LenzLog
ENDE
Try free
Legal

Privacy Policy

Effective date: October 31, 2026 · Provider: Lenz Graphics LLC, a Wyoming limited liability company

1. Who we are

This privacy policy explains how we process personal data when you use the LenzLog website (lenzlog.com), the LenzLog web app (app.lenzlog.com) and when you contact us.

Controller: Lenz Graphics LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Represented by Lenz Schöler, sole member. Email: [email protected]. LenzLog is a service of Lenz Graphics LLC.

2. Summary

  • Your diary is stored on our own server in a data centre in Germany (Hetzner).
  • Messages and photos you send to the AI coach are processed by Anthropic (USA) to generate the answer.
  • Payments are handled by Paddle as merchant of record – we never see your card details.
  • No advertising, no selling or renting of data, no analytics or tracking tools, no tracking cookies.
  • Health-related data is only processed with your explicit consent. You can delete your account and all data at any time.

3. Data we process

  • Account data: login identifier (e.g. email address), display name, optional profile picture, language and app settings.
  • Diary data: meals and drinks with time, amounts, calories, macro- and micronutrients, the daily health score, saved dishes, notes.
  • Health-related data (special category, Art. 9 GDPR), only if you enter it: weight and body measurements, blood pressure, lab values, supplements and medication, goals and health notes, optional cycle data, workouts, sick days, steps and active calories you transfer from Apple Health.
  • Coach conversations: your messages, the coach's answers and meal photos you send. After a photo has been analysed, only a placeholder remains in the conversation history.
  • Subscription data: plan, status, billing period and the customer and subscription IDs we receive from Paddle.
  • Technical data: IP address, date and time, requested address, browser information (server log files); a session cookie; for push notifications, the address of your device's push channel.
  • Contact data: name, email address and content of your message when you write to us.

4. Purposes and legal bases

  • Providing the app and your account, including the subscription: performance of the contract (Art. 6(1)(b) GDPR).
  • Processing of health-related data, including sending it to the AI coach: your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR).
  • Security, preventing misuse and fixing errors (log files, rate limits): our legitimate interest in a secure service (Art. 6(1)(f) GDPR).
  • Answering your enquiries: Art. 6(1)(b) GDPR if it concerns a contract, otherwise our legitimate interest (Art. 6(1)(f) GDPR).
  • Push notifications: your consent (Art. 6(1)(a) GDPR), given in your browser or device.
  • Storing information on your device (session cookie, local app storage) is strictly necessary for the service you requested (§ 25(2) no. 2 TDDDG).

5. Health data and your consent

Calorie, nutrient and body data can reveal information about your health. We therefore only process this data after you have explicitly agreed to it: the app asks for your consent (an unticked checkbox) the first time you open it after signing in, and records when you gave it and for which version of this policy. You decide which data you enter.

You can withdraw your consent at any time with effect for the future – in the app under More → App, by deleting your account (More → Data) or by writing to [email protected]. Processing carried out before the withdrawal remains lawful. Without this consent we cannot provide the app, as recording such data is its purpose.

6. AI features (Anthropic)

The coach is powered by Claude, an AI model by Anthropic, PBC (548 Market Street, PMB 90375, San Francisco, CA 94104, USA). When you use the coach, we send your message, any photo you attach and the parts of your diary that are relevant for the answer (e.g. today's entries, goals, nutrients, and – where relevant – health-related data you have entered) to Anthropic's API. Anthropic processes this data to generate the answer.

According to Anthropic's commercial terms, data sent via the API is not used to train its models and is deleted after a limited period. Data is transferred to the USA (see “Transfers outside the EU”). Please do not send the coach information you do not want processed in this way. Estimates by the coach may be inaccurate and are not medical advice.

Search with AI: only when you tap “Search with AI” in your history, we send your search term and the list of distinct dish names from your history to Anthropic – no quantities, no nutrient values, no health or profile data – and receive a list of matches back. We do not store the request. Like the coach, this feature is only available with your consent to the processing of health-related data.

7. Hosting

The app, your data and this website are hosted on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. Hetzner processes the data on our behalf (data processing agreement, Art. 28 GDPR). We back up the app data daily and weekly; backups are kept for at most eight weeks.

8. Website, Cloudflare and log files

Requests to lenzlog.com pass through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which protects the website against attacks and delivers it quickly. Cloudflare processes technical data such as your IP address and the requested address. Cloudflare also manages our domain names and forwards emails sent to our address. Cloudflare is certified under the EU-US Data Privacy Framework.

Our server records log files (IP address, date and time, requested address, status, browser information) to keep the service secure and to find errors. Log files are rotated automatically and deleted after a few weeks at the latest, unless they are needed to investigate a specific security incident.

The website uses no analytics, no tracking cookies and no external fonts or scripts. It only stores your language choice in your browser (local storage).

9. Account, sign-in and storage on your device

After you sign in, the app sets a session cookie (validity up to 400 days) so that you stay signed in. Only a hashed value of it is stored on our server. To work quickly and offline, the app keeps a copy of your data and settings in your browser's local storage. Both are strictly necessary for the app.

Signing in on another device with a code: to sign in on a computer, you can create a one-time code on your phone (valid for 10 minutes, usable once). For each signed-in device we store a session with the device name or browser and the time of sign-in. You can see the list of your devices in the app and sign devices out. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Your choice of light or dark mode is stored only locally in your browser.

10. Subscription and payment (Paddle)

Our online sales are handled by Paddle.com Market Ltd (Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom), which acts as merchant of record and processes payment, billing and tax data as an independent controller. When you subscribe, the checkout opens directly at Paddle. We receive from Paddle the customer and subscription IDs, the plan, the status and the billing period to unlock Pro. We never receive your card or bank details. More in Paddle's privacy notice and the Paddle Buyer Terms. The United Kingdom has an adequacy decision of the EU.

11. Push notifications

If you turn on reminders (e.g. for supplements) and allow notifications, we store the address of your device's push channel. Notifications are delivered encrypted via the push service of your browser or device maker (Apple, Google or Mozilla). You can turn reminders off in the app or in your device settings at any time.

12. Apple Health

LenzLog has no direct connection to Apple Health. If you want, you can use an Apple Shortcut on your iPhone to copy your steps and active calories and transfer them to the app yourself.

13. Features involving other users

  • Leaderboard: if you take part, other participants see your display name, profile picture, health score average and streak. You can hide yourself in the app.
  • Sharing meals: if you share a meal with someone, that person receives your display name and the meal as a suggestion and decides whether to accept it. You can turn off receiving shared meals.
  • Cheers and likes: in the leaderboard you can send other participants a like or a short message (a ready-made one or your own text, up to 120 characters). We store it with the recipient: your user ID and first name, the type, the text, the date and whether it has been read. Only the recipient sees the content; others only see how many likes someone received in the last 7 days. The recipient is notified by push with your first name and the text (via the push service of their device maker). Cheers are deleted after 90 days at the latest (at most 200 per person). If you hide yourself in the leaderboard, nobody can send you cheers; if you delete your account, your likes and messages are removed for everyone. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) – it is a feature you choose to use.
  • GIFs in cheers (GIPHY): you can add a GIF to a cheer. GIFs come from GIPHY, Inc. (USA). When you search for a GIF, our server sends your search term, the language, the result page and the content rating “G” to GIPHY – your IP address, name and user ID are not passed on. To display GIFs, your device loads the images directly from GIPHY's image servers; GIPHY sees your IP address, browser information and which GIF is loaded (we send no referrer and no tracking parameters). This only happens when you search for, send or view a cheer with a GIF. We store the chosen GIF (ID, image address, size) together with the cheer for the recipient; it is deleted with the cheer after 90 days at the latest or when an account is deleted. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for loading the images, our legitimate interest in showing GIFs without hosting them ourselves (Art. 6(1)(f) GDPR). GIPHY's privacy policy: giphy.com/privacy.
  • Friends: you can send other users a friend request. We store the user IDs of both people, the status (requested or friends), who sent the request and the dates.
  • Chat with friends: friends can send each other messages, GIFs (as a link to GIPHY, see above), meals and photos. Meals contain name, calories, macronutrients, health score, the individual items with quantities, ingredients and nutrients, and an optional comment; the recipient can copy a meal into their own diary. Photos are taken from your device and reduced in size; each person can store up to 25 MB, older photos of your own are deleted automatically. For each message we store the sender, the time and whether it has been read. Messages, meals and photos are stored encrypted (AES-256) on our server. This is not end-to-end encryption: our server can technically decrypt the content in order to deliver it. Chats are kept until the friendship is removed or an account is deleted, at most the last 500 messages per conversation.
  • Challenges: friends can start challenges with each other (e.g. a 7-day duel, protein, steps or tracking goals). We store the type, the participants, the status, the period and the result. While you take part in an open or running challenge, we store for each day your health score, whether you reached your protein goal, your steps and whether you tracked – for at most 21 days and without meals. The other person only sees this as the current standing of the challenge.
  • Chat notifications: for new messages the recipient receives a push notification with the sender's name and a preview of the text (up to 140 characters) or the name of the meal, sent encrypted via the push service of their device maker. You can switch this off in the app (switch “Chat”). If you have withdrawn your consent to the processing of health-related data, we no longer send you any push notifications (including for the chat).
  • If you delete your account, your friendships, challenges, conversations and photos are deleted. The weekly server backups contain chats only in encrypted form, without the key. Legal basis for friends, chat and challenges: performance of the contract (Art. 6(1)(b) GDPR) – they are features you choose to use; health-related data (meals, health score, daily challenge data) is only processed with your explicit consent (Art. 9(2)(a) GDPR).
  • Support access: the operator can view an account only where necessary to fix a problem you have reported or to prevent misuse.

14. Contact form and email

If you use the contact form or write to [email protected], we process your name, email address and message to answer you. Form messages are forwarded by email via Google (Gmail, Google LLC, USA, certified under the EU-US Data Privacy Framework) and are not stored on our server. We keep correspondence as long as needed for your request and delete it afterwards, unless statutory retention periods apply.

15. Transfers outside the EU

Some service providers are located in the USA (Anthropic, Cloudflare, GIPHY, Google) or in the United Kingdom (Paddle). For the United Kingdom there is an adequacy decision of the EU. For the USA, transfers are based on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses (Art. 46(2)(c) GDPR). Our company is also based in the USA.

16. How long we keep data

  • Account and diary data: as long as your account exists. If you delete your account in the app (More → Data), we delete your data immediately – including the daily backups of your account – and a running subscription ends at the same time; copies in the weekly server backups are overwritten within eight weeks at the latest.
  • Cancelling the subscription does not delete your account: you can keep using LenzLog for free with all your data. If you want your data deleted, delete your account.
  • Log files: automatically after a few weeks (see above).
  • Contact enquiries: once your request has been dealt with, unless statutory retention periods apply. Invoices and tax records are kept by Paddle as the seller.

17. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). Most of this you can do yourself in the app (export, edit, delete); otherwise write to [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence.

18. Automated decisions

The app calculates values such as your daily health score and calorie budget automatically. These are information for you only; we do not make decisions with legal or similarly significant effects on you (Art. 22 GDPR).

19. Security

All connections are encrypted (TLS). Sign-in cookies and invitation codes are stored on the server only as hash values, access to the server is restricted, and we keep software up to date.

20. Minimum age

LenzLog is intended for people aged 18 and over.

21. Changes

We update this privacy policy when our service or the law changes. The current version is always available on this page; we will inform you in the app about significant changes.