Privacy Policy for LossBoss

Introduction

Ingenuity Labs LLC ("we," "our," or "us") operates the LossBoss mobile application (the "App"), an AI weight-loss coaching app. This Privacy Policy explains our practices regarding information collection and use. By using our App, you agree to the practices described here.

Your Data Lives on Your Device

LossBoss stores your personal data locally on your phone. The App has no accounts and no login. Your profile (age, height, weight, goals, food preferences), weigh-ins, food logs, workouts, chat history, and everything the coach "remembers" about you are stored only on your device. We cannot see any of it. Deleting the App (or using Settings → Reset all data) permanently deletes this data. The only time any of it leaves your phone is when it is sent to OpenAI to generate a coaching response, as described under AI Processing below — and even then we retain no copy of it ourselves. Separately, the App sends us anonymous usage statistics and crash reports, which never contain this personal data; see Anonymous Usage Analytics below.

What We Collect and How

Your personal data in LossBoss comes from you directly. Apart from the anonymous usage statistics, crash reports, and creator link matching described below, nothing is gathered in the background, and there are no third-party analytics, advertising, or tracking SDKs in the App.

• Profile details — first name, age, sex, height, starting and goal weight, activity level, and preferences. Collected because you type them into the setup flow.
• Chat messages — collected when you write to your coach.
• Logged activity — meals, weigh-ins, water, and workouts. Collected when you record them in the App.
• Meal photos — collected only when you choose to take or attach a photo for a calorie estimate.
• Apple Health step count — read from Apple Health, only after you grant Health permission in iOS.

All of it is used for exactly one purpose: producing your coaching — chat replies, calorie and macro estimates, meal plans, weekly recalibration, and reminders written in your coach's voice. We do not use it for advertising, we do not sell it, we do not share it with data brokers, and we do not profile you for anyone else's benefit.

AI Processing

To generate coaching replies, meal suggestions, and photo-based calorie estimates, the App sends the relevant conversation context — which may include your first name, goals, recent stats, messages, your daily step count read from Apple Health, and meal photos you choose to submit — through our relay server to OpenAI, our AI provider, for processing. Our relay is stateless: it does not log, store, or retain your messages or photos. OpenAI processes this data to generate the response, subject to OpenAI's API data usage policies (API data is not used to train their models). Do not include information in chat that you do not want processed this way.

Third-party protection. OpenAI is the only third party that receives your personal data, and it receives it solely as our data processor, acting on our instructions. Under OpenAI's API terms and Data Processing Addendum it is contractually required to provide the same or equivalent protection for that data as this policy commits us to: it may not use it to train its models, may not sell or disclose it, must keep it secure, and deletes it within 30 days (retaining it briefly only to monitor for abuse). We transmit it only after you have given explicit in-app consent, and you can withdraw that consent at any time, after which nothing further is sent.

This sharing only happens with your explicit permission. The App asks for your consent before any data is sent to OpenAI, and you can withdraw it at any time in Settings → AI coaching. While it is off, no data is sent to OpenAI — which also pauses coach replies, photo calorie estimates, and personalized reminders.

Anonymous Usage Analytics and Crash Reports

To understand which features help and to fix bugs, the App sends a small number of anonymous usage events to our own server (hosted by Vercel, with the database hosted by Neon). These record that something happened, not what you entered — for example: the App was opened, a setup step was completed, the coach personality and weekly pace you picked, notifications were allowed or declined, the subscription screen was shown, a purchase was started or completed, or a meal, weigh-in, workout, or chat message was logged (only the fact that it was logged and how — never the food, calories, weight, or message text). Each event also includes the App version, iOS version, device type (iPhone or iPad), and language setting.

Events are grouped by a random identifier the App creates on your device. It is not your Apple ID, your name, or Apple's advertising identifier, and it is not linked to your identity. If the App crashes or freezes, it also sends a technical crash report from Apple's MetricKit (the type of error and the part of the App's code involved), which contains no personal data.

We never send your name, profile details, weights, food logs, chat messages, photos, coach memory, or Apple Health data to our analytics server. We do not use this data for advertising, we do not sell or share it, and we do not track you across other companies' apps or websites. We keep it only as long as it is useful for improving the App.

Creator Links

Some people find LossBoss through a creator's link, such as lossboss.app/c/name. When you tap one, our server records the creator, the time, your device type, iOS version and device model if your browser reports them, which app's browser you used, your country, and a keyed one-way hash of your IP address. We do not store the IP address itself on this record.

When you first open the App, it sends our server the random identifier described under Anonymous Usage Analytics, along with your iOS version, device model, and App version. Our server compares the hash of your IP address and these details with link taps from the previous hour. If they match, or if you opened the App directly from a creator's link, we record that the creator referred you and the App can show you that creator's offer. If there is no match, we record the install as not referred. We do this for every new install.

We use this only to credit creators and show their offers. IP hashes are erased within two days. We keep the record that an install was referred, and the matching subscription events, so we can calculate what a creator earned. Creators see totals only, such as taps, installs, trials, paid subscribers, earnings, and top countries. They never see who you are or anything from your profile, logs, or chats. We do not use Apple's advertising identifier, we do not combine this with data from other companies, and we do not use it to track you across other companies' apps or websites.

Voice Input (Dictation)

The chat has an optional microphone button that turns your speech into text using Apple's speech recognition (the iOS Speech framework). Recognition happens on your device when iOS supports your language locally; otherwise the audio is processed by Apple, subject to Apple's privacy terms. We never receive or store your audio, and nothing is recorded unless you tap the microphone. The transcribed text simply appears in the message box — it is only sent to OpenAI if you then send it, like any typed message.

Memes

If you choose the Meme Master coach personality, the coach can send memes into your chat. Each meme is a classic template (for example "Success Kid") with short caption lines written by the coach. The App downloads the blank template image from memegen.link, an open-source meme-rendering service, and draws the captions onto it on your device. That request contains only the template name — never the caption text — and, as with loading any image from the internet, reveals your device's IP address to memegen.link.

Caption text is composed by the coach and may reflect the topic you were discussing (for example a food or an excuse), but the coach is instructed never to include your name or personal details in captions. Captions stay on your device, and your chat messages, name, photos, and personal stats are never sent to memegen.link.

If you use any other coach personality, the App never contacts memegen.link. You can switch personalities anytime in Settings → Coach personality.

Apple Health

With your permission, the App reads your step count from Apple Health and can save your weigh-ins to Apple Health. Your weigh-ins are written to Apple Health on your device and are never sent to us. Your step count is different: so that your coach can take your activity into account, your daily step total — for today and for past days the coach reviews when you ask about them — is included in the context sent to OpenAI as described under AI Processing above. This happens only after you grant AI consent in the App, and it stops as soon as you turn that consent off in Settings → AI coaching. We do not store your Health data on our servers, and it is never used for advertising or sold. You can revoke Health access anytime in iOS Settings → Health → Data Access.

Subscriptions

Subscriptions are processed by Apple through your App Store account. We do not receive your payment details. Apple sends our server notifications about subscription events (for example, a free trial starting, a renewal, a cancellation, or a refund), including the product, price, currency, and App Store country. When you subscribe, the App passes Apple the same random identifier described under Anonymous Usage Analytics so these notifications can be matched to that anonymous usage data. We use this only to understand how the App performs, to keep your subscription status correct, and, if a creator referred you, to calculate that creator's earnings.

Creator Program Members

If you apply to or join our creator program, we collect what you give us: your name, email address, social handles, audience details, phone number, country, and payout details. We use this to review your application, run your account, and pay you. We send program emails through Resend and store this data with Neon and Vercel. When you accept the creator agreement, we keep your IP address and browser details as a record of that acceptance. IP details on applications are erased within two days.

Notifications

Reminders (weigh-ins, meals, workouts, hydration) are local notifications scheduled on your device. We do not operate a push-notification server.

Children's Privacy

The App is not directed at children under 13 and does not knowingly collect personal information from them. LossBoss is designed for adults.

Not Medical Advice

LossBoss provides general wellness information and coaching, not medical advice, diagnosis, or treatment. Consult a physician before beginning any weight-loss program.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date above.

Contact

Questions about this Privacy Policy? Contact us at ethan@ingenuitylabs.net.