Privacy Policy for Real lean

Introduction

KEIKA, UAB ("we," "our," or "us") operates the Real lean mobile application ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Information We Collect

Personal Information

• Account Information: Name, email address, profile information
• Health Data: Weight, height, age, gender, dietary preferences
• Nutrition Data: Meals logged, calorie intake, macro nutrients, food preferences
• Activity Data: Exercise logs
• Social Data: Friends list, challenges, achievements, social interactions

Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App usage patterns, feature interactions, session duration
• Location Data: Approximate location for restaurant recommendations (optional)
• Photos: Meal photos uploaded by user (stored locally and optionally synced)

Third-Party Data

• Food Database: Nutritional information from OpenFoodFacts and other public databases

How We Use Your Information

Primary Purposes

1. Nutrition Tracking: Calculate and track your daily nutrition intake
2. Goal Setting: Provide personalized calorie and macro recommendations
3. Progress Monitoring: Track weight changes and fitness progress over time
4. Social Features: Enable friend connections, challenges, and leaderboards

Secondary Purposes

• App Improvement: Analyze usage patterns to enhance user experience
• Customer Support: Respond to inquiries and provide technical assistance
• Security: Prevent fraud and ensure platform security
• Legal Compliance: Meet legal obligations and protect rights

Information Sharing and Disclosure

We DO NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for marketing purposes.

We Share Data Only When:

1. With Your Consent: When you explicitly authorize sharing
2. Social Features: Friend data visible to your connected friends only
3. Service Providers: Trusted partners who help operate our service:
   • Supabase: Database hosting and user authentication
   • Apple: App Store integration
4. Legal Requirements: When required by law or to protect safety
5. Business Transfers: In case of merger, acquisition, or sale of assets

Data Anonymization

• Analytics data is aggregated and de-identified
• No personal identifiers shared with third-party services

Data Storage and Security

Security Measures

• Encryption: All data encrypted in transit and at rest
• Access Controls: Strict access controls for our team
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Industry-standard cloud security (Supabase/AWS)

Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: Data deleted after 2 years of inactivity
• Deleted Accounts: All data permanently deleted within 30 days
• Backup Data: Removed from backups within 90 days of deletion

International Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses
• Adequacy decisions by relevant authorities
• Strong security measures regardless of location

Your Privacy Rights

Access and Control

• View Data: Access all your stored information through the app
• Update Information: Modify your profile and preferences anytime
• Download Data: Export your complete data in standard formats
• Delete Account: Permanently remove your account and all associated data

European Users (GDPR Rights)

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Opt-out of certain data processing activities
• Right to Restrict: Limit how we process your data

California Users (CCPA Rights)

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We don't sell data, so no opt-out needed
• Non-Discrimination: Equal service regardless of privacy choices

Children's Privacy

Real lean is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information immediately.

Health Information Disclaimer

Important: Real lean is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease. The nutrition and health information provided is for educational purposes only. Always consult with healthcare professionals before making significant dietary or health changes.

Cookie Policy

Mobile App

Our mobile app does not use traditional web cookies but may use:

• Local Storage: For offline functionality and user preferences
• Analytics SDKs: For app performance monitoring (anonymized)
• Authentication Tokens: For secure login sessions

Website (if applicable)

Our website may use cookies for:

• Essential Functions: Site operation and security
• Analytics: Anonymous usage statistics
• Preferences: Remember your settings

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• In-App Notification: Alert within the Real lean app
• Email Notice: If you've provided an email address
• Updated Date: Check the "Last Updated" date above

Continued use of Real lean after changes constitutes acceptance of the updated policy.

Contact Information

Privacy Questions

For privacy-related inquiries, contact us at:

Response Time

We aim to respond to privacy requests within:

• General Inquiries: 48 hours
• Data Requests: 30 days
• Urgent Matters: 24 hours