Privacy Policy

Version 1.4-2026-07-06. This policy explains what personal data Lonero collects, why, how long we keep it, and the rights you have over it. Lonero is only for people aged 18 or older.

Who is responsible

Lonero (“we”) is the data controller for the personal data described here. Contact for all privacy matters: [email protected].

What we collect and why

• Account data — name, email, password (stored only as a strong one-way hash). Legal basis: performance of a contract (providing your account).
• Health & fitness profile — age, gender, height, weight, target weight, activity and fitness level, exercise preferences, diet type, fasting preference, allergies, declared health conditions and injuries, and optional medical notes. This is special-category (health) data. Legal basis: your explicit consent, which we ask for before storing any of it and record with a timestamp and policy version. You can withdraw it at any time (see “Your rights”). Declared conditions and injuries are used only to make your program safer — including refusing to generate one and referring you to a doctor when that is the responsible answer.
• Body measurements (optional) — weight and girth measurements you choose to record, with their dates. Health data under the same explicit consent; used only to show you your own trends (and, only if you enable it, to inform your next plan). Delete any entry, or all of it, at any time.
• Daily wellness log (optional) — the things you choose to tick off each day: workout done, diet on-track, water, cardio, and optional self-reported sleep hours, mood, energy and steps. Health data under your explicit consent; shown only to you in your own progress views, never sold or shared. Erase it with your health data any time.
• Support messages — if you open a support ticket, we store the conversation so we can help and keep a history for you. Included in your data export and deleted with your account.
• Notifications — app notifications and announcements you receive; read state is stored so the bell works. No tracking pixels, ever.
• Progress history for future plans (optional, off by default)— if you switch on “learn from my progress”, the plan generator reads a compact summary of your past plan, adherence logs, meal-diary averages and measurement trends to make the next program progressive. You can switch this off at any time in your profile; nothing extra is stored — it only changes what the generator may read.
• Medication log (optional) — if you choose to use the GLP-1 medication diary: medication name, prescribed dose, schedule, injection sites and dose history. This is special-category health data processed only with your separate explicit consent, given when you enable the feature. Lonero never advises taking, stopping or dosing any medication — the diary exists solely to record and remind you of what your doctor prescribed. Withdraw consent and erase this data at any time from your profile.
• Meal diary (optional) — meals you choose to log: food name, amount, calories and macros, per day. Health data under your existing explicit consent; used only to show you your own intake versus your plan. Erase any entry, or all of it, at any time.
• Food photos — never stored. When you photograph food, a menu or your fridge for analysis, the image is sent to our AI processor (Google Gemini), analysed, answered and immediately discarded. It is never written to our servers or database, and we strip photo metadata (including location) before upload. Only the nutrition numbers you explicitly choose to save become part of your meal diary. Please avoid including people in these photos.
• Food database lookups — searching foods by name or barcode queries the public Open Food Facts database. Only the search text or barcode is sent — never your identity or any account data.
• Session data — authentication cookies and hashed session tokens so you stay signed in securely. Legal basis: legitimate interest in account security.

We practise data minimisation: no advertising trackers, no analytics profiles, no selling or sharing of data for marketing — ever.

AI processing

To generate your personal diet and workout plan and to power coach chat and exercise search, relevant parts of your profile are processed by Google LLC (Gemini API)acting as our processor. Google processes this data to provide the service to us and, per its API terms for paid services, does not use it to train its models. This may involve transfers outside your country, safeguarded by Google's standard contractual clauses.

Cookies

We use only strictly necessary cookies(sign-in session). No advertising or analytics cookies are set, which is why we don't show a cookie banner.

Retention

• Account and profile data: kept until you delete it or your account.
• Expired or revoked session tokens: purged automatically within days.
• Consent records: kept while your account exists, as legal proof of consent.
• Deleting your account erases all of the above immediately and permanently.

Your rights

Under the GDPR and similar laws you can, at any time and free of charge:

• Access & portability — download everything we hold about you as JSON from your profile page.
• Rectification — edit your details and answers in the app.
• Withdraw consent / erase health data — delete your health profile from your profile page; your account survives, the health data does not.
• Full erasure — delete your account from your profile page; everything is removed immediately.
• Complain— to your local data-protection authority, though we'd appreciate the chance to resolve issues first via [email protected].

Children

Lonero is not directed at children and does not knowingly collect data from anyone under 18 (well above the COPPA and GDPR minor thresholds). Age is verified at onboarding; if we learn that a minor has provided data, we delete the account.

Security

Passwords are hashed with argon2id; sessions use short-lived, rotating, httpOnly cookies; all input is validated server-side; credentials and cookies are excluded from server logs.

Changes

If this policy changes materially, the version above changes and you will be asked to review and re-consent before we process your data under the new terms.