1. Introduction
Lokyn ("we", "us", or "our") operates the website staylokyn.com and the Lokyn mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.
By using Lokyn, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account Information
- Email address
- Display name
- Profile picture (if provided via Google/Apple sign-in)
Health & Fitness Data
- Age, gender, height, and weight
- Fitness goals (lose fat, build muscle, etc.)
- Sport/activity preferences
- Dietary restrictions and preferences
- Meal plans and food logs
- Workout plans and exercise logs
- Body measurements and progress photos
- Recovery and sleep data
Usage Data
- Chat messages with the AI coach
- App usage patterns and interactions
- Device information (browser type, operating system)
- Approximate location (country-level, for meal localization)
3. How We Use Your Information
- To create and manage your account
- To generate personalized meal plans and workout programs
- To provide AI coaching and answer your fitness questions
- To track your progress and display analytics
- To sync your data across devices
- To send you notifications and reminders (if enabled)
- To improve our Service and develop new features
- To prevent fraud and ensure security
4. Third-Party Services
We use the following third-party services to operate Lokyn:
- Supabase — Authentication and database hosting. Supabase Privacy Policy
- Google OAuth — Sign-in with Google. Google Privacy Policy
- Apple Sign-In — Sign-in with Apple ID. Apple Privacy Policy
- Z.ai GLM — AI model for generating coaching responses. When you chat with the AI coach, your messages and fitness data are sent to this third-party service. We do not control how Z.ai processes or stores this data.
- USDA FoodData Central — Food nutrition database for macro calculations.
5. Data Storage and Security
Your data is stored securely in Supabase (PostgreSQL database). We use row-level security (RLS) to ensure only you can access your own data. All data transmission is encrypted via HTTPS/TLS. Passwords are hashed using bcrypt.
6. Data Sharing
We do not sell, rent, or trade your personal information. We only share data with third-party service providers who help operate Lokyn, legal authorities if required by law, and business successors in case of a merger or acquisition.
7. Your Rights
- Access — Request a copy of your data
- Rectify — Correct inaccurate data
- Delete — Permanently delete your account and all data
- Export — Download your data in a portable format
- Object — Opt out of certain data processing
To exercise these rights, sign in to your account and go to Settings, or contact us at the email below.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days.
9. Children's Privacy
Lokyn is not intended for children under 13. We do not knowingly collect data from children under 13.