Privacy Policy

Last updated: June 12, 2026  ·  Effective: June 12, 2026

Lakon ("we," "our," or "us") operates the Lakon mobile application and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By using Lakon, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and a hashed password. We never store your password in plain text.

Health and Fitness Data: With your explicit permission, we collect data from Apple Health, Oura, Garmin, Coros, Fitbit, Google Fit, and other connected wearables. This may include:

• Heart rate, HRV (heart rate variability), and resting heart rate
• Sleep duration and sleep stages
• Daily steps and active calories
• Recovery and readiness scores
• Workout and activity data
• Body weight and body composition (when provided)

Nutrition Data: Food logs you enter manually, via photo, or by voice. We store food names, quantities, and macronutrient data.

Progress Photos: Photos you choose to upload for progress tracking. These are stored securely and only shared with your assigned trainer.

Messages: Messages exchanged between you and your trainer through the in-app messaging system.

Check-in Responses: Weekly check-in forms you complete, including notes, energy levels, and training feedback.

Device Information: We collect basic device identifiers (for push notifications) and app usage data to maintain and improve the Service.

2. How We Use Your Information

• To provide the Service and display your health and fitness data to you and your assigned trainer
• To generate AI-powered training insights and nutrition recommendations
• To send push notifications and in-app alerts from your trainer
• To process payments and manage your subscription
• To respond to your requests and provide customer support
• To improve the accuracy and quality of our AI features
• To comply with legal obligations

3. Who Can See Your Data

Your Trainer: Your assigned trainer can see your health metrics, food logs, check-in responses, progress photos, and messages. This is core to the coaching relationship.

Lakon Staff: Authorized Lakon personnel may access your data solely to provide technical support, maintain the platform, or comply with legal requirements.

We do not sell your data. Lakon does not sell, rent, or share your personal health data with advertisers, data brokers, or third-party marketing companies. Ever.

4. Third-Party Services

We use the following third-party services to power the platform:

• Terra API — connects your wearable devices (Oura, Garmin, Fitbit, etc.) to Lakon
• Apple HealthKit — reads health data from your iPhone with your explicit permission
• OpenAI — powers AI features (food parsing, training insights). Data sent to OpenAI is used only to generate your personalized response and is not used to train their models under our business agreement.
• Stripe — processes subscription payments. We never store your full payment card details.
• Expo / Apple Push Notification Service (APNs) — delivers push notifications to your device

Each third-party service is bound by its own privacy policy and applicable data protection laws.

5. Apple Health Data

If you connect Apple Health, Lakon requests only the specific health data categories needed to provide your training and recovery insights. We do not use Apple Health data for advertising purposes. Apple Health data is not shared with any third party except your assigned trainer, and only within the Lakon platform.

You can revoke Apple Health permissions at any time in your iPhone's Settings → Privacy & Security → Health → Lakon.

6. Data Retention

We retain your data as long as your account is active. If you delete your account, we immediately anonymize your personal identifying information and delete all health data (wearable metrics, food logs, workout history, progress photos). Message records may be retained for up to 30 days before permanent deletion to maintain trainer record integrity, after which they are permanently purged.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of all personal data we hold about you (available via Settings → Export My Data in the app)
• Deletion: Delete your account and all associated data from within the app (Settings → Delete Account), or by contacting us
• Correction: Update your profile information at any time through the app
• Portability: Export your data in JSON format via Settings → Export My Data
• Opt-out of AI features: You may disable AI-powered food parsing and insights in app settings; standard logging remains fully functional

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale of personal information (we do not sell data).

8. Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS/TLS
• Passwords are hashed using bcrypt (never stored in plain text)
• Authentication uses signed JWT tokens with expiration
• Database access is restricted to authenticated, parameterized queries (no SQL injection risk)
• Rate limiting on authentication endpoints prevents brute-force attacks
• Health data is stored in isolated, access-controlled databases

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using reasonable and appropriate safeguards.

9. Children's Privacy

Lakon is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you via in-app notification or email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

---

This policy applies to all users of the Lakon mobile application (iOS and Android) and the Lakon web platform. It does not apply to third-party websites or services linked from our platform.