Last updated: April 2026.
The short version
- We never sell your data, ever.
- We collect what we need to run Lygo — nothing extra.
- You can export everything you've logged at any time.
- You can delete your account, and we delete your data.
What we collect
When you use Lygo, we store:
- Account information: email address, hashed password, optional name, and the date you signed up.
- Profile information you provide: age, sex, height, weight, activity level, dietary preferences, allergies, and medical conditions if you choose to share them.
- What you log: meals, foods, conversations with Lygo's AI, computed nutrient totals, and timestamps.
- Technical information: minimal logs for diagnosing problems — IP address, device type, browser version, and timestamps of requests. We retain these for 30 days.
What we don't collect
- We don't track you across the web.
- We don't sell or share your data with advertisers.
- We don't use third-party analytics that build cross-site profiles.
How we use your data
We use your data to:
- Provide the Lygo service — log meals, compute nutrients, generate insights.
- Improve Lygo — anonymized, aggregated patterns help us catch bugs and prioritize.
- Communicate with you — service updates, replies to your support requests.
AI and your data
When you log a meal in plain language, your message is sent to AI providers (currently Anthropic and OpenAI) so they can parse what you ate. We do not use your conversations to train AI models. We've configured these providers to retain inputs only for short-term abuse monitoring.
How long we keep your data
We keep your data for as long as your account is active. If you delete your account, we permanently delete personal data within 30 days, except where we're legally required to retain it (for example, billing records).
Your rights
- Access: request a copy of all data we hold about you.
- Export: download your meals, profile, and goals as a portable file.
- Correction: update inaccurate information from your profile page.
- Deletion: delete your account and all associated data.
For any of the above, email legal@lygoapp.com. We respond within 30 days.
Security
Your data is encrypted in transit and at rest. Passwords are hashed using industry- standard algorithms (bcrypt). We don't store your password — even we can't see it.
Cookies
We use a small number of strictly necessary cookies to keep you signed in. We don't use tracking or advertising cookies.
Children
Lygo is not intended for users under 13 (or under 16 in the EEA). We don't knowingly collect data from children.
Changes to this policy
If we make material changes, we'll let you know by email and update the "last updated" date above. Continued use after changes means you accept the new policy.
Contact us
Questions about privacy? Email legal@lygoapp.com.