1. Who we are (Controller)
Lento.fit ("Lento.fit", "we", "us") is operated by NETWISE MEDIA SRL, a company registered in Romania.
- Registered office: Bd. Pipera 198 C, Bl. C1, Sc. A, Et. P, Ap. 4, Voluntari, Ilfov, 077190, Romania
- Sole registration code (CUI): 37660685 · Trade Register no.: J2017002567239
- Contact for privacy matters: hello@lento.fit
We are the data controller for the personal data described below.
2. What we collect
- Account data: email address; first name (optional); password is handled by our authentication provider and never stored by us in plain text.
- Profile & goals: age, sex, height, weight, activity level, goal (lose/maintain/gain), dietary preferences, fasting preference.
- Food & nutrition data: meals you log (food names, portions, calories, macros, micros), meal photos you take or upload, barcodes you scan, and coach chat messages.
- Other photos you take in the app: photos of your fridge or pantry when you ask for meal ideas, photos of a nutrition label when you scan one, and a photo of a scale display when you log your weight that way. These are taken only when you start that action.
- Body & progress data: weight entries and body measurements you add.
- Optional health data: if you connect Apple Health / Health Connect, we read steps, sleep, workouts and active energy. Separately, and only if you use Weight & body, we read body weight, body fat and lean mass from the same source so you do not have to retype what your scale already recorded. You control this and can disconnect at any time.
- Technical data: device type, app version, language, and diagnostic/crash data used to keep the app working. On first launch (iOS, Android and web) we may look up the country your IP address suggests, once, to suggest the language of the first screen; the lookup returns only a country code, and we do not store it.
Some of the above (weight, body measurements, food intake, health metrics) may qualify as health-related data (special category, GDPR Art. 9). We process it only to provide the features you ask for, on the legal bases below.
3. Why we use it and our legal bases (GDPR Art. 6 & 9)
| Purpose | Legal basis |
|---|---|
| Create and run your account; provide the tracker & coach | Performance of a contract (Art. 6(1)(b)) |
| Estimate nutrition from your meals/photos and power the AI coach | Your consent for processing health-related data (Art. 9(2)(a)); contract for the rest |
| Optional Apple Health / Health Connect integration | Your consent (you enable it) |
| Keep the service secure, prevent abuse, fix bugs, improve features | Our legitimate interests (Art. 6(1)(f)) |
| Improve the quality of the AI features — reviewing stored coach conversations and estimate results to write better instructions for the AI and to build test sets we measure quality against (Section 4) | Our legitimate interests (Art. 6(1)(f)); for health-related content, your consent (Art. 9(2)(a)) |
| Comply with legal obligations (e.g. accounting for paid plans) | Legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time (see Section 7); this does not affect processing done before withdrawal.
4. AI processing
Some features of Lento.fit — reading a photo of your food, estimating calories and macros from what you type, meal ideas from a fridge photo, label and scale scans, and the coach — work by sending part of what you log to an AI model. This section says exactly what is sent, when, who receives it, what it is used for, and what is kept.
What is sent, and when
- Photos — the meal photo when you log by photo; fridge/pantry photos when you ask for meal ideas; the nutrition-label photo when you scan a label; the photo of a scale display when you log your weight that way. A photo is sent only when you start that action.
- What you type or dictate — meal descriptions and your corrections when an estimate is wrong. Dictation is turned into text by your phone's own speech recognition; Lento.fit never sends audio recordings.
- Coach messages — your message and the conversation it belongs to, plus any photo you attach to it.
- Your figures — age, sex, height, weight, activity level, goal and your calorie/protein targets; today's totals and recent days' calories and protein; and, for the coach only, body composition and body measurements.
- Activity and sleep figures — if you connected Apple Health / Health Connect: today's step count, today's workout minutes and today's active energy, together with averages (for example "8,200 steps a day over the last 7 days"), are included for the coach and the daily insight. These are totals and averages we compute on your device; raw health records — individual samples, timestamps, workout details — never leave it.
- Food names and their nutrition numbers when a food is saved to our shared food catalogue, so it can be checked against public nutrition databases. This carries no personal data.
Your name, e-mail address and account identifier are never included in what is sent to the AI, and neither is your location. The only place-like value sent is your time-zone name, so that "breakfast" is understood as the right hour.
Who receives it
The AI model is operated by Google LLC. The app never contacts Google directly: your request goes first to our own server functions in the European Union (Frankfurt), which remove your identity and then make the model call on our behalf.
You decide, before anything is sent
The app asks for your permission before the first time it sends anything to the AI, separately for food estimates and for the coach, and tells you what will be sent. You can change your answer at any time in Settings → Privacy & AI. With AI turned off you can still log food by search, by barcode and by hand.
What it is used for
- To produce the estimate or the answer you asked for, and return it to you.
- To keep our shared food catalogue accurate.
- To improve the quality of these features: we review what you log and your stored coach conversations to write better instructions for the AI, to choose between models, to build test sets we measure quality against, and to train and refine our own models and systems. When we do this, we work with the content of what was logged — not with your name, e‑mail address or account identifier.
We do not use any of this for advertising or profiling, and we do not sell it. AI outputs are estimates and general information, not medical or dietary advice (see our Disclaimer).
Equal protection
We confirm that the third parties we share this data with provide the same or equal protection of your data as this policy does. They act as our processors under a written data-processing agreement; they may process the data only on our instructions and only for the purposes described above; they are bound by confidentiality and by appropriate technical and organisational security measures; they may not use your data for their own purposes; and where processing takes place outside the EEA it is covered by the EU Standard Contractual Clauses. Google's terms for the AI service we use state that data submitted through it is not used to train its models — that is Google's own commitment, quoted here as theirs, not a promise we can verify for them.
What is kept
- Meal photos are stored in your own journal, in private per-user storage on our EU servers, so you can see them again. They are deleted when you delete the meal or your account.
- Fridge, nutrition-label and scale photos are sent for the reading and are not stored by us afterwards.
- Coach conversations (your messages and the replies) are kept with your account, for the purposes above. We do not currently apply an automatic deletion period to them. You can delete a conversation in the app, delete your whole coach history in Settings → Privacy & AI, or delete your account, and they are removed from our systems.
- What Google keeps, and for how long, is governed by its own terms for the AI service; we do not control it. Ask us at hello@lento.fit and we will tell you what those terms say at the time.
5. Who we share it with (recipients / processors)
We do not sell your personal data and we do not use it for third-party advertising. We share it only with service providers ("processors") who help us run Lento.fit, by category:
- Cloud hosting, database, authentication and file storage — Supabase (European Union, Frankfurt);
- AI processing — Google LLC (Section 4);
- Country lookup for the first-screen language — ipwhois.io, which receives your IP address for that single request and returns a country code; no account, health or usage data is sent with it, and we store nothing from it;
- Error/crash monitoring — Sentry (EU region) — and product analytics — PostHog (EU region) — both of which receive app events and a pseudonymous account identifier, not your food log;
- Product lookup for barcodes — Open Food Facts, which receives the scanned barcode only;
- E-mail delivery — Resend (Plus Five Five, Inc.), which receives your e-mail address and the content of the message we send you (sign-up confirmation, password reset, the weekly progress e-mail). It does not receive your food log;
- Website hosting — Vercel;
- App distribution and, for paid plans, payment processing — Apple, Google Play and RevenueCat (subscription status; no card details reach us).
Every one of these acts as our processor under a written agreement and gives your data the same or equal protection as this policy describes — instructions only, confidentiality, appropriate security, no use for their own purposes, and Standard Contractual Clauses where anything is processed outside the EEA. The current list is the one above; if it changes we update this page.
6. Where your data is stored
Your account and the data described above are hosted and processed in the European Union — our database, authentication, file storage and server functions run in Frankfurt, Germany. We keep your data within the EU/EEA. If any processor ever needs to process data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
7. Your rights (GDPR)
You have the right to: access your data; rectify it; erase it ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time. You can delete your account and all associated data directly in the app (Settings → Account → Delete account), or by emailing hello@lento.fit.
You also have the right to lodge a complaint with your local supervisory authority. In Romania this is the ANSPDCP (National Supervisory Authority for Personal Data Processing), www.dataprotection.ro.
8. How long we keep it
We keep your data for as long as your account is active. When you delete your account, we delete your personal data from our live systems within a reasonable period, except where we must keep limited records to meet a legal obligation (e.g. invoices).
In particular: meal photos stay in your journal until you delete the meal or your account; fridge, label and scale photos are not stored by us at all; coach conversations are kept with your account with no automatic deletion period today, and you can remove them yourself at any time (Section 4).
9. Children
Lento.fit is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the app, contact us and we will delete the data.
10. Cookies (website)
This section applies to the lento.fit website only, not to information processed inside the Lento.fit mobile application. The mobile application does not use browser cookies. The website stores theme and analytics-consent choices locally in your browser.
From 24 August 2026, the website loads Microsoft Clarity with analytics and advertising
storage denied. Before consent, Clarity runs in a limited cookieless mode: it
does not set _clck or _clsk and cannot connect visits into a persistent
multi-page session. It may process individual page views and basic interaction, device and
technical information so we can understand and improve the website.
We rely on our legitimate interests under Article 6(1)(f) GDPR for this limited cookieless
measurement. If you choose Accept analytics, analytics storage becomes granted:
Clarity may set _clck and _clsk and provide session continuity and
recordings. The legal basis for that cookie-enabled analytics processing is your consent under
Article 6(1)(a) GDPR. Advertising storage remains denied and we do not use Clarity for advertising.
If you decline, Clarity remains in limited cookieless mode with both storage types denied. You can change or withdraw your choice at any time through Privacy settings in the website footer. Withdrawing consent returns Clarity to cookieless mode and requests removal of its first-party cookies. See the Microsoft Privacy Statement for more information.
11. Changes
We may update this policy. We will post the new version here and update the "Last updated" date; significant changes will be communicated in the app or by email.
12. Contact
Questions or requests: hello@lento.fit — NETWISE MEDIA SRL, Bd. Pipera 198 C, Voluntari, Ilfov, 077190, Romania.