Legal

Privacy Policy

How Limotein collects, uses, shares, and protects personal data when you use the app, website, and related services.

Effective date: 30 September 2026

1. Who we are

This Privacy Policy (“Policy”) applies to the Limotein mobile application, the website at limotein.com (including subdomains such as app.limotein.com), and related online services (together, the “Service”).

The controller of your personal data is the operator of the Limotein Service (“Limotein”, “we”, “us”, or “our”). For privacy requests, email support@limotein.com. General inquiries: info@limotein.com.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, this Policy is intended to meet applicable requirements under the EU General Data Protection Regulation (GDPR) and equivalent laws.

2. Scope

This Policy covers personal data we process when you:

  • create or use a Limotein account;
  • use nutrition logging, Coach, fasting, day modes, progress, Circle, widgets, watch features, or other in-app tools;
  • visit or interact with our website or marketing pages;
  • contact support; or
  • subscribe to Premium through Apple App Store, Google Play, or other offer channels we operate.

It does not control the privacy practices of Apple, Google, or other independent third parties. Their policies apply to their own services.

3. Personal data we collect

Depending on how you use the Service, we may process the categories below.

3.1 Account and identity

  • Email address, display name or username, and authentication identifiers.
  • Sign-in data from providers you choose (for example Sign in with Apple or Google), including tokens and profile basics those providers share with us.
  • Subscription and entitlement status (free, trial, Premium), store product identifiers, and related billing events we receive from our payment partners.

3.2 Profile and goals

  • Age or birth year range, sex or gender if you provide it, height, weight, activity level, language, timezone, day mode preferences, calorie and macro targets, and similar settings you enter.
  • Weight history and progress metrics you log in the app.

3.3 Nutrition, fasting, and Coach content

  • Meal logs, water logs, barcodes, catalog searches, text descriptions, and confirmed nutrition values.
  • Photos or images you submit for meal recognition or Coach.
  • Voice recordings or audio you submit for transcription and logging.
  • Coach chat messages, drafts, confirmations, and related tool actions.
  • Fasting windows, start/stop events, and related schedule settings.

Some of this information may be treated as health-related data under applicable law because it concerns diet, body metrics, or wellness activity. We process it to provide the features you request.

3.4 Device health integrations (optional)

If you grant permission, we may read selected data from Apple Health (HealthKit) and/or Android Health Connect, such as:

  • steps and exercise or active minutes;
  • active energy burned; and
  • sleep duration or sleep stages.

We use this data to display progress and related features inside Limotein. We do not sell HealthKit or Health Connect data. You can revoke access in your device settings at any time. If you do not grant access, you can still use Limotein and enter many values manually.

3.5 Device, usage, and diagnostics

  • Device type, OS version, app version, language, timezone, and approximate technical identifiers needed to operate the Service.
  • In-app events, feature usage, crash logs, and performance diagnostics.
  • IP address and similar network data when you connect to our servers or website.

3.6 Notifications and marketing preferences

  • Push notification tokens and delivery metadata when you enable notifications.
  • Communication preferences and support correspondence.

3.7 Website data

  • Standard server logs and, where used, cookies or similar technologies for security, preferences (such as theme), analytics, and performance.
  • Information you submit through contact forms or email.

3.8 Advertising identifiers (where applicable)

On some platforms we may show ads through Google Mobile Ads or similar partners. Those partners may process advertising identifiers and interaction data subject to your device consent settings (for example App Tracking Transparency on iOS where required).

4. How we collect data

  • Directly from you: account setup, profile, logs, photos, voice, Coach messages, support emails.
  • Automatically: app and website telemetry, diagnostics, and security logs.
  • From device platforms: Apple Health / Health Connect when you authorize access; camera, microphone, photo library, and notification permissions when you grant them.
  • From processors and stores: Firebase Authentication events; Apple and Google purchase and entitlement signals via RevenueCat and store webhooks; push delivery status via OneSignal.

5. Why we use data (purposes and legal bases)

We process personal data for the purposes below. Where GDPR applies, the primary legal bases are indicated.

  • Provide the Service (contract / steps prior to contract): create accounts, sync logs, run Coach and AI features you request, manage fasting and day modes, show progress, sync optional health metrics, and deliver core app functionality.
  • Subscriptions and access control (contract / legitimate interests): verify Premium status, apply entitlements, prevent abuse, and reconcile store billing events.
  • Improve and secure the Service (legitimate interests): analytics, debugging, crash reporting, fraud and abuse prevention, and product development. Where required, we rely on consent for non-essential analytics or advertising cookies.
  • Communications (contract / legitimate interests / consent): transactional messages, support replies, and optional product updates or push nudges you enable.
  • Legal compliance (legal obligation): respond to lawful requests, keep records where required, and enforce our Terms.
  • Marketing (consent or legitimate interests, as applicable): website analytics and, where used, advertising measurement. You can withdraw consent where processing is based on consent.

Where we process special-category health data under GDPR Article 9, we do so because the processing is necessary to provide health-related features you explicitly request, and/or based on your explicit consent where required by law. You may withdraw consent for optional health integrations in device settings or by contacting us, without affecting processing that remains necessary for other requested features.

6. Artificial intelligence processing

Limotein uses artificial intelligence and machine-learning systems (including third-party model providers such as OpenAI) to:

  • estimate calories and macros from text, photos, voice, and barcodes;
  • power Coach replies and drafting; and
  • transcribe voice input.

Inputs you submit for these features (for example meal text, images, or audio) are transmitted to our servers and may be processed by AI providers acting as processors on our instructions, under contractual safeguards. AI outputs are estimates. They can be incomplete or incorrect. You remain responsible for reviewing and confirming important entries before relying on them. See also our Disclaimer and Terms.

7. Sharing and processors

We do not sell your personal data. We share data only as needed to operate the Service, including with:

  • Google Firebase / Google Cloud: authentication, hosting-related infrastructure, analytics, crash reporting (Crashlytics), and related platform services.
  • OpenAI and other AI vendors: processing of prompts, images, and audio you submit for Coach, recognition, and transcription.
  • RevenueCat: subscription status and purchase events, together with Apple App Store and Google Play billing systems.
  • Mixpanel: product analytics.
  • OneSignal: push notifications.
  • Google Mobile Ads (where enabled): advertising delivery and measurement.
  • Hosting and infrastructure providers for our API and website.
  • Professional advisers and authorities when required by law or to protect rights, safety, and security.

These parties process data under their own terms where they act as independent controllers (for example Apple or Google as app stores), or under agreements with us where they act as processors.

If we are involved in a merger, acquisition, financing, or asset sale, personal data may be transferred as part of that transaction, subject to appropriate safeguards and notice where required.

8. International transfers

We and our processors may process data in countries outside your country of residence, including outside the EEA/UK. Those countries may have different data-protection laws. Where required, we use appropriate safeguards such as Standard Contractual Clauses, provider certifications or frameworks recognized by regulators, and contractual and technical measures.

9. Retention

We keep personal data only as long as needed for the purposes described in this Policy, including:

  • while your account remains active;
  • for a limited period after deletion or inactivity to complete deletion workflows, resolve disputes, detect abuse, and meet legal, tax, or accounting requirements; and
  • for backup and security logs for a limited operational period.

Retention periods vary by data type. When data is no longer needed, we delete or anonymize it.

10. Your rights

Subject to applicable law (especially GDPR), you may have the right to:

  • access your personal data;
  • rectify inaccurate data;
  • erase data (“right to be forgotten”);
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a supervisory authority in your country of residence.

To exercise rights, email support@limotein.com from the email associated with your account. We may need to verify your identity before fulfilling a request.

Account deletion: you can request deletion by using in-app account deletion where available, or by emailing support@limotein.com. Deletion removes or anonymizes account data we control, subject to legal retention needs. Purchases managed by Apple or Google must be cancelled in the respective store; deleting your Limotein account does not automatically refund store charges.

If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising where those concepts apply. We do not sell personal information for money. To submit a request, contact support@limotein.com.

11. Children

Limotein is not directed to children under 13 (or the higher age required in your country). We do not knowingly collect personal data from children under that age. If you believe a child has provided data, contact us and we will take appropriate steps to delete it. Users under 18 should use the Service only with parent or guardian involvement where required by law.

12. Security

We use administrative, technical, and organizational measures designed to protect personal data, including encrypted transport (HTTPS), access controls, and vendor security reviews where practicable. No method of transmission or storage is perfectly secure. You are responsible for protecting your account credentials and device.

13. Automated processing

AI features generate estimates and Coach drafts automatically from your inputs. These outputs support your own decisions; you confirm important saves. We do not use solely automated processing to make legal or similarly significant decisions about you without human involvement as contemplated by GDPR Article 22, except where necessary to provide the Service you request (for example generating a meal estimate you asked for).

14. Cookies and similar technologies

Our website may use strictly necessary cookies (for example security or preference storage) and, where enabled, analytics cookies. You can control cookies through your browser settings. Blocking some cookies may affect site functionality.

15. Changes to this Policy

We may update this Policy from time to time. We will post the revised version on this page and update the effective date. If changes are material, we may provide additional notice in the app or by email where appropriate. Continued use of the Service after the effective date of an update constitutes acceptance of the revised Policy, to the extent permitted by law.

16. Contact

Privacy and data-protection requests: support@limotein.com

General: info@limotein.com

Related pages: Terms & Conditions · Disclaimer · Contact