This policy explains how the Lale AI mobile app (iOS and Android; “Lale”) and the laleai.app website handle personal data. The privacy notice inside the app follows the same principles.
In short: Your records (period days, symptoms, moods, notes and meals) are stored encrypted on your phone. When you write to Lale or send a photo of your plate, the part needed to create the reply goes through our server to our AI provider, OpenAI; Lale’s server doesn’t store your messages or photos. You don’t need an account. There are no ads, and your data is never sold.
Data controller
Lale AI. You can reach us at [email protected].
Data that stays on your phone
What you enter in Lale is kept only on your phone, in an encrypted database:
- Your name, so we can address you; your date of birth, marital status and number of children; why you use Lale.
- Your period start and end days, flow, symptoms, moods, energy levels, notes, usual cycle and period length, and any hormonal birth control you use.
- Your meals, water logs, calorie goal and small previews of your meal photos.
- Your chat history with Lale and the notes Lale keeps from your chats.
- Your app settings, such as reminders and appearance.
Period, symptom, mood, note and birth control details are health data, a special category of personal data.
The database is encrypted with a random 256-bit key, kept in the Keychain on iPhone and in the Android Keystore on Android. It is not included in iCloud or Google backups. Only you can create a backup file, protected with a password you choose, and you decide where to save it. You can lock the app with Face ID, your fingerprint or your phone’s passcode.
What is sent when you write to Lale
So that Lale can reply, the following is sent over an encrypted connection (HTTPS) to our server and from there to our AI provider, OpenAI:
- Your message and the latest messages in the chat (up to 40).
- A small “today” summary: your cycle day, your phase, how many days until your next period and whether period tracking is on.
- Up to 20 of the notes Lale has kept from your chats.
- A summary of your records when your question needs it. For example, if you ask “How was I last month?”, a short summary of that period.
- A one-way hash of your installation ID, so that misuse can be limited to a single installation.
Your name and date of birth are not added to these requests, and your full records never leave your phone. Anything you type into a message yourself is sent so the reply can be created.
Plate photos
When you send a photo of your plate, it is first resized on your phone and all photo metadata (EXIF), including location, is removed. The resized photo goes through our server to OpenAI so the dishes can be recognised. Lale’s server doesn’t store the photo. Only a small, encrypted preview stays on your phone next to the meal.
What our server keeps
Lale’s server (api.laleai.app) doesn’t store your messages, photos or Lale’s replies, and doesn’t write them to logs. To run the service it keeps only:
- Installation ID. When the app first opens, your phone creates a random ID. The server uses a one-way, salted hash of it for daily and weekly usage counters. It isn’t linked to your name, email or phone number. Usage counters are kept for at most 8 days.
- Device check. To confirm requests come from the genuine Lale app, we use Google Firebase App Check (Apple App Attest on iPhone, Google Play Integrity on Android).
- Anonymous counts. Totals such as daily users, messages and photos. The country comes from the country code provided by our network provider, Cloudflare. IP addresses and health data are not part of these counts, and individual events are not stored.
- Version check. When the app opens, only the platform, version number and language are sent to ask whether a new version is available.
- Technical log. Which endpoint a request reached, the result and how long it took. No IP addresses or content are written.
Who we share data with
We never sell your data or use it for advertising or marketing. To provide the service, we work with these providers:
| Provider | Purpose | What is sent | Where |
|---|---|---|---|
| OpenAI | Lale’s replies and recognising dishes in photos | Your message, chat context, “today” summary, photo, hash of your installation ID | United States |
| netcup GmbH | The machine Lale’s server runs on | Requests passing through the server (not stored) | Germany |
| Cloudflare | Network and security service for the website and server | IP address and connection details | Many countries |
| Google (Firebase App Check, Play Integrity) and Apple (App Attest) | Device check | App and device verification details | United States and other countries |
| Apple App Store and Google Play | Downloads and subscription payments | Your store account; we never see your payment details | The store’s country |
| Purelymail | Support email | The email you send us and your email address | United States |
Under its own policy, OpenAI doesn’t use data sent through its API to train its models, and may keep it for up to 30 days to monitor for abuse. We send our requests in a way that tells OpenAI not to keep the conversation on its side (store: false).
International transfers
OpenAI is in the United States and our server is in Germany. When you send Lale a message or a photo, the information described above is transferred abroad. If you don’t use Lale chat or plate photos, your records are not transferred abroad; the calendar, logs and adding meals by hand work offline. If you email us, your email is kept by our email provider in the United States.
Legal basis
- Your health data is processed on the basis of your explicit consent (Article 9(2)(a) GDPR, where it applies; Article 6 of Turkey’s KVKK). You can withdraw your consent at any time; your records are then deleted from your phone.
- Usage counters, the device check and the technical log are needed to provide the service and prevent misuse (performance of a contract and legitimate interests, Article 6(1)(b) and (f) GDPR).
How long data is kept
- Records on your phone: until you delete them or remove the app.
- Lale’s server: messages, photos and replies are not stored. Usage counters for at most 8 days; anonymous daily totals indefinitely.
- OpenAI: up to 30 days (abuse monitoring).
- Support emails: for at most 1 year after your request is resolved, then deleted.
Your rights
You have the right to access, correct, delete and export your data, to object to or restrict processing, to withdraw your consent and to complain to your data protection authority. Because your records are only on your phone, you can do most of this yourself in the app: edit, export or delete them.
For any request, write to us at [email protected]. As we have no account system and our server doesn’t store content, we hold no health records about you on our server.
Deleting your data
In the Me tab, tap the gear at the top, then choose Delete all my data under Your data. All your records, chat history and notes are deleted from your phone. Removing the app also deletes the records on your phone. Nothing with your content is left on our server; usage counters are deleted automatically within 8 days.
Children
Lale is for people aged 18 and over. If the date of birth entered during setup shows someone under 18, the app doesn’t continue. We don’t knowingly process data of anyone under 18.
Ads and tracking
There are no ads in the app. We don’t use third-party advertising, analytics or tracking tools, and we don’t track you across other apps.
Website
laleai.app doesn’t use cookies or tracking tools, and loads its fonts and images from our own server. The site is delivered through Cloudflare; Cloudflare and our server process connection details such as your IP address to deliver the site securely. If you email us, your address and message are used only to reply to you and are kept by our email provider, Purelymail.
Changes
If we change this policy, we update the date on this page. For important changes we will also let you know in the app and, where needed, ask for your consent again.
Contact
For questions and requests: [email protected]