Privacy Policy

Last updated: October 28, 2026

"J-grupa" SIA (registration number 44103096980, VAT Nr. LV44103096980), legal address: Birzes iela 2A, Cēsis, Cēsu nov., LV-4101 ("we", "us", "Lena Fit") is the controller of your personal data in the Lena Fit app. This policy explains what we collect, why, who else can see it, and what you can do about it.

1. Data We Collect

We collect the following personal data:

• Account: name and email address. If you sign in with Apple or Google, we receive your name and email from them (Apple may give a private relay address)
• Profile: gender, age, height, weight, goals, training place and level, profile photo
• Body: weight entries, body measurements and progress photos, if you add them
• Training: completed workouts, sets and weights, your own workouts, cardio and the effort you choose
• Nutrition: the meals you log with their nutrition values, and a small photo of a scanned meal if you save it
• Steps: if you turn this on, your daily steps for the last 14 days from Apple Health or Health Connect; we store only the average
• Coaching, if you work with a coach: weekly reports (measurements, answers, notes, photos), chat messages, daily habit ticks, and the programmes, plans and notes your coach writes for you
• Device and usage: notification token, notification settings, the day you last opened the app, and whether you opened a notification from us

2. How We Use Your Data

We use your data to:

• Provide the app: your programme, workouts, calorie target and progress
• Estimate food: when you scan a meal, a label or a menu, the photo (reduced to 1024 px) and your note go through our server to the Google Gemini API, which estimates the food and its nutrition. We don't keep the photo used for the estimate; if you save the meal, a smaller copy (480 px) is kept with the entry
• Look up a barcode: only the barcode number is sent to Open Food Facts
• Calculate your calorie target from your profile, your step average and finished workouts
• Let your coach work with you, if you accepted their invitation
• Send the notifications you have allowed
• News and offers by email: we may occasionally email you about new Lena Fit features and offers, at your account's address. Every such email has an unsubscribe link, or write to info@lenafit.lv. Account emails (confirming your address, password reset) are always sent
• Count active users and notification opens, to improve the app
• Process subscriptions through the App Store and Google Play (we never see your card details)

We don't use health data for advertising and we don't sell it.

3. Legal Basis for Processing

We process your data based on:

• Contract (GDPR Article 6(1)(b)): to provide the app and your subscription
• Consent (Article 6(1)(a)): notifications, reading steps, working with a coach
• Explicit consent for health data (Article 9(2)(a)): weight, measurements, photos, food, steps and weekly reports. You give it by entering the data or turning the feature on, and you can withdraw it at any time by deleting the data or turning the feature off
• Legitimate interests (Article 6(1)(f)): security, preventing abuse, simple usage statistics, and news and offers by email to account holders (you can unsubscribe at any time)

4. Data Storage and Security

Your data and photos are stored with Google Firebase in the EU. Photos are kept in your private folder: only you can open them, and your coach can also open the photos you attach to a weekly report. Google processes scan photos for us under its data processing terms: it doesn't use them to improve its products and keeps them only for a limited time to prevent abuse. This processing may take place outside the EU, under the safeguards in Google's terms. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

5. Data Sharing

We don't sell your personal data. We share it only with:

• Google (Firebase): sign-in, database, photo storage and server functions
• Google (Gemini API): to estimate scanned meals, labels and menus
• Apple and Google: signing in with your Apple or Google account, and subscriptions
• Apple Health / Health Connect: we only read steps, if you turn this on, and never write to them
• Open Food Facts: the barcode number only
• Your coach, if you accept their invitation: your profile and profile photo, workouts, weight and measurements, food log, your own workouts, weekly reports with their photos, chat and habit ticks. Your coach can't open your progress or meal photos. Either of you can end coaching at any time, and access stops at once

6. Your Rights

Under the GDPR you can:

• See and export your data (Settings)
• Correct inaccurate data
• Delete your account and all its data (Settings; see how to delete your account)
• Withdraw consent at any time: turn off steps in Settings, in iPhone Settings (Health) or in Health Connect, turn off notifications, end coaching in Profile
• Object to processing based on our legitimate interests
• Complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv)

7. Data Retention

We keep your data while your account is active. A saved meal photo is kept as long as its entry: removing the meal deletes the photo. When coaching ends, your coach loses access at once; your reports and chat stay in your account. When you delete your account, all your data and photos are permanently deleted within 30 days.

8. Contact

For privacy-related inquiries: info@lenafit.lv

"J-grupa" SIA
Birzes iela 2A, Cēsis, Cēsu nov., LV-4101
Latvia