Privacy Policy

This Privacy Policy explains what personal information Loma collects, how we use and share it, and the choices and rights available to you. It applies to the Loma mobile apps, our website at loma-health.app, beta waitlist signup, and any related services we operate (collectively, the "Services").

This Policy is separate from but complements our Terms of Service, which govern your use of the Services and limitations of liability.

Loma is a consumer wellness and health-literacy tool. We are not a HIPAA-covered entity, health care provider, or insurer. Information you provide is handled under applicable consumer privacy laws, not as protected health information under HIPAA, unless we tell you otherwise in a separate agreement.

01Scope and Roles

Data controller. For the Services, Loma Dynamics, Inc. is the data controller (or "business" under U.S. state privacy laws) that determines how your personal information is processed.

What this Policy covers.

• The Loma iOS and Android mobile applications
• The marketing website and beta enrollment form
• Cloud infrastructure, AI coaching, wearable integrations, and account services that support the above

What this Policy does not cover.

• Third-party wearables, nutrition apps, health platforms, or app stores you connect or download from. Those services have their own privacy policies.
• Websites or services that link to us but that we do not operate.

02Information We Collect

We collect information in four ways: from you directly, from integrations you authorize, from your device, and by generating insights from the data above.

Information you provide directly

• Account details — Email address, sign-in method (such as Sign in with Apple or Google), preferred name, date of birth, biological sex, country
• Health profile — Height, weight, VO₂ max, max heart rate, dietary pattern, allergies, intolerances, religious dietary rules, preferred and disliked sports, equipment access, stated goals
• Logged entries — Meals, exercise, hydration, sleep notes, free-text descriptions, voice transcripts you choose to submit, photographs of food or menus you submit through Loma Lens or similar capture features
• Preferences — Language, response density, persona tier, archetype labels, notification settings, appearance settings, product-analytics preference, grocery banners and delivery apps you choose, nearby store names you star
• Chat and coaching — Messages you send to Loma's coaching surfaces, check-ins, and the responses generated for you
• Consent records — Privacy acknowledgments, disclaimer acceptances, an attestation that you are 18 or older, location-sharing choices, your consent to Loma collecting consumer health data, and your consent to Loma sharing health context with processors

Subscriptions

Apple or Google processes the subscription charge. Loma does not receive your card number, bank details, or billing address. The app reads whether your subscription is active on this device so it can unlock Loma. This version does not send the store receipt or a purchase history to Loma's servers. Deleting your Loma account does not cancel the store subscription.

Loma Monthly is $9.99 per month in the United States and includes a 7-day free trial. Loma Yearly is $89.99 per year in the United States and includes a 7-day free trial. The yearly price is 25% less than paying monthly for a year. One trial per Apple ID or Google account for this subscription group. The store shows the price in your currency before you confirm.

Information from connected integrations

When you authorize a third-party service in the App's Settings, we read the data that service makes available. Integrations may include, now or in the future:

• Wearables and devices: Apple Watch (via Apple Health), Garmin, Fitbit, Whoop, Oura Ring, Eight Sleep, and similar devices
• Health platforms: Apple Health (iPhone), Health Connect (Android), Google Fit, Samsung Health
• Nutrition and fitness apps: MyFitnessPal, MacroFactor, MyMacros+, MyCal, Strava, Peloton, Nike Run Club, and similar services

Depending on what you connect, this may include recovery scores, HRV, resting heart rate, sleep stages and duration, strain, workouts, steps, active energy, dietary energy, dietary macros, body composition, respiratory rate, skin temperature deviation, and related metrics.

We read integration data only after you authorize the connection. We do not write data back to a third-party account unless you explicitly direct us to and the integration supports it.

Health Connect (Android). If you connect Health Connect, Loma asks for permission to read these record types: steps, active calories burned, exercise, sleep, resting heart rate, heart rate variability, weight, VO₂ max, nutrition (meals logged in other apps), and hydration. Loma reads only recent data: up to the last 30 days, and the last 7 days for exercise. You choose which to allow, and you can change or remove access at any time in Health Connect settings or your phone's settings. Loma only reads this data and never writes to Health Connect. If you allow it, Loma may also read this data while the app is in the background, to keep your reads up to date. We use it to show your daily fuel, activity, sleep, and recovery reads and to personalize your plan. To generate the insights and coaching you request, we send daily totals from this data to our AI provider, xAI (see Sections 5 and 7). Loma's use and transfer of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements: we use it only to provide and improve the features you use. We do not sell it, use it for advertising, or use it to train AI models, and we do not allow our service providers to use it for those purposes.

Shopping list and grocery apps. Preferred grocers and delivery apps are stored on your device (and may sync with your Loma account as preferences). Copy list for Uber Eats / DoorDash copies text to your clipboard on this device. If you paste that list into Uber, DoorDash, Instacart, or another app, or open those apps from Loma, those companies receive whatever you submit under their own privacy policies. Loma does not create an account for you there or send your list to them unless a future "Send to …" feature you tap does so, in which case we will say so in the App.

Information from your device

• Device identifier (such as identifierForVendor), device model, operating system version, and app version
• Approximate location (city, region, or country) when you enable location sharing for seasonal or time-of-day coaching context.
• Nearby search. If you tap Find stores near me on the shopping list, Order something local on Fuel, or Find a local class / Get some fresh air on Activity, the app uses your device's location, only while you are using the app, to shortlist nearby grocers, restaurants, gyms, studios, pools, and parks. How the search works depends on your device:
  • iPhone: the search runs through Apple Maps (MapKit) on your device. Apple may process the map search (including an approximate location and the search query) under Apple's privacy policy.
  • Android: your phone sends your precise location coordinates and the type of place you are looking for, over an encrypted connection, directly to the OpenStreetMap Overpass API (servers at overpass-api.de and overpass.openstreetmap.fr). That service returns nearby places. It receives your coordinates and your device's IP address and handles them under its own policies. It is not a Loma service provider, and we have no contract with it.

  On both platforms, the request goes from your device to that service, not through Loma. Loma's servers do not receive or store your GPS coordinates.

• Restaurant hours and menus. To look up hours or a cached menu, our servers may send the restaurant's name and city (not your coordinates or your account ID) to Google Places (Google Maps Platform). If you load a menu, we may also send a public menu URL or dish names read from a photo on your device. We store those extracted dishes in a shared restaurant-menu cache so other people at the same kitchen do not have to reload it. We do not store the photo, GPS, or who submitted the menu. We store only store names and banners you star, not coordinates. You can turn location off anytime. We do not use geofences around health-care facilities to identify you, track you, or send you messages.
• Restaurant websites inside the app. When you open a menu, Loma can load that kitchen's public website inside the app. Links on that page can open other web pages. We do not build a browsing profile from those visits, and we do not use them for advertising.
• Local notifications you turn on in Settings. These are scheduled on your device (logging reminder, morning move, evening balance). We do not send marketing blasts. You can turn each type off, or all of them, anytime.
• Crash logs, error reports and performance diagnostics from the iPhone and Android apps, sent through Sentry.
• Push notification token, if you enable notifications
• Product usage events (see below) when Share usage analytics is on

Crash and performance diagnostics. The iPhone and Android apps use Sentry to send us crash and error reports, and performance data from a sample of sessions, so we can find and fix problems and keep the app working well. These reports include technical details such as your device model, operating-system version and app version, stack traces showing where in the app a problem happened, a short log of app activity before it (such as screens opened, buttons tapped and network requests the app made, including the web addresses of those requests), and timing data for app operations. The apps don't send your name or email address to Sentry.

Voice input and microphone. If you tap the microphone to dictate, Loma asks for microphone permission and uses the microphone only while you are dictating. Your phone's built-in speech recognition turns your speech into text. On supported Android devices (Android 12 and later), this happens on your device. On older Android versions and some devices, your phone's speech service (usually Google on Android, Apple on iPhone) may process the audio on its servers under its own privacy policy. Loma receives only the text, never the audio, and does not record, store, or upload audio. The text is treated like anything you type: it may be sent to our servers and AI providers to generate a response. You can turn off microphone access at any time in your phone's settings. We do not create or store face geometry, fingerprints, voiceprints, or other biometric identifiers or templates. Meal and menu photos are used to estimate food and read menus. We do not use them to identify who is in the photo.

Product usage analytics (feature metrics)

When Share usage analytics is enabled in the App (it is on by default on both iPhone and Android; you can change it anytime in Settings → Privacy), we collect account-linked product interaction events so we can understand which features people use and how often. Examples:

• App opens and session boundaries
• Which main tabs you open (Home, Log, Chat, Guide, Plan)
• Whether you open Loma Log or Loma Lens, which Lens mode (food, menu, pantry), and whether a parse succeeded or failed
• Insight refreshes and which insight panel you open
• High-level chat send counts (not message content)
• Integration connect/sync outcomes at a high level (provider name and success/failure class)

Each event stores an event name, timestamp, optional session identifier, app and OS version, and a small set of non-sensitive properties (for example `scan_type=menu`, `tab=log`, `latency_ms`, `error_class`). Events are tied to your account ID for product and operations analysis.

What product analytics does not include. We intentionally do not put the following into product usage events:

• What you type in logs, chat, goals, or dictation transcripts
• Photos or images you capture in Loma Lens
• Health numbers (macros, calories, HRV, sleep stages, weight, and similar values)
• Precise location
• HealthKit or Health Connect records

You can stop collection of future product usage events by turning off Share usage analytics. Turning the toggle off does not delete events already stored; you may request deletion of your account or data as described in Your Privacy Rights. We purge raw product usage events after 90 days and retain only aggregated counts (for example daily feature counts) for longer-term product analysis.

Information generated by Loma

• Daily and rolling aggregates (for example acute and chronic strain ratios, fuel–activity balance reads)
• Personalized insights, recommendations, panel copy, and action cards
• Feedback signals (likes, dislikes, dwell time, dismissals)
• Safety, citation, and voice-validation logs that record whether generated content passed automated checks (these logs are designed to minimize storage of raw message content)
• OAuth tokens and sync metadata for integrations you connect (stored in encrypted form)
• AI token usage and estimated cost per account (for rate limits, abuse prevention, and service operations — see AI and Automated Processing)

Website and beta waitlist

If you request a beta invite on our website, we collect:

• Email address
• Signup timestamp
• Technical metadata routinely logged by our hosting provider (for example IP address, browser type, and request time) for security and abuse prevention

We store beta signups in Vercel KV and may add your email to a Resend audience list so we can contact you about the beta. We do not sell beta waitlist emails.

Sensitive and consumer health data

Much of the information above is sensitive under U.S. state laws and special category data under the GDPR, including health, fitness, and wellness data; dietary restrictions; precise identifiers combined with health inferences; and, where applicable, information about mental wellness or eating behaviors surfaced in coaching interactions.

We collect this data only to provide the Services you request, to keep you safe through automated guardrails, and as otherwise described in this Policy. Where required by law, we ask for your consent to collect consumer health data, and for a further, distinct consent to share that data with processors. Each is its own statement in the app, and agreeing to the Terms of Service is not either of those consents. For people in the EEA, the United Kingdom, or Switzerland, health and wellness data is special-category data. We process it on the explicit consent you give in the app. You can withdraw that consent by deleting your account or disconnecting an integration. Withdrawal does not affect processing that already happened.

03How We Use Your Information

• Provide the Services — Display health summaries, balance reads, goal-aware coaching, chat, food logging, shopping lists, wearable sync, and account management
• Personalize your experience — Tailor voice density, recommendations, and insights to your goals, constraints, persona tier, and recent activity
• Operate Loma Lens — Process photographs you submit (for example plates, menus, pantry) and related day-context fields — including dietary pattern, allergies, intolerances, and diet notes — to estimate nutrition, rank menu options, and draft order-instruction language for you to review with food-service staff
• Operate AI coaching — Send prompts and relevant context to AI providers to generate responses, subject to safety and citation checks
• Keep you safe — Detect crisis language, eating-disorder risk signals, allergen conflicts, and unsafe recommendations through automated systems; route crisis topics to fixed resource messages without LLM generation where designed to do so
• Improve quality — Use product usage events and aggregated metrics to improve feature design, validators, prompts, content library retrieval, and product reliability
• Operate and protect the Services — Enforce AI daily caps, monitor abuse, diagnose failures, and understand infrastructure cost
• Communicate with you — Account notices, security alerts, beta invitations, and product updates you opt into
• Comply with law — Respond to lawful requests, enforce our terms, prevent fraud, and protect rights and safety
• Business operations — Billing support through app stores, website analytics, internal product metrics, and AI cost reporting

What we do not do.

• We do not sell your personal information.
• We do not share your personal information for cross-context behavioral advertising.
• We do not use your personal health data to train third-party foundation models.
• We do not use Apple HealthKit, Health Connect, Google Fit, or Samsung Health data for advertising, marketing, or sale, or for any purpose other than providing the Services and as permitted by those platforms' terms and policies (including the Health Connect Permissions policy and its Limited Use requirements).

04Legal Bases for Processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data only where we have a legal basis:

• Contract — Providing the App, account, sync, coaching, and support
• Consent — Optional location sharing, marketing email, certain integrations, and explicit consent (GDPR Article 9) for health and wellness data, which you give in the app during sign-up. You can withdraw it at any time in two ways: disconnect the integration (for example, Health Connect) in the app or your phone's settings, or delete your account (Settings > Account > Delete Account, or email hello@lomadynamics.com). Withdrawing consent does not affect processing that happened before.
• Legitimate interests — Security, fraud prevention, product improvement (including first-party feature usage analytics with opt-out), AI cost and capacity planning, and communicating about the Services — balanced against your rights
• Legal obligation — Compliance with law, regulatory requests, and recordkeeping
• Vital interests — Protecting life or physical safety in rare emergency scenarios

You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you may object as described in Section 10.

05AI and Automated Processing

Loma uses large-language models and other automated systems to summarize data, generate coaching copy, retrieve curated library content, and rank recommendations. This involves:

• Sending chat messages, dictated text, and contextual summaries (recent logs, goals, constraints, biometrics you store, daily totals from connected health data such as Apple Health or Health Connect, and persona settings) to xAI (Grok) to generate responses. xAI is our only AI chat provider.
• Sending meal, menu, and pantry photos you submit through Loma Lens, with the dietary pattern, allergies, intolerances, and diet notes needed to read them, to xAI's image model to estimate nutrition and read menus. Loma does not store the photo after the response is returned.
• Sending the text of your chat message (or a search query derived from it) to Voyage AI to turn it into a search vector, so we can find relevant passages in our curated health-literacy library. Voyage AI receives the message text only, not your profile, photos, or connected-device data.
• Logging token usage, estimated cost, model, provider, and call kind per authenticated account to enforce daily caps, prevent abuse, and operate the service
• Logging validator outcomes and safety events to monitor quality (designed to minimize raw message content)

AI cost and usage logs are operational records needed to run the App safely and affordably. They continue even if you turn off Share usage analytics, because they are required to enforce rate limits and operate AI features you request. They do not store your free-text prompts or health content in the usage ledger; they store accounting fields (for example tokens and call kind).

Important limitations.

• Automated output is informational, not medical advice. See our Terms of Service.
• Where a provider offers settings for minimal retention or for opting out of model training, we use them. We have turned on Zero Data Retention for Loma's xAI account; under xAI's terms, request content is deleted when the response is delivered, and no later than one hour after the request completes, and xAI's business terms say it does not train on our API data. We have opted out of Voyage AI's use of our data for model training; under Voyage AI's terms, content we send after the opt-out is deleted after it is processed. We have not negotiated or separately signed agreements with our AI providers, so their standard published terms apply (see Section 7).
• Some safety checks (for example crisis keyword detection) run without calling an LLM.
• You are not subject to a decision based solely on automated processing that produces legal or similarly significant effects. Loma does not make employment, credit, insurance, or housing decisions about you.

06Who We Share Information With

We share personal information only as described below.

Service providers (processors)

• Supabase — Database, authentication, storage, edge functions, and row-level security
• xAI — Large-language-model inference for chat, coaching, insights, and photo meal logging (our only AI chat provider)
• Voyage AI — Embeddings for search over our curated content library
• Sentry — Crash and performance diagnostics for the iPhone and Android apps
• Apple / Google — Sign-in, app distribution, and (on iPhone, if you use a nearby search) Apple Maps search
• Vercel — Website hosting, serverless functions, and KV storage for beta signups
• Resend — Transactional email and beta audience management
• Plausible Analytics — Privacy-oriented, cookie-light website analytics

Our hosting, email and analytics providers process data for us under their service terms. Our AI providers (xAI for chat and Voyage AI for search) process data under their standard business terms, some of which include data processing terms; we have not negotiated or separately signed agreements with them (see Section 7).

Third parties your device contacts directly

• OpenStreetMap Overpass API (Android only): nearby-place search. When you use a nearby search, it receives your precise location coordinates and your IP address directly from your device. It is not a Loma service provider.

Other services we use

• Google Places (Google Maps Platform): when you look up a restaurant's hours or menu, our servers send Google the restaurant's name and city. Google receives this as an independent controller under its own terms and privacy policy. We don't send your coordinates or account ID.

Integrations you authorize

When you connect a wearable, health platform, or fitness app, we exchange data with that provider as you direct. Disconnecting in Loma or in the third party's settings stops future sync, but data already received may remain in your Loma account until you delete it.

Legal, safety, and business transfers

We may disclose information if required by law, court order, or governmental request; to protect the rights, safety, and security of Loma, users, or others; or in connection with a merger, acquisition, financing, or sale of assets, with notice where required by law. We do not treat beta waitlist emails as part of the App's health dataset for advertising purposes in any transfer.

07International Data Transfers

Loma's primary systems are hosted in the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States and may be accessible to U.S. law enforcement under U.S. law.

Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary measures. This Policy does not mean those clauses are already signed with every vendor. Contact us if you want to know which safeguards are in place for your transfer, or to request a copy of a mechanism we do have.

AI providers and international transfers. Loma's AI features are powered by third-party AI providers that process data in the United States and, for some providers, other countries. When you use AI features (chat, insights and coaching, photo meal logging, dictated questions), we send the content needed to answer your request to xAI. That can include what you type or dictate, relevant coaching context, photos you submit, and daily totals from connected health data such as Health Connect. To search our library, we send your chat queries, or an encoded form of them, to Voyage AI. We do not use any other AI provider.

We use these AI providers under their standard business terms. Some of those terms include data processing terms and, for transfers from Europe, standard contractual clauses, but we have not negotiated or separately signed agreements with any AI provider. We have turned on xAI's Zero Data Retention, which xAI's terms require for personal data, and xAI's business terms say it does not train on our API data. We have opted out of Voyage AI's use of our data to improve its models. If you are in the European Economic Area, the United Kingdom or Switzerland, this means:

• your data is transferred to the United States (and, for xAI, possibly other countries), and we cannot yet confirm that every contract-based safeguard EU and UK law expects for international transfers applies;
• your data may not have the same level of protection as in your home country;
• we cannot promise these providers' data use or retention beyond what their own published terms say.

Where those safeguards do not apply, we rely on your explicit consent, given in the app at sign-up, for these transfers (Article 49(1)(a) GDPR and UK GDPR). You can avoid these transfers by not using Loma's AI features, and you can stop them by disconnecting integrations or deleting your account (Settings > Account > Delete Account, or email hello@lomadynamics.com). We will update this section if we put contract-based safeguards in place.

08Retention

• Account and profile — While your account is active
• Raw daily health metrics — Up to 90 days, then rolled into monthly aggregates
• Chat messages — Newest 1,000 messages or 90 days, whichever is greater, unless you delete sooner
• Product usage events (raw) — Up to 90 days, then deleted
• Product usage aggregates — Daily feature-count rollups retained while useful for product analysis (or until account deletion)
• AI usage and cost logs — Operational retention for caps, abuse prevention, and cost analysis; daily rollups may be retained longer. Deleted with your account subject to the deleted-accounts row below
• Beta waitlist email — Until you unsubscribe, we remove you, or the beta program ends
• Security and audit logs — Up to 13 months for operational logs; longer where law requires
• Deleted accounts — Identifiable data deleted or anonymized within 30 days of confirmed deletion request, except minimal records kept for fraud prevention, security, or legal compliance

Data already held by a third-party integration you authorized remains subject to that provider's retention practices.

09Security

We use administrative, technical, and organizational measures designed to protect personal information, including:

• Encryption in transit (TLS)
• Encryption at rest for databases
• Encrypted storage for third-party OAuth tokens
• Row-level security and role-based access controls
• Audit logging for sensitive health-table writes
• Vendor security review and least-privilege access

No method of transmission or storage is completely secure. You use the Services at your own risk. Report suspected vulnerabilities to hello@lomadynamics.com.

If we discover a breach of identifiable health information — including an unauthorized disclosure, not only a hack or intrusion — we will notify affected people without unreasonable delay and within 60 calendar days, as the FTC Health Breach Notification Rule and applicable state breach-notification laws require. The notice will be clear, describe the types of health information involved, and name the third parties that acquired it when the Rule requires those names. If 500 or more people are affected, we will notify the FTC at the same time we notify those people. If fewer than 500 people are affected, we will log the breach and notify the FTC in the annual window the Rule sets, no later than 60 days after the end of the calendar year. State laws may require faster notice. This is our commitment for how we will handle an incident. It is not a decision, in advance, that every incident is a breach, and a specific incident still needs a lawyer's review.

10Your Privacy Rights

Your rights depend on where you live. We honor applicable rights regardless of where you submit a request, and we will not discriminate against you for exercising them.

How to exercise rights. To delete your account, use Settings > Account > Delete Account in the app, visit loma-health.app/delete-account, or email hello@lomadynamics.com with "Privacy Request" in the subject line. On Android, if you ask us to delete your account by email, we delete your data on our servers ourselves, including any profile photo you uploaded. To get a copy of your data, email hello@lomadynamics.com from the email address on your Loma account with "Privacy Request – Export" in the subject line. We will verify your identity and send a machine-readable copy (JSON) of the information you provided within 30 days. Once in-app export is available, you can use it instead. We may verify your identity before responding. Authorized agents may submit requests where permitted by law.

10.1 Rights available broadly

• Access — know what personal information we hold about you
• Correction — fix inaccurate information
• Deletion — delete personal information we collected from you
• Portability — receive a machine-readable copy of information you provided
• Restriction / objection — limit or object to certain processing
• Withdraw consent — where processing is consent-based
• Opt out of marketing email — unsubscribe links or email us
• Opt out of product usage analytics — Settings → Privacy → Share usage analytics (off stops future product usage events; AI operational cost logging for caps continues as described above)

United States — California (CCPA / CPRA)

California residents have the right to know, access, correct, delete, and port personal information; to limit use of sensitive personal information to what is necessary to provide the Services; and to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising.

Sensitive personal information. We use health and wellness data only to provide the Services, for safety, and as permitted by CPRA. We do not use or disclose sensitive personal information for inferring characteristics for unrelated advertising.

Shine the Light. We do not disclose personal information to third parties for their direct marketing purposes.

United States — comprehensive state privacy laws

Residents of Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, Indiana, Iowa, Delaware, New Jersey, New Hampshire, Nebraska, Tennessee, Minnesota, Maryland, and other states with consumer privacy laws may have rights to access, correct, delete, port, and opt out of targeted advertising, sale, and certain profiling. We do not sell personal data or engage in targeted advertising based on App health data.

Appeals: if we deny your request, email us to appeal. You may also contact your state attorney general.

United States — Washington My Health My Data Act and similar laws

Washington residents (and residents of other states with consumer health-data laws, including Nevada and Connecticut health-data provisions) may have rights to confirm collection, access, delete, and withdraw consent for consumer health data.

Collection and sharing are different consents. During sign-up, the app shows each of these as its own statement:

• consent to collect meals, workouts, sleep, wearable sync, and photos you submit, in order to provide the Services
• consent to share the health context needed to generate the insights and answers you asked for with these processors: Supabase (hosting), xAI (chat), Voyage AI (search over our library), and Sentry (crash and performance diagnostics)

Each statement says what it covers and how to withdraw (delete your account, or disconnect an integration to stop future sync). Loma's coaching, insights, and AI features depend on this data, so you need to give both consents to use the app. You can tick each statement, or accept them together with one "Agree to all" tap. A general acceptance of the Terms of Service alone, a hover, or closing a window is not that consent.

We do not sell consumer health data, and we do not condition the Services on a written authorization to sell it. We do not geofence health-care facilities to identify, track, or message consumers. You may withdraw consent by disconnecting integrations or deleting your account. We keep a record of the policy version you accepted.

European Economic Area and United Kingdom (GDPR / UK GDPR)

You have the rights listed in Section 10.1, plus the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). Our lawful bases are in Section 4.

We respond to requests from the EEA, UK and Switzerland within one month of receipt. Where a request is complex, we may extend this by up to two further months, and we will tell you why within the first month. Emailed export requests are answered within 30 days.

EU and UK representatives. We have not appointed an EU or UK representative. If the law requires one, we will name them in this Policy. Until then, contact hello@lomadynamics.com.

Canada (PIPEDA and provincial laws)

Canadian residents may access, correct, and challenge our handling of personal information, and may complain to the Office of the Privacy Commissioner of Canada or applicable provincial authority.

Brazil (LGPD)

Brazilian data subjects may confirm processing, access, correct, anonymize, block, delete, port, and revoke consent, and may file a complaint with the ANPD.

Australia

Australian users may access and correct personal information and complain to the Office of the Australian Information Commissioner.

Other regions

If your local law grants additional rights, contact us and we will respond consistent with that law.

11Children's Privacy

The Services are only for adults 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided information to Loma, contact hello@lomadynamics.com and we will delete it. Creating an account requires an in-app attestation that you are 18 or older. If you enter a date of birth that shows you are under 18, we will not save that date.

12Cookies and Similar Technologies

Mobile App. The App does not use browser cookies. Product usage analytics, when enabled, uses first-party events sent to our backend with your account session — not third-party advertising SDKs and not the App Tracking Transparency advertising identifier.

Website. Our marketing site uses Plausible Analytics, a privacy-oriented analytics tool that does not use third-party advertising cookies and does not track you across other sites. Plausible may use a first-party connection to count page views in aggregate. Because we do not operate cross-site advertising or sell personal data, we do not display a cookie consent banner in jurisdictions where analytics of this kind do not require one; if your jurisdiction requires opt-in consent for analytics, contact us and we will honor your choice.

Essential hosting and security logs are processed by Vercel as part of operating the site.

13Third-Party Links and App Stores

The Services may link to third-party sites (for example integration partners or support resources). Their privacy practices are their own. Purchases through the Apple App Store or Google Play are also subject to those platforms' privacy policies.

14Important Reminder About App Output

For Loma Lens menu features, we may use dietary pattern, allergies, intolerances, and related notes you provide to filter suggestions and draft language you can use with restaurant staff. We do not control food preparation or service. Confirming allergens, restrictions, and how a dish is made is your responsibility when ordering. See our Terms of Service for the full wellness disclaimer, Loma Lens food-order terms, and limitation of liability.

15Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will notify you in the App with a prompt that asks you to review and agree before you continue. We may also email beta waitlist subscribers where appropriate, or post an updated Policy on our website with a revised "Last updated" date. Continued use after you agree (or, where permitted by law and we have given notice, after the effective date) constitutes acceptance. If you do not agree, sign out and delete your account.

16Contact Us

Privacy questions, data-rights requests, and security reports:

We aim to respond to verified requests within 45 days, or the shorter period required by applicable law.