Leia

Effective June 16, 2026

Privacy Policy

Effective date: June 16, 2026

This Privacy Policy explains how Leia, Inc. ("Leia", "we") collects, uses, shares, and protects information about you when you use our application, website, and related services (the "Service").

1. Information We Collect

  • Account information: name, email address, password (hashed), and authentication identifiers (e.g., Google sign-in).
  • Profile and wellness inputs (self-reported): birth year, life-stage information (such as pregnancy or postpartum status if you choose to provide it), pelvic-floor self-assessment answers, cycle and period logs, mood and emotional check-ins, daily wellbeing inputs, notes, and goals.
  • Usage and device: log data, IP address, browser/OS, device type, pages visited, features used, timestamps.
  • Cookies and similar technologies: see our Cookies section.
  • Communications: messages you send us (support, feedback).

2. Sensitive Information; Not HIPAA

Some of the information you provide relates to your health, body, and intimate wellness ("sensitive information"). We treat this information with care. Leia is a consumer wellness product and is not a HIPAA-covered entity or business associate; the information you provide is not Protected Health Information (PHI). Do not submit information you do not want stored as wellness data.

3. How We Use Information

  • Provide, personalize, and improve the Service (including AI-generated routines).
  • Authenticate you, maintain your account, and enable customer support.
  • Send service messages and, with your consent, marketing communications.
  • Analytics, performance, security, fraud prevention, and abuse detection.
  • Comply with law and enforce our Terms.

4. Legal Bases (where applicable)

We process information on the bases of contract (to provide the Service you request), legitimate interests (to improve and secure the Service), legal obligation, and consent (where required, such as for certain marketing or sensitive data uses).

5. How We Share Information

  • Service providers that help us operate the Service (e.g., cloud hosting and database, authentication, AI model providers, text-to-speech, analytics, email) under contractual confidentiality and security obligations.
  • Legal and safety: to comply with law, respond to lawful requests, protect our rights, or protect users from harm.
  • Business transfers: in connection with a merger, acquisition, or asset sale, subject to standard protections.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined by U.S. state privacy laws.

6. AI Processing

Some features use third-party AI models to generate routines and coach responses. Inputs you provide to these features may be sent to those providers for processing. We choose providers that do not use customer data to train their general models by default; however, you should not submit information you do not wish to share.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can delete your account at any time from Settings or by contacting legal@leia.fit.

8. Your U.S. Privacy Rights

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, and Texas), you may have rights to access, delete, correct, port, and opt out of certain processing of your personal information, including sensitive personal information, and to appeal a denial. To exercise these rights, email legal@leia.fit. We will not discriminate against you for exercising these rights.

California (CCPA/CPRA) sensitive personal information notice: Information about your health or intimate wellness that you provide is treated as "sensitive personal information." We use it only to provide the Service you requested and for the other purposes described above; we do not use it to infer characteristics about you for purposes beyond providing the Service.

9. Children

The Service is not directed to and is not intended for use by anyone under 18. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, contact us so we can delete it.

10. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest where supported by our infrastructure. No system is 100% secure; we cannot guarantee absolute security.

11. International Users

The Service is operated from the United States. If you access it from another country, you understand your information will be processed in the United States and other jurisdictions, which may have different data-protection laws than your own.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will provide reasonable notice.

13. Business Customers (DPA)

If you use Leia on behalf of an organization, our processing of personal data on your organization's behalf is governed by our Data Processing Addendum, which incorporates the EU Standard Contractual Clauses where applicable.

14. Contact

Questions? Email legal@leia.fit.