Privacy Policy

Leanhold is owned and operated by Everpeak Solutions LLC (“we”, “us”). Leanhold is an independent education and habit-coaching product for people using GLP-1 medications. We are not a healthcare provider, and nothing on this site is medical advice. Questions about this policy go to hello@leanhold.com.

• Contact details. Your email address, when you choose to give it to us before seeing your results.
• Consumer health data. The answers you give in the quiz (see the next section for the full list and how we treat it).
• Plan and billing. The plan you choose and the status of your subscription (trial, active, canceled, refunded), as reported by Stripe for website purchases or by Apple for purchases in the iPhone app. Your card details go straight to Stripe or Apple and never touch our servers; we store only their reference numbers for your subscription (a Stripe customer reference, or Apple’s transaction identifiers).
• Usage data. Which screens of the funnel you view and when, an anonymous session ID we generate in your browser, the campaign parameters (utm_*) and referrer you arrived with, your browser type and approximate device information.

What we store. The GLP-1 medication you take (or plan to take), your dose and how long you have been on it, your injection day, your sex, age, height and weight (current, starting and goal), the side effects you report (for example nausea, constipation, fatigue, hair loss or muscle loss), what worries you most, and habits such as protein intake, strength training, water intake, supplements, appetite and whether you plan to stay on or stop the medication. We also store the plan we compute from those answers (your Muscle Risk Score, protein target and week-one protocol).

What you log in the app. If you use the Leanhold app (on the web or on iPhone), we also store what you record in it: your doses (medication, dosage, date and time, injection site and pain level, or water and fasting time for pills), your daily weight, calories and protein, your side-effect scores, your notes, your schedule, height, goal weight and time zone, and, if you use the meal planner, the meal plans you generate, the meals you mark as eaten (and the protein and calories they add to your day) and your meal preferences (vegetarian, dairy-free, easy on nausea, number of snacks), the foods you add to your food log (name, portion, calories and protein), and, for your daily calorie goal, your sex, age, weekly pace and any calorie target you set yourself. This is consumer health data and is handled under the same rules as your quiz answers. The iPhone app sends it only to our servers; it contains no advertising or analytics software, and the “Download my data” option in Settings gives you all of it as a file: your profile and quiz answers, every dose, every check-in, your meal plans and meal preferences, your food log, and a summary of your subscription.

Why we store it. Only to (1) build and show you your personalized plan and (2) contact you about your plan and your account, with your consent. We also look at answers in aggregate — never individually identified — to understand which side effects and goals are most common so we can build the right product.

Retention. We keep your quiz answers and the plan we computed while you have an account or an active subscription and for up to 24 months after your last interaction with us, or until you ask us to delete them — whichever comes first. Data that is no longer needed is deleted or irreversibly anonymized.

Deletion on request. Email hello@leanhold.com from the address you used (or use Delete account in Settings) and we will delete your quiz answers, plan, email and account within 30 days, and confirm when it is done. Delete account in Settings deletes your account and data immediately. If you have a subscription, we ask first whether to cancel it too: if you say yes, it doesn’t renew and you aren’t charged again, but what you already paid isn’t refunded. A subscription billed by Apple has to be cancelled in your Apple Account settings, because Apple doesn’t let us cancel it for you. If you’d rather keep the subscription, you can pause your account instead: we sign you out and keep your data, and nothing is deleted until you delete your account. You can also ask us what we hold about you, or to correct it.

What we keep after you delete your account. Your profile, doses, check-ins, meal plans, meal preferences and food log are deleted. Exactly three things stay, none of them with your email:

• A billing record for each subscription, which accounting and tax law require: whether it was billed by Stripe or Apple and their reference numbers for it, the plan, its status, the trial and billing-period dates, whether it was set to cancel, and the date of any refund. Your email in it is replaced by a placeholder, and its link to your quiz session is removed.
• Your quiz record, anonymized: your answers, plan, email, campaign and browser details and session id are removed. What stays is the date it was created, whether you ticked the contact-consent box, the plan you picked and, if you paid through Stripe, the Stripe customer reference so the payment can be matched for accounting.
• Funnel events (which screens were viewed, the plan chosen, billing events such as a trial starting), used only as totals. Their session id is removed, so they can no longer be linked to you or to each other.

Stripe and Apple keep their own payment records, including your email, as payment and tax law require. Analytics events already sent to PostHog stay there under an anonymous session id that we no longer link to you.

No sale, no sharing. We do not sell your health data, and we do not share it with advertisers, data brokers, employers, insurers or anyone else for their own purposes. It is only processed by the service providers listed below, on our behalf and under contract, to run this site.

Analytics and session replay. We use PostHog to measure how people move through the funnel and, for a sample of visits, to record a replay of the session (mouse movement, taps, scrolling and page layout) so we can find broken or confusing screens. Session replay is configured to mask every input: the text you type and the answers you select are replaced with placeholders in the recording and are never sent to PostHog as part of a replay. Funnel events carry only the screen number, the plan you chose and a QA flag — never your answers or your email.

Before we show your results we ask for your email and your explicit agreement to this text: “I agree to receive emails about my plan and Leanhold, and to Leanhold storing the answers I gave (medication, weight, side effects) as described in the Privacy Policy.” Until you tick that box we do not store your email or send you anything.

With your consent we will email you about your plan, your account and Leanhold product updates. Billing emails (receipts, trial reminders, failed payments) are part of the service. Every marketing email has an unsubscribe link, and you can withdraw consent at any time by using it or by writing to hello@leanhold.com. Withdrawing consent does not affect anything sent before.

Local storage. The site saves your quiz progress and answers, your plan, a random session ID and the campaign parameters you arrived with in your browser’s local storage (keys starting with “glp1.”). This is what lets you refresh the page without losing your place. It stays on your device until you clear your browser data.

Cookies. PostHog sets first-party cookies to recognize the same browser across visits for analytics. We do not use advertising cookies or third-party tracking pixels.

You can block or delete cookies and local storage in your browser settings; the quiz will still work but will not remember your progress.

The following companies process data on our behalf, under contract, and only as needed to run this site:

• Vercel — hosting and delivery of the website.
• Supabase — the database where leads, quiz answers, funnel events, your account and what you log in the app are stored, and the account service that issues your sign-in codes.
• PostHog — product analytics and masked session replay, as described above.
• Stripe — payments, subscriptions and receipts. Stripe receives your email, plan and card details directly; we never see your card number. Stripe’s privacy policy applies to that data.
• Apple — payments for subscriptions bought in the iPhone app. Apple tells our server the status of your subscription (with its own transaction identifiers, not your card or Apple Account details). Apple’s privacy policy applies to the payment.

Food search and barcodes. The food search in the app looks foods up in USDA FoodData Central, the U.S. Department of Agriculture’s public food database. When you look a product up by its barcode, our server asks USDA FoodData Central first and, if it does not know the product, Open Food Facts, a free public database of packaged foods. Our server sends them only the words you search for or the barcode number, never your email, your account or anything else about you.

Camera. If you scan a barcode, the camera is used only while the scanner is open, and the barcode is read on your device. No photo or video is stored or sent to us or anyone else; only the number is looked up.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or ourselves. We do not otherwise share personal information.

Wherever you live, you can ask us to access, correct, export or delete the personal information we hold about you, and to withdraw any consent you have given. Residents of certain states (including California, Washington and others with consumer health data laws) have additional rights, including the right to know who has received their health data and the right not to be discriminated against for exercising these rights. Write to hello@leanhold.com; we respond within 30 days and never charge for a request.

Data is encrypted in transit and at rest. Our database is not publicly readable: writes happen only through our own server with access controls, and there are no public read policies. No system is perfectly secure, so we also collect as little as we can and delete what we no longer need.

This site is for adults 18 and older. We do not knowingly collect information from anyone under 18; if you believe we have, email hello@leanhold.com and we will delete it.

We will update this page as the product evolves. Material changes will be announced by email to everyone with an account, and the “last updated” date above always reflects the current version.

Privacy questions, access or deletion requests: hello@leanhold.com.