This Privacy Policy describes how Leaf (“the App,” “we,” “us,” or “our”) handles the information collected from you (“user” or “you”) through your use of our mobile application.

1. Data We Process: Information and Collection

The App processes the following categories of information that you provide:

• Personal Health Biometrics: Name, age, gender, height (cm), weight (kg), activity level, and fitness goal.
• Fitness & Diet Logs: Daily food entries (name, calories, protein, carbs, fat, photos), workout records (date, exercises, duration, active calories, notes, completion status), hydration logs, and body measurements.
• Photos: Meal photos captured using the in-app camera are processed locally and may be stored locally for visual meal history.

2. Data Storage and Core Functionality

We are a privacy-first application. All data collected, processed, and generated is stored on your device using Apple’s local data storage mechanisms (SwiftData and Keychain).

• Purpose: Your biometric data (age, gender, height, weight, and activity level) is collected solely for the purpose of local calculation of your estimated Basal Metabolic Rate (BMR) and Total Daily Energy Expenditure (TDEE), and to generate macro targets.
• iCloud Sync (Optional): You may enable iCloud sync to backup and synchronize your data across your Apple devices. When enabled, your data (profile, diet logs, workout logs, measurements) is encrypted and stored in iCloud using Apple’s CloudKit service. You can disable iCloud sync at any time in the App settings.
• No Cloud Storage: Without iCloud sync enabled, your personal data and health logs are never transmitted to, stored on, or accessible by our servers or any servers controlled by the Leaf developers.

3. HealthKit Integration

The App may integrate with Apple Health (HealthKit) with your permission to:

Read:

• Body measurements (weight, height)
• Activity data (step count, heart rate, active energy burned, basal energy burned)
• Workout data
• Nutrition data (calories, protein, carbohydrates, fat, sugar, water, sodium, potassium, calcium, iron)

Write:

• Workout data and active energy burned
• Body measurements (weight)
• Nutrition data (calories, protein, carbohydrates, fat, sugar, water, sodium, potassium, calcium, iron)
• Hydration data

Data exchanged with HealthKit stays on your device and is not transmitted to our servers. You can manage HealthKit permissions in the App settings or through iOS system settings.

4. Third-Party AI Services

The App offers “Smart Log” (AI-powered food logging) feature that relies on external Large Language Model (LLM) providers. When you use these features, your input data is transmitted to our backend, which then forwards it to the selected third-party AI provider for processing.

Data sent to third parties includes:

• For Smart Log (Text): The text prompt describing your meal (e.g., “3 eggs and an apple”) is sent to our backend, which forwards it to DeepSeek for AI analysis. The resulting macro data (name, calories, protein, carbs, fat) is sent back to your device and saved locally.
• For Smart Log (Photo): Your meal photo is sent to our backend, which forwards it to Doubao (ByteDance/Volcengine) for AI vision analysis. The resulting macro data is sent back to your device and saved locally.