Privacy Policy

Last Updated: August 18, 2026

1. INTRODUCTION AND SCOPE

This Privacy Policy explains how Poshfit AI, Inc. operating the Services at livinglean.ai (“LivingLean,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you visit our website, use our mobile application or AI-powered accountability and food coaching services, join our waitlist or founding-member program, communicate with us, receive customer support, or make a purchase or subscription payment (collectively, the “Services”).

Because LivingLean provides an AI-powered accountability partner and food coach, this Policy also includes specific disclosures about AI personalization, model providers, safety protocols, and data controls. Consumer health data is addressed in our separate Consumer Health Data Privacy Policy, available at https://livinglean.ai/wellness-data.

This Policy applies to users, account holders, website visitors, waitlist members, founding members, and individuals who communicate with us. By accessing or using the Services, you acknowledge that you have read and understand this Policy. If you do not agree with this Policy, do not use the Services. Poshfit AI, Inc. d/b/a LivingLean is the controller or business responsible for personal information collected through the Services, unless we explain otherwise.

2. OUR SERVICES AND PRIVACY APPROACH

LivingLean is a direct-to-consumer, AI-powered accountability partner and food coach. The Services are intended to help users reflect on wellness goals, dietary preferences, lifestyle habits, progress, and accountability needs. LivingLean is not a medical, healthcare, diagnosis, treatment, nutrition, mental-health, or crisis service, and no provider-patient or professional-client relationship is created through the Services.

LivingLean is not a HIPAA-covered entity, and the federal health-data protections that apply to a doctor, hospital, or health plan do not apply to LivingLean. Certain wellness information you share with the Services may nonetheless be protected under other laws, including the FTC Act, the FTC Health Breach Notification Rule, state consumer health data laws, comprehensive U.S. state privacy laws, and, where applicable, GDPR or similar data-protection laws. We treat wellness information you share with the Services as sensitive and limit its use and disclosure as described in this Policy and our separate Consumer Health Data Privacy Policy.

3. WHAT INFORMATION WE COLLECT

Information You Provide to Us

We collect information you provide directly, such as your name, email address, phone number, username, password credentials in hashed form, profile photo, account settings, waitlist or founding-member submissions, customer support messages, feedback, survey responses, and communications with us. If you create an account or use paid features, we may also receive billing address, subscription status, purchase history, and limited payment information, such as the last four digits and expiration date of a payment card. Full payment credentials are processed by our payment processor and are not stored by LivingLean.

Wellness Information

When you use the Services, you may provide wellness goals, dietary preferences and restrictions, lifestyle information, weight and body measurements, meal descriptions, weigh-ins, cravings or temptation reports, movement and exercise habits, accountability preferences, sleep, hydration, and energy notes. You may also choose to share, or the AI Coach may ask about, other wellness context relevant to your goals, such as food allergies and dietary restrictions, energy levels, and other information you consider relevant to your wellness journey. Please do not provide information that you do not want LivingLean to process.

The AI Coach may store notes based on information you share during coaching conversations. These “Coach's Notes” may include your wellness goals, dietary preferences, food allergies, and other context you have shared during coaching. The AI Coach uses this stored information to personalize coaching responses (for example, taking food allergies into account when discussing meals). You can view your Coach's Notes within the app.

AI Chat Content, Personalization, and Safety Signals

We collect the messages, prompts, photos or other inputs you submit to the AI, AI-generated responses, conversation summaries, contextual memory and personalization data (including Coach's Notes), safety flags and signals, and related operational metadata such as timestamps, session identifiers, and token counts. We use this information to provide coaching continuity, personalize responses, operate safety protocols, improve product quality, and administer the Services as described below.

Information Collected Automatically

When you access the Services, we may automatically collect device, usage, and technical information, including device type, model, operating system, browser, IP address, device identifiers, app version, pages or screens viewed, features used, referring URLs, crash and error reports, session duration, frequency of use, and similar usage information. We may collect this information through cookies, pixels, SDKs, local storage, server logs, analytics tools, and similar technologies, as described in the Tracking Technologies section below.

Information From Third Parties

We may receive information from app stores, authentication providers, social-login providers if offered, payment processors, customer support tools, analytics providers, communications providers, security vendors, and other service providers that help us operate the Services. We may also receive information from publicly available sources where relevant for security, fraud prevention, abuse detection, or legal compliance.

De-identified, Aggregated, and Derived Information

We may create de-identified, aggregated, or derived information, such as statistical insights about usage patterns, feature adoption, model performance, safety trends, or product quality. We may also analyze de-identified user data to identify habits, meals, routines, or practices associated with successful wellness outcomes and publish or share these general findings with all users as part of the Services (for example, tips or insights derived from what works for other users, without identifying the source). We do not treat properly de-identified information as personal information once it can no longer reasonably be used to identify you, and we do not attempt to re-identify de-identified information except to test de-identification, maintain security, or comply with law.

4. HOW WE COLLECT INFORMATION

We collect information in four main ways: directly from you when you create an account, use the AI coaching features, provide wellness information, contact support, make a purchase, or submit a form; automatically when you use our website, app, and emails; from service providers and third-party platforms that support the Services; and by generating inferences, summaries, personalization signals, or de-identified insights from your use of the Services.

5. WHY WE COLLECT INFORMATION AND HOW WE USE IT

We use personal information for the purposes described below, depending on how you interact with LivingLean and what information you choose to provide.

6. CONSUMER HEALTH DATA

Some of the wellness information you share with LivingLean may qualify as “consumer health data” under applicable state laws, including the Washington My Health My Data Act (Wash. Rev. Code ch. 19.373) and Nevada SB 370. Our handling of consumer health data, including the specific categories collected, the purposes for which it is used, the categories of third parties with whom it is shared, and your rights, is described in our separate Consumer Health Data Privacy Policy, available at https://livinglean.ai/wellness-data.

7. HOW WE DISCLOSE INFORMATION

We may disclose personal information to the following categories of recipients:

7.1 Service Providers / Subprocessors

We engage service providers and subprocessors to perform functions on our behalf, including: cloud hosting, AI model providers (including Anthropic for conversational AI), payment processors, analytics providers, email/SMS communications providers, customer support tools, security and monitoring services, and professional advisers (legal, accounting). These providers process personal information only in accordance with our instructions and contractual obligations.

7.2 Business Transfers

In connection with a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, personal information may be transferred to a successor entity or third party. Any successor or acquiring entity will be required to honor this Privacy Policy with respect to your personal information or provide you with notice of, and the opportunity to opt out of, any material changes before they take effect. We will provide advance notice of any such transfer through the Services or by email to the address associated with your account.

We may disclose personal information when we believe in good faith that disclosure is necessary to:

We may disclose personal information where you direct us to share information with a third party or where you provide your consent to such disclosure.

7.5 De-identified / Aggregated Data

We may share de-identified or aggregated data that cannot reasonably be used to identify you with any third party for any lawful purpose. We may also publish or display de-identified insights, tips, or findings derived from aggregated user data within the Services to all users (for example, general wellness tips based on what works for successful users).

8. DATA SHARING COMMITMENTS

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising as defined under applicable state privacy laws. If either of these practices changes, we will update this Policy before the change takes effect and provide the opt-out mechanism required by applicable law.

9. COOKIES, TRACKING TECHNOLOGIES, ANALYTICS, AND ADVERTISING

Like most online businesses, we may use cookies, pixels, SDKs, tags, local storage, server logs, email tracking technologies, analytics tools, and similar technologies (collectively, “Tracking Technologies”) to operate the Services, remember preferences, keep accounts secure, measure performance, understand how users interact with our website and app, improve features, and communicate with users. Some Tracking Technologies are set by LivingLean, and others may be set by service providers acting on our behalf.

Where required by law or where we choose to deploy non-essential Tracking Technologies, we will provide appropriate notice and controls. You may manage Tracking Technologies through our cookie banner or preference center where available, browser settings, mobile-device privacy settings, platform-level permissions, and opt-out mechanisms made available within the Services. Because browser and device controls differ, you may need to exercise choices separately for each browser, device, and account you use.

We maintain and periodically review our Tracking Technologies, consent configuration, and vendor data flows. Tracking tools and vendors may change over time, so our posted cookie disclosures and preference center may be updated to reflect current practices.

10. SECURITY

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, and destruction. These safeguards may include encryption in transit and at rest, access controls, least-privilege principles, multi-factor authentication for administrative access, employee and contractor training, vendor and subprocessor security assessments, vulnerability monitoring, patching, logging, and incident response procedures.

We do not guarantee that personal information will always remain secure. If a security incident affects personal information, we will investigate, contain, and remediate the incident as appropriate, notify affected users as required by law, make required regulatory reports, and take reasonable steps to mitigate harm. Where the FTC Health Breach Notification Rule applies, we will provide notices within the timeframes required by that Rule and applicable state breach-notification laws.

If you become aware of any security vulnerability or incident related to the Services, please notify us immediately at the contact information in Section 19.

11. RETENTION

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide and improve the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud and abuse, and support safety protocols. When personal information is no longer needed, we delete it, de-identify it, aggregate it, or otherwise handle it in accordance with our internal retention practices.

Account Deletion

You may delete your account or submit a verified deletion request at any time. After we receive and verify a deletion request, we will delete or de-identify personal information within the timeframe required by applicable law, subject to legally permitted exceptions, including security, fraud prevention, legal compliance, backup, safety, dispute-resolution, and recordkeeping needs.

12. PRIVACY RIGHTS AND CHOICES

Depending on your jurisdiction, you may have the following rights regarding your personal information:

To exercise your rights, contact us at privacy@livinglean.ai. We will respond within the timeframes required by applicable law:

We will verify your identity before fulfilling requests. We will not discriminate against you for exercising your privacy rights. If you use an authorized agent to submit a request, we may require written proof of authorization and verify your identity directly.

13. U.S. STATE PRIVACY RIGHTS

13.1 California (CCPA/CPRA)

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA). The categories of personal information we collect, sources of collection, purposes of processing, and categories of third parties to whom we disclose personal information are described throughout this Privacy Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

As a California resident, you may request:

We do not discriminate against consumers who exercise their CCPA rights. You may designate an authorized agent to submit requests on your behalf. Contact: privacy@livinglean.ai

Sensitive Personal Information

Some information we collect (including wellness-related data provided in the coaching context) may constitute “sensitive personal information” under the CCPA. We use sensitive personal information only for purposes permitted under the CCPA (to provide the Services you have requested) and not for purposes that would require offering a right to limit.

13.2 Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Oregon, Texas, Montana, and other states with comprehensive privacy laws may have similar rights to those described above. You may exercise your rights by contacting us using the same contact information provided in this policy.

Appeals: If we deny your privacy request, you may appeal our decision in accordance with applicable state procedures. We will provide instructions for submitting an appeal in our response to your request.

13.3 Nevada

Nevada residents may opt out of the sale of “covered information” as defined under Nevada law. We do not currently sell covered information as defined by Nevada law. To submit an opt-out request, contact us at privacy@livinglean.ai. Additional rights under Nevada SB 370 with respect to consumer health data are described in our separate Consumer Health Data Privacy Policy.

13.4 Washington My Health My Data Act

Washington state residents have additional rights regarding consumer health data under the Washington My Health My Data Act. Our handling of consumer health data, and the rights available to Washington residents, are described in our separate Consumer Health Data Privacy Policy, available at https://livinglean.ai/wellness-data.

14. AI, PERSONALIZATION, MEMORY, AND MODEL IMPROVEMENT

LivingLean uses AI to generate personalized wellness coaching responses based on your inputs, wellness profile, conversation history, preferences, progress, and context. AI-generated content may be inaccurate, incomplete, outdated, or inappropriate for your specific circumstances. LivingLean does not provide medical, nutritional, mental-health, crisis, or other professional advice, and you are responsible for evaluating AI outputs and making your own decisions. LivingLean does not use fully automated decision-making that produces legal or similarly significant effects.

The Services may retain context from prior conversations to provide continuity and personalization, including remembered goals, preferences, patterns, and progress. You may request deletion of personal information, including conversation history, stored preferences, Coach's Notes, and memory data, as described in the Privacy Rights and Retention sections. However, please note that if you delete your conversation history, Coach's Notes, or personalization data, the AI Coach will no longer be able to remember your prior interactions, goals, or context, and the Services may not function as intended. You may choose to continue using the Services with a fresh start or cancel your subscription. Certain information may be retained where required or permitted for safety, security, legal compliance, or de-identified purposes.

We use third-party AI model providers to power the Services, including Anthropic, pursuant to its commercial API terms that currently provide that customer data submitted through the API is not used to train Anthropic's general-purpose AI models. We do not permit third-party AI providers to use identifiable personal information or consumer health data to train their general-purpose AI models, except as separately disclosed and authorized.

We may use de-identified or aggregated information for analytics, product research, feature development, model and prompt evaluation, service quality, safety testing, and improvement. We may also analyze de-identified data to identify wellness habits, meals, snacks, routines, or practices associated with successful outcomes and share these general findings or tips with all users as part of the Services. The source users are never identified. We do not attempt to re-identify de-identified information except to test de-identification, maintain security, or comply with law.

Where the Services are required to provide AI-specific disclosures or safety notices, including notices that you are interacting with AI and not a human, LivingLean will provide those notices in-product and in this Policy. See Addendum A (AI Safety Protocol and Companion Chatbot Notice) for additional details.

15. CHILDREN AND MINORS

The Services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18, and we do not knowingly provide AI companion, accountability, or food coaching services to minors. If we learn that we have collected personal information from an individual under 18, we will take reasonable steps to delete that information promptly, subject to legal and safety exceptions.

If you believe that a child or minor has provided personal information to LivingLean, please contact us using the information in the Contact section, and we will investigate and take appropriate action.

16. GDPR, INTERNATIONAL USERS, AND DATA TRANSFERS

The Services are currently offered in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other jurisdictions where we or our service providers operate. The privacy laws in those jurisdictions may differ from the laws where you live.

Where GDPR, UK GDPR, or similar laws apply, you may have rights to access, correct, delete, port, object to, or restrict processing of your personal data, as well as the right to withdraw consent where processing is based on consent and the right to lodge a complaint with a supervisory authority. Where required, we rely on appropriate safeguards for cross-border transfers and will provide additional information upon request. If LivingLean expands active marketing or availability outside the United States, this section should be reviewed and updated to reflect the applicable international framework.

The Services may contain links to third-party websites or services, or may be accessed through third-party platforms (e.g., Apple App Store, Google Play Store). We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access.

If you download or purchase the Services through an app store, the app-store operator's privacy policy and terms also apply to your use of the Services. App-store operators may collect certain data in connection with the download, installation, and use of apps.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services, via email, or by other reasonable means at least thirty (30) days before the changes take effect (or such shorter period as required by law).

The “Last Updated” date at the top of this policy indicates when it was last revised. Your continued use of the Services after the effective date of a revised policy constitutes your acknowledgment of the updated practices.

Non-material changes (e.g., typographical corrections, formatting, or clarifications that do not alter your rights) may take effect immediately upon posting.

19. CONTACT INFORMATION

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about our data practices, please contact us:

Poshfit AI, Inc. d/b/a LivingLean

Email: privacy@livinglean.ai

Addendum A: AI Safety Protocol and Companion Chatbot Notice

This notice describes LivingLean's AI safety protocols and companion chatbot compliance practices. It is provided in compliance with applicable state laws, including New York's AI Companion Models Law (GBL Art. 47) and California SB 243. This notice is published as part of the Privacy Policy.

Effective Date: August 18, 2026

A.1 LIVINGLEAN IS ARTIFICIAL INTELLIGENCE

You are interacting with an artificial intelligence system, not a human being. LivingLean's coaching features are powered by AI. The AI does not have emotions, consciousness, opinions, or subjective experiences. It does not hold any professional license. It is not a therapist, psychologist, psychiatrist, counselor, social worker, physician, registered dietitian, or other licensed professional.

AI-generated responses are based on patterns in data and your conversation history. They may be inaccurate, outdated, or inappropriate for your individual circumstances. Nothing the AI says constitutes medical, nutritional, therapeutic, or professional advice. You should consult a qualified professional before making decisions about your health, diet, or mental wellbeing.

At the start of each session you will see a notice confirming that you are interacting with AI, not a human. During extended use, you will receive periodic reminders of this at least every three hours of continuous interaction. These disclosures are required by applicable law and cannot be disabled.

Suitability. LivingLean is intended for users who are 18 years of age or older. As required by California law, LivingLean discloses that companion chatbots may not be suitable for some minors.

A.2 LIVINGLEAN IS NOT A CRISIS SERVICE

LivingLean is NOT a crisis service, suicide prevention hotline, emergency service, or substitute for professional mental-health care. If you are in crisis or experiencing a medical/mental-health emergency:

A.3 IN-PRODUCT AI DISCLOSURES AND REMINDERS

Per applicable law (including New York): LivingLean will clearly disclose at the start of each session that you are interacting with AI, not a human. LivingLean will provide periodic reminders during extended use (at least every three hours of continuous interaction) that you are communicating with AI. These disclosures cannot be disabled.

A.4 SAFETY PROTOCOLS

LivingLean maintains a protocol to detect user expressions of suicidal ideation or self-harm and to respond appropriately. When such signals are detected, the Services will:

LivingLean's detection protocol relies on a combination of automated classification of user messages and safeguards built into the underlying AI model. Additional information about our detection methods and protocol is published at [LINK to standalone Safety Protocols page on livinglean.ai].

We do not guarantee that the Services will detect all safety-related inputs or respond appropriately in every circumstance. You should not rely on the Services to identify or respond to a crisis situation. These features are not a substitute for professional crisis intervention. If you or someone you know is in crisis, please contact emergency services (911) or a crisis hotline such as the 988 Suicide & Crisis Lifeline immediately.

A.5 DATA USE FOR SAFETY

If safety features are triggered during your use of the Services, certain information about the interaction may be processed by our AI model provider (Anthropic) in accordance with its privacy practices and by LivingLean as described in the Privacy Policy. We may retain limited information about safety-related interactions for legal compliance purposes, as described in the Retention section of the Privacy Policy.

A.6 CONTACT

If you have questions about our AI safety protocols or wish to report a safety concern, contact us at privacy@livinglean.ai.