1. Who we are (Controller)
Lento.fit ("Lento.fit", "we", "us") is operated by NETWISE MEDIA SRL, a company registered in Romania.
- Registered office: Bd. Pipera 198 C, Bl. C1, Sc. A, Et. P, Ap. 4, Voluntari, Ilfov, 077190, Romania
- Sole registration code (CUI): 37660685 · Trade Register no.: J2017002567239
- Contact for privacy matters: hello@lento.fit
We are the data controller for the personal data described below.
2. What we collect
- Account data: email address; first name (optional); password is handled by our authentication provider and never stored by us in plain text.
- Sign in with Apple or Google: if you create your account or sign in with Apple or Google, we receive from them your e-mail address (with Apple, possibly a private relay address that Apple creates for you), your name and, with Google, a link to your profile picture if they share them, and an identifier for your account with them. We never receive your Apple or Google password.
- Partner code: if you enter a code from one of our partners (for example a creator who recommended Lento.fit) when you set up the app, we store it with your account and pass it to RevenueCat, so that a later subscription can be credited to that partner. The partner is not told who you are.
- Advertising measurement data: your device's advertising identifier (only if you allow it), install and device data, your IP address, information about the advertising campaign that led to your install, and a small number of app events, as described in Section 5a.
- Profile & goals: age, sex, height, weight, activity level, goal (lose/maintain/gain), dietary preferences, fasting preference.
- Food & nutrition data: meals you log (food names, portions, calories, macros, micros), meal photos you take or upload, barcodes you scan, and coach chat messages.
- Other photos you take in the app: photos of your fridge or pantry when you ask for meal ideas, photos of a nutrition label when you scan one, and a photo of a scale display when you log your weight that way. These are taken only when you start that action.
- Body & progress data: weight entries and body measurements you add.
- Optional health data: if you connect Apple Health / Health Connect, we read steps, sleep, workouts and active energy. Separately, and only if you use Weight & body, we read body weight, body fat and lean mass from the same source so you do not have to retype what your scale already recorded. You control this and can disconnect at any time.
- Technical data: device type, app version, language, and diagnostic/crash data used to keep the app working. On first launch (iOS, Android and web) we may look up the country your IP address suggests, once, to suggest the language of the first screen; the lookup returns only a country code, and we do not store it.
Some of the above (weight, body measurements, food intake, health metrics) may qualify as health-related data (special category, GDPR Art. 9). We process it only to provide the features you ask for, on the legal bases below.
3. Why we use it and our legal bases (GDPR Art. 6 & 9)
| Purpose | Legal basis |
|---|---|
| Create and run your account; provide the tracker & coach | Performance of a contract (Art. 6(1)(b)) |
| Estimate nutrition from your meals/photos and power the AI coach | Your consent for processing health-related data (Art. 9(2)(a)); contract for the rest |
| Optional Apple Health / Health Connect integration | Your consent (you enable it) |
| Measure which of our advertisements brought you to the app and report an install or a subscription to the platform that ran the ad (Section 5a) | Your consent (Art. 6(1)(a)) for the advertising identifier and for anything shared with an advertising platform; our legitimate interests (Art. 6(1)(f)) for counting installs without an advertising identifier |
| Keep the service secure, prevent abuse, fix bugs, improve features | Our legitimate interests (Art. 6(1)(f)) |
| Improve the quality of the AI features — reviewing stored coach conversations and estimate results to write better instructions for the AI and to build test sets we measure quality against (Section 4) | Our legitimate interests (Art. 6(1)(f)); for health-related content, your consent (Art. 9(2)(a)) |
| Comply with legal obligations (e.g. accounting for paid plans) | Legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time (see Section 7); this does not affect processing done before withdrawal.
4. AI processing
Some features of Lento.fit — reading a photo of your food, estimating calories and macros from what you type, meal ideas from a fridge photo, label and scale scans, and the coach — work by sending part of what you log to an AI model. This section says exactly what is sent, when, who receives it, what it is used for, and what is kept.
What is sent, and when
- Photos — the meal photo when you log by photo; fridge/pantry photos when you ask for meal ideas; the nutrition-label photo when you scan a label; the photo of a scale display when you log your weight that way. A photo is sent only when you start that action.
- What you type or dictate — meal descriptions and your corrections when an estimate is wrong. Dictation is turned into text by your phone's own speech recognition; Lento.fit never sends audio recordings.
- Coach messages — your message and the conversation it belongs to, plus any photo you attach to it.
- Your figures — age, sex, height, weight, activity level, goal and your calorie/protein targets; today's totals and recent days' calories and protein; and, for the coach only, body composition and body measurements.
- Activity and sleep figures — if you connected Apple Health / Health Connect: today's step count, today's workout minutes and today's active energy, together with averages (for example "8,200 steps a day over the last 7 days"), are included for the coach and the daily insight. These are totals and averages we compute on your device; raw health records — individual samples, timestamps, workout details — never leave it.
- Food names and their nutrition numbers when a food is saved to our shared food catalogue, so it can be checked against public nutrition databases. This carries no personal data.
Your name, e-mail address and account identifier are never included in what is sent to the AI, and neither is your location. The only place-like value sent is your time-zone name, so that "breakfast" is understood as the right hour.
Who receives it
The AI model is operated by Google LLC. The app never contacts Google directly: your request goes first to our own server functions in the European Union (Frankfurt), which remove your identity and then make the model call on our behalf.
You decide, before anything is sent
The app asks for your permission before the first time it sends anything to the AI, separately for food estimates and for the coach, and tells you what will be sent. You can change your answer at any time in Settings → Privacy & AI. With AI turned off you can still log food by search, by barcode and by hand.
What it is used for
- To produce the estimate or the answer you asked for, and return it to you.
- To keep our shared food catalogue accurate.
- To improve the quality of these features: we review what you log and your stored coach conversations to write better instructions for the AI, to choose between models, to build test sets we measure quality against, and to train and refine our own models and systems. When we do this, we work with the content of what was logged — not with your name, e‑mail address or account identifier.
We do not use any of this for advertising or profiling, and we do not sell it. AI outputs are estimates and general information, not medical or dietary advice (see our Disclaimer).
Equal protection
We confirm that the third parties we share this data with provide the same or equal protection of your data as this policy does. They act as our processors under a written data-processing agreement; they may process the data only on our instructions and only for the purposes described above; they are bound by confidentiality and by appropriate technical and organisational security measures; they may not use your data for their own purposes; and where processing takes place outside the EEA it is covered by the EU Standard Contractual Clauses. Google's terms for the AI service we use state that data submitted through it is not used to train its models — that is Google's own commitment, quoted here as theirs, not a promise we can verify for them.
What is kept
- Meal photos are stored in your own journal, in private per-user storage on our EU servers, so you can see them again. They are deleted when you delete the meal or your account.
- Fridge, nutrition-label and scale photos are sent for the reading and are not stored by us afterwards.
- Coach conversations (your messages and the replies) are kept with your account, for the purposes above. We do not currently apply an automatic deletion period to them. You can delete a conversation in the app, delete your whole coach history in Settings → Privacy & AI, or delete your account, and they are removed from our systems.
- What Google keeps, and for how long, is governed by its own terms for the AI service; we do not control it. Ask us at hello@lento.fit and we will tell you what those terms say at the time.
5. Who we share it with (recipients / processors)
We do not sell your personal data and we do not use it for third-party advertising. We share it only with service providers ("processors") who help us run Lento.fit, by category:
- Cloud hosting, database, authentication and file storage — Supabase (European Union, Frankfurt);
- AI processing — Google LLC (Section 4);
- Country lookup for the first-screen language — ipwhois.io, which receives your IP address for that single request and returns a country code; no account, health or usage data is sent with it, and we store nothing from it;
- Error/crash monitoring — Sentry (EU region) — and product analytics — PostHog (EU region) — both of which receive app events and a pseudonymous account identifier, not your food log;
- Advertising measurement — AppsFlyer (AppsFlyer Ltd.), which receives the data described in Section 5a, not your food log;
- Product lookup for barcodes — Open Food Facts, which receives the scanned barcode only;
- E-mail delivery — Resend (Plus Five Five, Inc.), which receives your e-mail address and the content of the message we send you (sign-up confirmation, password reset, the weekly progress e-mail). It does not receive your food log;
- Website hosting — Vercel;
- App distribution and, for paid plans, payment processing — Apple, Google Play and RevenueCat (subscription status; no card details reach us).
Every one of these acts as our processor under a written agreement and gives your data the same or equal protection as this policy describes — instructions only, confidentiality, appropriate security, no use for their own purposes, and Standard Contractual Clauses where anything is processed outside the EEA. The current list is the one above; if it changes we update this page.
Advertising measurement (Section 5a) is the one case in which information about your installation can reach an advertising platform, and only if you allow it. Those platforms are not our processors: they act as independent controllers under their own privacy policies.
5a. Measuring our ads (attribution)
We advertise Lento.fit on platforms such as Apple (Apple Ads), Meta (Facebook, Instagram) and TikTok, and may do so on Google. To learn which advertisement brought you to the app — so we can see which campaigns work and stop paying for those that do not — the app includes the AppsFlyer measurement service from version 1.0.2. This section says what is sent, when, who receives it, on what basis, for how long, and how you can say no.
What is sent, and when
- Your device's advertising identifier (the IDFA on iPhone, the Google Advertising ID on Android) — only after you allow it: on iPhone through Apple's "Allow tracking" dialog (App Tracking Transparency), which the app shows after a short explanation during setup; on Android through the question the app asks you. Until you say yes, the app tells AppsFlyer not to collect it.
- Install and device data: an identifier AppsFlyer creates for this installation of the app, the device's own app identifiers (such as Apple's identifier for vendors), the app version, the operating system and its version, the device model and the language.
- Your IP address, which every connection carries and which is used for approximate location, such as the country.
- Campaign information: which advertising platform, campaign and ad, if any, preceded your install, including the signals the stores provide for this (on Android the Google Play Install Referrer; on iPhone Apple's own ad attribution mechanisms, which report that an install followed an ad without identifying you).
- A pseudonymous account identifier (not your name or e-mail address), so a subscription can be matched to the installation it belongs to.
- A small number of app events: install and app opens; account created (with the sign-in method); setup finished (with the type of goal — lose, maintain or gain — and the pace you chose, without any numbers); the first meal logged with a photo (the fact only, with no photo and no food); and trial started and subscription started, renewed or cancelled, which RevenueCat reports to AppsFlyer.
Your meals, meal photos, weight, body measurements, health data, coach conversations, name and e-mail address are never part of this.
Who receives it
AppsFlyer Ltd. acts as our processor under a written data-processing agreement: it may process the data only on our instructions and only for the purposes in this section, and may not use it for its own purposes. AppsFlyer works out which advertisement, if any, preceded your install. Only if you allowed it, it then tells the advertising platform that ran the ad — Apple Distribution International Ltd., Meta Platforms Ireland Ltd., TikTok Technology Ltd. or, if we advertise there, Google Ireland Ltd. — that an install or one of the events above happened, so the platform can credit its ad and improve who it shows our ads to. Each platform uses what it receives under its own privacy policy, as an independent controller. If you did not allow it, AppsFlyer still counts the install for our own statistics, without your advertising identifier, but shares nothing with any advertising platform.
Why, and on what legal basis
We use this data to measure our campaigns and to improve our advertising. We do not show advertisements inside the app and we do not sell your data. Reading your advertising identifier and sharing anything with an advertising platform rests on your consent (Art. 6(1)(a) GDPR and the ePrivacy rules on access to your device); saying no costs you nothing in the app. Counting installs without an advertising identifier rests on our legitimate interests (Art. 6(1)(f)) in knowing which of our campaigns work.
Transfers outside the EEA
AppsFlyer Ltd. is established in Israel, a country the European Commission recognises as providing an adequate level of protection. Where AppsFlyer or its sub-processors process the data in another country outside the EEA, the EU Standard Contractual Clauses apply. The advertising platforms may transfer what they receive outside the EEA under the safeguards described in their own privacy policies.
How long it is kept
AppsFlyer keeps device-level measurement data for no more than 24 months, after which it is deleted and only aggregate statistics without identifiers remain. You can ask us to have it deleted earlier by writing to hello@lento.fit. What an advertising platform keeps of an event reported to it is governed by that platform's own policy.
Your choice, and how to change it
- In the app: Settings → Ad measurement shows your current choice and lets you give or withdraw it at any time.
- iPhone: Settings → Privacy & Security → Tracking — switch Lento.fit off, or turn off "Allow Apps to Request to Track" for every app.
- Android: Settings → Google → Ads (on some phones Settings → Privacy → Ads) — delete or reset your advertising ID; once it is deleted, apps cannot read it.
- Withdrawing your consent stops any further sharing with advertising platforms from that moment; it does not affect what was reported before you withdrew it.
6. Where your data is stored
Your account and the data described above are hosted and processed in the European Union — our database, authentication, file storage and server functions run in Frankfurt, Germany. We keep your data within the EU/EEA. If any processor ever needs to process data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
Advertising measurement through AppsFlyer, and any report to an advertising platform, may involve processing outside the EEA; Section 5a describes the safeguards.
7. Your rights (GDPR)
You have the right to: access your data; rectify it; erase it ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time. You can delete your account and all associated data directly in the app (Settings → Account → Delete account), or by emailing hello@lento.fit.
You also have the right to lodge a complaint with your local supervisory authority. In Romania this is the ANSPDCP (National Supervisory Authority for Personal Data Processing), www.dataprotection.ro.
8. How long we keep it
We keep your data for as long as your account is active. When you delete your account, we delete your personal data from our live systems within a reasonable period, except where we must keep limited records to meet a legal obligation (e.g. invoices).
In particular: meal photos stay in your journal until you delete the meal or your account; fridge, label and scale photos are not stored by us at all; coach conversations are kept with your account with no automatic deletion period today, and you can remove them yourself at any time (Section 4).
Advertising measurement data held by AppsFlyer is kept for no more than 24 months, whether or not you delete your account (Section 5a); you can ask us to have it deleted earlier.
9. Children
Lento.fit is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the app, contact us and we will delete the data.
10. Cookies (website)
This section applies to the lento.fit website only, not to information processed inside the Lento.fit mobile application. The mobile application does not use browser cookies. The website stores theme and analytics-consent choices locally in your browser.
From 24 August 2026, the website loads Microsoft Clarity with analytics and advertising
storage denied. Before consent, Clarity runs in a limited cookieless mode: it
does not set _clck or _clsk and cannot connect visits into a persistent
multi-page session. It may process individual page views and basic interaction, device and
technical information so we can understand and improve the website.
We rely on our legitimate interests under Article 6(1)(f) GDPR for this limited cookieless
measurement. If you choose Accept analytics, analytics storage becomes granted:
Clarity may set _clck and _clsk and provide session continuity and
recordings. The legal basis for that cookie-enabled analytics processing is your consent under
Article 6(1)(a) GDPR. Advertising storage remains denied and we do not use Clarity for advertising.
If you decline, Clarity remains in limited cookieless mode with both storage types denied. You can change or withdraw your choice at any time through Privacy settings in the website footer. Withdrawing consent returns Clarity to cookieless mode and requests removal of its first-party cookies. See the Microsoft Privacy Statement for more information.
11. Changes
We may update this policy. We will post the new version here and update the "Last updated" date; significant changes will be communicated in the app or by email.
12. Contact
Questions or requests: hello@lento.fit — NETWISE MEDIA SRL, Bd. Pipera 198 C, Voluntari, Ilfov, 077190, Romania.