
Widgets read today's totals from a shared container on the same device. Backups are files you export yourself; where you keep them is your choice.
AI meal analysis
Before the first analysis the app asks for your permission. If you agree, each time you analyze a meal the app sends our server the meal photo, the nutrition label photo or the text you typed or dictated, any correction you write, and your app language. It sends nothing else from your log or profile.
Our server runs on Google Cloud (Cloud Functions for Firebase, Frankfurt, Germany). It forwards the request to OpenAI, which returns an estimate of the foods, portions, calories and nutrients. The photo and text are held in memory only for the duration of the request and are not saved on our server. We send requests to OpenAI with response storage turned off; under OpenAI's API terms, data sent through the API is not used to train its models and may be kept for up to 30 days for abuse monitoring.
Dictated meals are turned into text by Apple's speech recognition before anything is sent. You can withdraw your permission at any time in Settings; the app will ask again before the next analysis.
Anonymous identifier
To limit daily analyses and to check whether you have a subscription, the app signs in with an anonymous, random ID (Firebase Authentication). It is not linked to your name, email or phone number. Our database (Cloud Firestore) keeps, for this ID, only the number of analyses today and your subscription status for a few hours. Firebase App Check uses Apple's App Attest to confirm that requests come from the genuine app.
Subscriptions
Purchases are handled by Apple. We never see your payment details. RevenueCat processes purchase receipts and subscription status for us, linked to the anonymous ID above, so that your subscription works and can be restored.
Food database
When you scan a barcode or search for a packaged food, the barcode number or search text is sent to Open Food Facts, an open food database, to look up the product. No other data from the app is included.
Apple Health
If you allow it, Leanly reads steps, active energy, weight and workouts from Apple Health to estimate your daily burn and show your weight trend. This data is used only on your device. It is never sent to our server or to third parties and is never used for advertising. Leanly does not write to Apple Health.
Crash reports and app configuration
If the app crashes, Firebase Crashlytics sends a crash report with technical details such as the device model, the iOS version, the app version and where in the code the crash happened. It does not include your meals or photos.
The app downloads its configuration from Firebase Remote Config. Usage analytics are turned off: we do not collect which screens you open or what you tap.
What we don't do
- We don't show ads and we don't sell or share your data for advertising.
- We don't track you across other companies' apps and websites.
- We don't ask for your name, email or phone number to use the app.
- Progress photos never leave your device unless you share or export them.
Device permissions
The camera (meal and label photos), photos you choose from your library, the microphone and speech recognition (to log a meal by voice), notifications (meal, water and fasting reminders, scheduled on your device) and Apple Health are used only for the features above. Each one is optional and can be changed in iOS Settings.
Keeping and deleting data
Data on your device stays until you delete it. "Delete all data" in Settings removes your log, photos and profile from the device, and deleting the app removes everything it stored.
The record on our server contains no meal content: only today's count of analyses and your subscription status for the anonymous ID. You can ask us to delete it at any time by writing to info@kickpop.app.
Your rights
Depending on where you live, laws such as the GDPR and Turkey's KVKK give you the right to access, correct, delete or object to the processing of your personal data. Write to info@kickpop.app and we will reply within 30 days. You can also complain to your data protection authority.
International transfers
Our server is in the European Union. OpenAI and RevenueCat may process the data described above in the United States. These providers process it on our behalf under their data processing terms.
Children
Leanly is not intended for children under 13 and we do not knowingly collect data from them.
Changes and contact
If this policy changes, we will update it here and change the effective date. For any question about privacy, write to info@kickpop.app.