Privacy policy.

Leum is published by NYTHY, a French société par actions simplifiée (SAS) with a share capital of €100.00, 221 route de Schirmeck, 67200 Strasbourg, France — SIREN 101 969 467, RCS Strasbourg 101 969 467, VAT FR95101969467. NYTHY is responsible for what is done with your data. Full identification is in the legal notice.

We have no data protection officer. For any question about your privacy: [email protected], or in the app Settings > Contact us.

Leum mainly uses what you write or what you allow:

• Nutrition: meals, quantities, hydration, profile (age, height, weight, activity), goals, allergies, groceries, recipes, fasts, and the medical context you provide (pregnancy, breastfeeding, illness, prescribed diet).
• Sleep: nights, wake-ups, times, mood, questionnaires, estimated snoring, bedtime sounds, weather and city.
• Finance: accounts, balances, movements, budgets, savings, debts, subscriptions, receipts. No connection to your bank.
• Projects: projects, tasks, deadlines, notes, attached files and images.
• Profile: your first name and email, for the card, exports and contact. They are never used to sign you in.
• Assistant: your messages, your attachments, what it remembers about you, your instructions and your sharing choices.

Some data is sensitive: declared health, pregnancy, sleep, mood, weight. We use it only because you enter it yourself, and it stays on your device and in your iCloud, like everything else.

If you allow the Health app, Leum can read from it: your sleep, your weight and body measurements, what you eat and drink, your activity (steps, energy, distances, exercise), your heart and breathing (heart rate, variability, respiratory rate, blood oxygen, wrist temperature at night), ambient and headphone noise, your meditation sessions, your date of birth and your sex.

Leum can write to it: sleep, meditation, weight, hydration, energy and nutrients from your meals. We do not read reproductive health, blood glucose or medical documents. This access is optional, and you can remove it at any time in Health or in the iPhone Settings.

• An installation number: drawn at random on your device, it never leaves for your other devices. It is used to count your Actions and to secure exchanges with our service.
• Proof that the request really comes from the Leum app, and not from a robot.
• Your Apple purchase number, to verify your subscription.
• The app version, model and system: only when you write to us from Settings > Contact us.

What we do not collect: no account or password, no advertising, no cross-app tracking, no visit statistics, no address book, no reading of your SMS, emails or notifications. Your location is used only to the nearest kilometre, for the weather.

• To run the app — logs, iCloud copy, widgets, watch, assistant, subscription checks: this is the service you ask us for (contract, art. 6.1.b GDPR).
• To send your health or finance data to the assistant: only with your consent (art. 6.1.a and 9.2.a).
• To block robots and abuse, and to answer your messages: our legitimate interest in protecting the service (art. 6.1.f).
• To show you a helpline in distress: the protection of your life (art. 9.2.c) — see the assistant usage policy.
• For our accounting: the law requires it (art. 6.1.c). These are totals, with no health data.

Your data is never used for advertising, for resale, or to fit you into a profile. No automated decision has a legal effect on you.

Your logs are written on your device, then copied to your iCloud, in a space only you can read. That is what lets your other Apple devices, your widgets and your watch display them. NYTHY has no database containing your logs.

• This copy is always on: it cannot be turned off in the app.
• Apple keeps this data for your account, under its own rules. We can neither access it nor recover it.
• Deleting the app does not empty iCloud: your logs may come back if you reinstall it. To erase everything, delete your account from the app.
• Without network or without iCloud, the logs stay on the device. The assistant, however, needs a connection.

Widgets and the watch receive extracts (including your sleep and finance totals) directly on your devices, without going through the internet.

We neither sell nor rent your data. It only goes to the providers that are necessary:

• Apple: iCloud (your logs, photos and attachments), Health, purchases, weather, music, app checks — under your agreements with Apple.
• Cloudflare, Inc. (United States, global network): hosts our service, the website and the images created. Your messages, the images to be analysed, the images created, your Action counters and your contact requests pass through it.
• Alibaba Cloud (Qwen and Qwen-Image models): writes the answers, analyses and creates the images. It receives your exchanges, the images you send, the description of an image to create and the data you have allowed. Storage in Frankfurt (Germany); the contracting company is Alibaba Cloud (Singapore) Pte Ltd.
• Serper, otherwise DuckDuckGo, then Wikimedia: the assistant’s web search. Only the question leaves, 200 characters at most.
• Open Food Facts (non-profit, France): the barcode or the name of a food, sent directly from your device to find its record.
• European Central Bank and Coinbase: exchange rates and crypto prices. Our service asks them for everyone at once: nothing about you is sent, and the calculations happen on your device.
• Our support inbox: the message you send through “Contact us”.

Night listening records and sends no sound: the microphone only estimates snoring, on the device. A meal photo goes nowhere until you ask for its analysis. The sounds you listen to come from our service; your favourites are tied to your installation, not to your identity.

Nobody else: no ad network, no data broker, no human review. If we add a provider, this page will change before it happens.

To answer you, the app prepares an extract of your logs, sends it to our service, which passes it to the model and returns the answer to you. Three cases:

• Health — off from the start. Nothing from your health is sent until you turn it on, in Settings or from the chat.
• Finance — with confirmation. Sharing is on from the start, but a screen explains what leaves and lets you refuse. You can turn it off at any time.
• Nutrition, groceries, projects — no separate setting. This data is used as soon as you ask the assistant about them in those spaces. If you do not want to share anything, do not ask it about them.

A single send can contain up to 400 messages from the conversation, your attached images and your installation number. Our service does not keep the content of your messages or of the answers: it only notes the time, the size and encrypted identifiers.

The assistant can also act in your logs (add a meal, create a task): it announces it, and you confirm. What it remembers about you stays on your device and in your iCloud.

• Camera and Photos — photograph a meal, scan a barcode, import a recipe, attach an image to the chat.
• Photos sent for analysis — they go to our service then to the model, in Frankfurt. A photo that is not sent stays on the device.
• Images created by the assistant — your description goes to the model, in Frankfurt. If you attach one of your photos to derive a variant, it goes too. The created image comes back to your device, and we keep a private copy so you can find it in “Creations”, even on a new device. This copy stays up to 6 months without being viewed, or until you delete it.
• Microphone — snoring detection, on the device only.
• Location — to the nearest kilometre, while the app is open, for the weather.
• Calendar and Reminders — bedtime times and task slots, if you ask.
• Home — night scenes, if you enable it.
• Music — sleep playlists with Apple Music (separate Apple subscription).
• Notifications — created on your device: our servers send you none.

Where your data goes. Your logs stay in your iCloud, at Apple. Our service runs at Cloudflare, an American company with a global network. The model is hosted by Alibaba Cloud, and what it receives is stored in Frankfurt (Germany).

Processing can happen outside Europe. Storage stays in Germany, but the provider may process a request on its machines elsewhere in the world. The contracting company is Alibaba Cloud (Singapore) Private Limited.

What is guaranteed. The provider states that it does not train its models on customer data and that it is SOC 2 certified. These guarantees come from its public terms, not from a contract negotiated with us. It publishes no retention period: so we cannot give you one.

What is still missing. We have no data processing agreement with this provider (article 28 GDPR), and the transfer outside Europe does not yet rest on the European Commission’s standard contractual clauses. We would rather tell you.

Cloudflare (United States) has the framework guarantees provided for the services we use. The emails you send us go through our mail providers.

Images created by the assistant. The model hands us the image through a temporary link, valid 24 hours, which the app never receives. We store it immediately in a private storage space at Cloudflare, with no public access. It stays there up to 6 months without being viewed, or until you delete it in the app: the copy on the device and the one on our servers then leave together. Your device keeps a size-limited copy of its own, for display without network. iCloud does not receive the image: only its name and reference travel with the message.

We do not keep your logs: they last as long as you keep them, on your devices and in your iCloud. Here is what we hold:

• Your logs, your messages, your attachments: nothing with us.
• What is sent for an answer: for the duration of the answer, with no trace kept.
• Technical traces of the service (time, size, encrypted identifiers — never the content): for security and troubleshooting. They are erased as soon as the host allows; the exact duration is not fixed yet.
• Your Action counter: reset at each new period, erased when you delete your account.
• The proof of your subscription (purchase number and proof of the app): 400 days at most, against fraud.
• The encrypted session with the service: 90 days of inactivity at most.
• Images created for you: kept in our private storage up to 6 months without being viewed, or until you delete them. When you delete one in the app, the copy on the device and the one on our servers leave together. They are tied to no account. The device keeps a limited copy (64 MB at most), erased with the creation or when that reserve fills up.
• Our accounting: 10 years (art. L123-22 of the French commercial code) — totals, with no health data.
• Your support messages: 3 years after the last exchange.

Our technical backups are temporary and do not extend any of these periods.

Settings > Delete account. It is immediate and final. Erased: all the app’s data on the device, your Leum data in iCloud, what is shared with widgets and the watch, the security keys, and, with us, your Action counter and your session.

What deletion does not do: it does not cancel your App Store subscription, and it does not remove what Leum wrote to the Health app. Full detail is in the account deletion policy.

You can access what NYTHY holds, correct it, have it erased, get a copy, restrict its use, object to it, and withdraw your consent at any time. Write to [email protected] or use Settings > Contact us.

• Access and correct: almost everything can be read and changed directly in the app.
• Get a copy: Settings > Export, as CSV (sleep, finance, meals, weight, projects) and a few PDFs. The chat, the assistant’s memory and the questionnaires are not included: ask us for them, and we will provide them.
• Erase: delete your account, or write to us for part of it only.
• Timing: one month at most. Two more months if the request is complex, and we tell you within the first month. If we doubt your identity, we may ask for proof — never a health document.
• Complaint: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris cedex 07, France.

You can also remove Health access, turn off the assistant’s sharing, and limit the camera, photos, microphone, location, calendar, reminders, Home and music in the iPhone Settings.

Your data is protected by what protects your iPhone and your iCloud: Apple’s encryption and the device lock. Leum adds no encryption of its own, and therefore does not claim end-to-end encryption.

Exchanges with our service are verified and encrypted in transit. The service does not store the content of your messages.

If data leaks presenting a risk to you, we tell you as soon as possible, by a message in the app or by email, as articles 33 and 34 GDPR require. Security questions: [email protected].

Leum is not intended for people under 16 and does not knowingly collect their data. The app does not check age.

The only existing protection: automatic calorie goals are blocked when the profile is under 18. Do not share the app with a child without staying with them.

The website presents the app. It asks for no sign-up, does not recognise you from one visit to the next, and uses no cookies of ours, no advertising, no visit statistics, no outside tool.

It is hosted by Cloudflare, which may set a security cookie and note your IP address to protect the site. These traces are not used to follow you and are never linked to the app.

This page may change. The date at the top is authoritative. An important change is announced in the app and, if you are a subscriber, in advance — the notice period is in the terms of use. Old versions are available on request.