LETSBURNFIT

Privacy Policy

Last updated: November 4, 2026

LetsBurnFit ("we", "our", or "us") operates the LetsBurnFit mobile application and website. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

1. Information we collect

Account information: When you create an account, we collect your email address, name, age, gender, height, and weight.

Quiz answers before you have an account: When you enter your email address at the end of the quiz on our website, we hold your quiz answers (such as your name, age, sex, height, weight, goals, equipment, and any injuries or symptoms you chose), that email address, and how you reached the quiz (the link or ad you came from, if any), so the app can build your plan from them when you sign in. We hold them for 7 days after your latest quiz submit, and taking the quiz again starts the 7 days over. If you create your account in that time, your answers set up your plan and the held copy is deleted. If you don't, or if you already have an account, the held copy is deleted automatically when the 7 days end, by a clean-up that runs every hour, so at the latest within an hour after that. To have it deleted sooner, contact us at the address in section 13.

Fitness profile: We collect your fitness level, goals, injuries or limitations, available equipment, preferred workout days, session length, diet preference, and dietary restrictions. This information is used to generate your personalized workout and meal plans.

Body composition data: The body composition estimate (body fat percentage, lean mass, BMI, BMR and visceral fat) is calculated from the height, weight, age, sex and tape measurements you enter, using the US Navy circumference method and BMI formulas. These are mathematical estimates, not medical measurements. If you take body photos during a scan, they are transmitted to Anthropic's Claude API for a single automated check that a full body is in frame; the photos are not used to compute your results and are not stored on our servers. Anthropic's policy for API users says: “we automatically delete inputs and outputs on our backend within 30 days of receipt or generation”, except “If we need to retain them for longer to enforce our Usage Policy” or “In compliance with the law” (see Anthropic's data retention page).

Food photos and descriptions: When you use the food photo scanner, the meal or nutrition-label photo you take or choose, or the description you type, is transmitted to Anthropic's Claude API to identify the food and estimate calories, protein, carbohydrates and fat. The estimate is saved to your account; the photo itself is not stored on our servers.

Activity data: We collect workout logs, cardio sessions, exercise performance data, meal logs, the daily "followed the plan?" check-in, weigh-ins and progress data that you enter into the app.

Feedback you send us: If you use "Send feedback" in the app, we store your message, the category you chose, and basic device details (platform, app version, and the screen you were on) so we can reproduce problems. If you allow replies, the message is emailed to us with your account email address as the reply address so we can answer you directly. Feedback is private: it is never shown to other members.

Health apps and devices: LetsBurnFit does not read from Apple Health, Health Connect, Google Fit, a smartwatch, or any device sensor. Your numbers come from what you enter.

AI coaching conversations: Messages you send to the AI coach are processed to provide personalized fitness and nutrition guidance.

Payment information: Subscription payments are processed by Google Play (Android), Apple App Store (iOS), or Stripe (web). We do not directly store your credit card number or payment credentials. We receive confirmation of your subscription status. When you subscribe on our website, we also report the purchase to Meta, as described in section 5. Purchases made in the app through the App Store or Google Play are not reported to any advertising company.

2. How we use your information

We use your information to:

• Generate personalized workout plans tailored to your goals, equipment, and schedule
• Create custom meal plans with macronutrient calculations based on your body composition
• Provide AI coaching responses relevant to your fitness profile and history
• Calculate body composition estimates from your physical measurements
• Track your fitness progress over time, including personal records and body scan history
• Generate monthly progress reports summarizing your training and nutrition data
• Send transactional emails (account verification, subscription confirmations)
• Send optional marketing emails (workout tips, progress updates) with your consent
• Improve our services and fix technical issues
• Measure visits to our website and how well our ads work (section 5)

3. Data storage and security

Your data is stored using Supabase, which provides enterprise-grade security with encryption at rest and row-level access controls. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Only you can access your personal fitness data through your authenticated account.

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

4. Third-party services

We use the following third-party services to run the app and the website:

• Supabase — database hosting and user authentication
• Anthropic (Claude API) — food photo and typed-meal estimates, the body-photo framing check, and meal plan generation, which sends your name, age, sex, height, weight, fitness profile (including injuries and diet) and latest body scan numbers
• Groq — generates the AI coach's replies from the messages you send it, your name, age, sex and weight, your fitness profile, your recent workouts and your latest body scan numbers
• Resend — email delivery service
• Google Play / Apple App Store — subscription payment processing (mobile)
• Stripe — payment processing (web)
• Open Food Facts and USDA FoodData Central — look up the barcode you scan; they receive only the barcode number
• Google Analytics (Google) — measures visits to our website (section 5)
• Meta Platforms — measures our Facebook and Instagram ads on our website (section 5)
• Vercel — hosts our website. Like any web host, it keeps a short record of each request to the site (your IP address, approximate country, the address requested, the time, the page you came from and your browser type), which we can read for 12 hours.

Starting with version 1.1.2 of the iPhone and Android app, the app asks before it first sends anything to Anthropic or Groq, and sends nothing to them if you say no.

These services process data in accordance with their own privacy policies. We do not sell or rent your personal data. Apart from the website measurement described in section 5, we do not share your personal data with anyone for advertising or marketing.

5. Website analytics and advertising

Our website, including the quiz, uses two measurement tools from other companies. They use cookies and similar technology in your browser.

• Google Analytics (Google LLC) counts visits and how people move through the site, so we can see which pages work. Google receives the pages you view and what you do on them, such as scrolling or following a link, your browser and device type, an approximate location based on your IP address, and a cookie identifier.
• Meta Pixel (Meta Platforms, Inc.) tells Meta when you view a page, finish the quiz, submit your email, create an account, or tap through to Google Play, so we can measure our Facebook and Instagram ads and show them to people likely to want the app. Meta receives those events, your IP address and browser details, a cookie identifier, and the ad click ID if you arrived from a Meta ad.

When you pay for a subscription on our website (payments are handled by Stripe), including each renewal, our server also sends Meta a record of that payment: the amount, the currency, the plan, the ad click ID if you arrived from a Meta ad, and your email address and account ID in hashed form, which Meta uses to match the purchase to a Facebook or Instagram account. Purchases made in the app through the App Store or Google Play are not reported to Meta or any other advertising company.

In the European Economic Area, the United Kingdom and Switzerland, both tools stay off unless you accept them in the banner. Elsewhere they are on when you visit. You can block or clear this site's cookies and stored data in your browser (which also brings the banner back in those regions), turn off Google Analytics with Google's opt-out add-on at tools.google.com/dlpage/gaoptout, and change your ad preferences in your Facebook or Instagram settings.

Our links page (letsburnfitness.com/links) does not use either of these tools. Its store buttons pass through a short address on our own site, such as letsburnfitness.com/go/lbf-ios, before the store opens. From our web host's request records we count visits to the page and taps on each button, and we keep only those totals: no IP address, cookie, device ID or account ID is kept with them.

The LetsBurnFit app works differently. It contains no advertising or analytics code from other companies and does not track you across other companies' apps or websites. It records basic events in our own database, such as when you open the app, start a workout or see the subscription screen, to fix problems and improve the app. That record is not shared with advertisers.

6. Health and medical disclaimer

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data is permanently removed from our systems, including your profile, workout logs, body scan history, meal plans, coach conversations, and progress data. This deletion is irreversible.

Quiz answers held before an account exists are kept for no more than 7 days after your latest quiz submit, plus up to one hour for the hourly clean-up, and are then deleted, as described in section 1.

We may retain anonymized, aggregated data (which cannot identify you) for analytics and service improvement purposes.

8. Your rights

You have the right to:

• Access your personal data stored in the app
• Correct inaccurate information through your profile settings
• Delete your account and all associated data (Profile → Delete Account)
• Opt out of marketing emails using the unsubscribe link in any email
• Withdraw consent for data processing at any time by deleting your account, or, in version 1.1.2 or later of the iPhone or Android app, turn off any AI service in Profile under AI services, on each device you use
• Request information about what data we hold about you

9. Email communications

We send two types of emails:

• Transactional emails: Account verification, subscription confirmations, and security alerts. These cannot be opted out of while your account is active.
• Marketing emails: Workout tips, progress updates, fitness guidance, and feature announcements. You can unsubscribe at any time using the link at the bottom of any marketing email, or by adjusting notification preferences in the app.

10. Children's privacy

LetsBurnFit is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have inadvertently collected data from a user under 18, we will delete that data promptly. If you believe a minor has provided us with personal information, please contact us immediately.

11. International data transfers

Your data may be processed and stored on servers located outside your country of residence. By using LetsBurnFit, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place regardless of where your data is processed.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of LetsBurnFit after changes constitutes acceptance of the updated policy.

13. Contact us

If you have questions about this Privacy Policy, your data, or wish to exercise any of your rights, contact us at:

Email: privacy@letsburnfitness.com

Website: letsburnfitness.com