Privacy Policy

Last Updated: October 26, 2026

Effective for existing members on November 25, 2026. If you create an account on or after October 26, 2026, this policy applies when you accept it.

1. Introduction

Flagship Digital LLC ("Company," "we," "us," or "our") operates the Lexi AI nutrition and performance coaching platform. This Privacy Policy covers both the Lexi mobile app and our website at meetlexi.ai, and describes how we collect, use, disclose, and protect personal information when you use either. Where a practice applies to only one of the two, we say so. We designed Lexi with privacy and security as foundational concerns.

2. Quick Summary

• We do NOT sell your personal information.
• We do NOT use your data for targeted advertising.
• We do NOT use your personal data to train third-party AI models.
• We do NOT share your data with advertisers or data brokers.

When you take a meal or progress photo, or scan a barcode, the camera is used only for that capture. A barcode scan sends the barcode number, not the image.

Your rights: Access, correct, delete, or export your data at any time by emailing privacy@meetlexi.ai. We respond within 30 days. You can also delete your account yourself in the app, under Privacy & Data.

3. Information We Collect

Information you provide: Name, email, password (stored as a salted hash — never plain text), date of birth, sex, height, weight, goals, body composition data, food logs, chat messages with Lexi, journal entries, mood check-ins, coaching preferences, and progress photos (with separate biometric consent). Feedback and bug reports you choose to send through the app: the text you write, an optional screenshot you attach, and the device and app details sent with it (app version and build, iOS version, device model, the screen you were on, the time, and whether you were online).

Sign-in: If you sign in with Apple or Google, they send us your email address (Apple may give us a private relay address), your name if you choose to share it, and an identifier that is unique to your account with them. We store that identifier and, for Apple, an encrypted token that lets us disconnect Lexi from your Apple account when you delete your account. If you sign in with email and password, we store your email and a salted hash of your password.

Photos and scan reports: If you take progress photos, log a meal with a photo, or upload a body-scan report (such as an InBody or DEXA printout), the image is sent to Anthropic so its AI can analyze it: to estimate changes in body composition, to identify the food, or to read the values on the report (see Section 6). We store progress photos and scan reports in Cloudflare R2 until you delete them or delete your account. Progress-photo analysis requires your separate consent.

Voice input: When you use voice, the audio is sent to Deepgram (live conversation) or OpenAI Whisper (recorded messages) only to be transcribed. Lexi does not store the audio at any point; only the resulting text transcript is kept, as part of your conversation. Our providers process the audio under their own terms and do not use it to train their models. If you dictate a meal description with the microphone in the meal logger, your iPhone's speech recognition, provided by Apple, turns your speech into text on its way to Lexi. Apple handles that audio under Apple's own terms.

Message understanding: The text of your messages and Lexi's replies is sent to OpenAI to generate embeddings — numerical representations that let Lexi recall relevant past conversations. Only text is sent: your messages, Lexi's replies (which can state a health value Lexi mentions, such as HRV, sleep, weight or steps), and, for memory, a short summary of your stated profile (such as height, weight and macro targets). No audio or photos.

Automatically collected: Device type, OS version, app version, session tokens (server-side revocable), IP address (for security and error diagnosis; not linked to your health data), and crash and error reports (sent to Sentry — see Section 6). We also keep a security log of requests to our servers: the request type and address, the result, the time, your member ID and your IP address.

Website (meetlexi.ai): If you apply for the beta, we collect your email address, optionally which phone platform you use (iPhone or Android), your confirmation that you are 18 or older, and optionally your consent to receive launch emails. Our hosting provider also keeps standard server logs — IP address, browser, and pages requested — which we use to keep the site secure and running. We do not use analytics or advertising trackers on the site.

Third-party sources: If you grant permission, Lexi reads health data from Apple Health, such as steps, active energy, workouts, sleep, weight and heart rate, and sends it to our servers so Lexi can use it in your coaching. Lexi never writes data to Apple Health. We do not use Apple Health data for advertising or marketing, and we do not sell it. We share it only with the service providers listed in Section 6, which process it on our behalf to host the service and to create, remember and speak Lexi's replies. When you chat with Lexi, the latest of these values (such as your steps, sleep, heart rate, heart-rate variability, active energy and weight) are included in what we send to Anthropic so Lexi can answer with your own numbers. You can revoke this permission at any time in iOS Settings under Health, then Data Access & Devices.

Purchase information: When you subscribe, Apple sends us a record of your purchase so we can confirm your membership: the plan purchased, transaction identifiers, purchase, renewal and expiry dates, renewal and refund status, and any offer applied. We do not receive your name, card number, bank details or billing address from Apple.

Notifications: If you allow notifications, we store a device token for your phone and send each notification's title and text through Apple's Push Notification service. You can turn notifications off in iOS Settings.

Intermittent fasting health check: If you set up intermittent fasting, we ask a few health questions to check it is safe for you (such as pregnancy, breastfeeding, an eating-disorder history or Type 1 diabetes), store your answers, and use them to keep Lexi's coaching safe.

Safety messages: If a message suggests you may be in crisis or struggling with an eating disorder, Lexi replies with support resources. We save a record of the event (its type, whether it came by text or voice, the time, and the first 200 characters of your message) and alert a Lexi operator by email so a person can review it. The email names only the alert type, the channel and the time, never your message or your name. If the email cannot be sent, we send the operator a notification that says only that an alert is waiting. The operator can read the saved record.

TestFlight beta feedback: If you send feedback or a crash report through Apple's TestFlight app, Apple holds it, and we may retrieve it from Apple to read alongside the feedback you send in the app. When we do, we keep your comment, any screenshot you attach, the crash log if the app crashed, the app version and build, your device model, your iOS version and the time you sent it. We use the email address on your TestFlight invitation to match the report to your Lexi account. If it matches, we do not keep the email with the report. If it does not, we keep the email with the report so we know who sent it. Apple also sends technical details that we do not keep, such as your language and region, time zone, battery level and free storage.

4. How We Use Your Information

• Deliver personalized coaching conversations with Lexi.
• Calculate macro targets, body composition metrics, and hydration goals.
• Generate Lexi's voice responses via ElevenLabs text-to-speech.
• Transcribe your recorded voice messages via OpenAI Whisper.
• Transcribe live voice conversations via Deepgram.
• Generate message embeddings via OpenAI so Lexi can remember relevant context.
• Store and display your progress photos (encrypted, via Cloudflare R2).
• Send transactional emails: account confirmation, password reset, onboarding nudges, and notices about your membership status (for example, that a payment could not be collected or that your membership has ended).
• Send launch emails about the Lexi app only to people who asked for them. If you did not opt in when you applied for the beta, we do not send them. Every launch email includes an unsubscribe link, and unsubscribing stops them immediately.
• Detect crisis language, provide appropriate professional referrals, and alert a Lexi operator so a person can review the event.
• Analyze the photos and scan reports you submit with AI, as described in Section 3.
• Sign you in with Apple, Google or email, and send the notifications you allow.
• Comply with applicable laws and enforce our Terms of Service.

5. Legal Bases for Processing

We include this section for GDPR forward-compatibility, though Lexi is currently operated from the United States and primarily serves U.S. users.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

6. Sub-Processors and Third-Party Service Providers

We share personal information with the following providers solely to deliver the Services:

• Anthropic (Claude API) — AI coaching conversation generation, and analysis of photos and scan reports you submit. Anthropic retains what we send it, including your photos and scan reports, for up to 30 days and may access it for safety and security purposes. Anthropic does not use your conversations, photos or scan reports to train its models.
• Apple — Sign in with Apple, push notifications (Apple Push Notification service), App Store purchases and, if you use the meal-logger microphone, your iPhone's Apple speech recognition. Apple handles this data under its own privacy policy.
• Google — Sign in with Google.
• OpenAI — Whisper voice-to-text for recorded messages, and text embeddings for conversation memory. Audio and text transmitted under TLS; not used to train OpenAI models.
• Deepgram — Live voice transcription for real-time conversation. Audio transmitted under TLS; not retained by Deepgram beyond processing the request and not used to train Deepgram models.
• ElevenLabs — AI voice synthesis. The text of Lexi's spoken replies is sent to ElevenLabs to be converted to audio; a reply can state a health value Lexi mentions, such as HRV, sleep, weight or steps.
• Railway — Backend hosting and PostgreSQL database.
• Vercel — Website hosting and request logs. Website only; the Lexi app does not use Vercel.
• Neon — Database for beta applications submitted through the website. Website only; the Lexi app does not use Neon.
• Cloudflare R2 — Storage for progress photos, scan reports, feedback screenshots and TestFlight crash logs, and caches synthesized audio of Lexi's spoken replies for up to 30 days to speed up repeat playback. AES-256 encrypted at rest; presigned URL access only.
• SendGrid (Twilio) — Transactional email delivery, including security alerts to Lexi staff.
• Sentry — Crash and error reporting so we can fix defects. Receives error details, stack traces, device and app version, and technical request context. We configure Sentry not to receive message content, health data or credentials, and we do not use it to identify you. Sentry data is not used to train any model.
• USDA FoodData Central — Nutrition database lookups. The barcode you scan, or the food name Lexi is estimating, is sent to USDA's public FoodData Central service to find label nutrition. No account information is sent.
• Open Food Facts — Nutrition database lookups when USDA has no match. The barcode you scan is sent to Open Food Facts; results are shown with their attribution. No account information is sent.

Payments are processed by Apple through the App Store. Apple acts as the seller of record for Lexi memberships and handles your payment details under Apple's own privacy policy. We receive only the purchase information described in Section 3, never your payment details.

7. How Long We Keep Your Data

• Active account data: retained for the duration of your account.
• Deleted account: soft-deleted immediately; hard-deleted within 30 days.
• Inactive account (no login ≥ 24 months): email notification sent; hard-deleted 30 days after if no response.
• Voice audio: NOT retained — transient only, discarded after transcription.
• Progress photos: retained while account is active; individually deletable.
• Body-scan photos and scan reports: kept while your account is active and deleted when it is hard-deleted.
• Copies held by Anthropic: conversation text, photos and scan reports we send to Anthropic for analysis are retained by Anthropic for up to 30 days, even if you delete them or your account sooner.
• Safety records (crisis and eating-disorder events): when your account is deleted, we delete your message excerpt and anything that identifies you, keeping only an anonymous record that an alert occurred (its type, channel and time). If a specific event is subject to a legal claim or investigation, we may keep that record until it is resolved.
• Notification tokens: no longer used once you sign out, and deleted when your account is hard-deleted.
• Screenshots and crash logs from TestFlight feedback: deleted 180 days after you send them, or sooner if you delete your account. If a TestFlight report does not match a Lexi account, the email kept with it is deleted after 180 days as well.
• Beta applications submitted on meetlexi.ai: 180 days from the date of application, or sooner if you ask us to delete it.
• Website server logs (IP address, browser, pages requested): retained for 1 day.
• Audit and security logs: retained for 1 year.
• AI usage records (which services were used, token and character counts, computed cost — never message content): detailed records for 90 days, then monthly aggregates. Aggregates for deleted accounts are anonymised.
• Purchase records: retained for the life of your account and for 7 years after it ends, to meet tax and accounting obligations and to resolve billing disputes.

8. How We Protect Your Data

• All data in transit: TLS 1.2 or higher.
• Database at rest: encrypted by Railway.
• Progress photos: AES-256 at rest via Cloudflare R2.
• Authentication: short-lived JWT sessions, server-side revocable.
• Rate limiting on all authenticated endpoints.
• Parameterized queries only — no raw SQL string concatenation.
• Affected users notified within 72 hours of a confirmed breach.

9. Your Privacy Rights

Regardless of where you live, you may exercise the following rights by emailing privacy@meetlexi.ai:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your account and associated personal data, or delete your account in the app.
• Portability: request an export of your data in a machine-readable format.
• Opt-Out of Communications: unsubscribe from non-essential communications at any time.
• Consent Withdrawal: withdraw consent for features that require it (photos, voice, HealthKit) at any time in Settings.
• Complaint: lodge a complaint with a data protection authority or state regulator.

We will acknowledge your request within 5 business days and respond fully within 30 days.

10. State-Specific Privacy Rights

California (CCPA/CPRA): You have the right to know, delete, correct, and opt out of the sale of personal information (we do not sell). Contact: privacy@meetlexi.ai.

Washington (My Health My Data Act): You have the right to confirm, access, delete, and withdraw consent for consumer health data collection. We do not sell consumer health data. Consumer health data we collect includes your Apple Health data, body measurements and composition, photos analyzed for body composition, your answers to the intermittent-fasting health questions, food and hydration logs, and the health information in your chats. We collect it to provide coaching and, where the law requires it, only with your consent. We share it only with the providers listed in Section 6, who process it for us. You can confirm, access, delete and withdraw consent by emailing privacy@meetlexi.ai or, for deletion, in the app.

Illinois (BIPA): We obtain separate written consent before collecting biometric information. Illinois residents may sue for statutory damages for BIPA violations ($1,000 per negligent violation or $5,000 per intentional violation). We will destroy biometric information no later than the earlier of when the purpose for collecting it has been satisfied or three years after your last interaction with Lexi.

Connecticut, Colorado, Virginia, Utah: You have rights to access, correct, delete, and port personal data, and to opt out of targeted advertising (we do not engage in it) and the sale of personal data (we do not sell).

Texas (CUBI): Texas residents have rights under the Texas Capture or Use of Biometric Identifier Act (CUBI) related to biometric data.

11. International Users

Lexi is operated from the United States. Some of our providers process data elsewhere: Anthropic routes requests globally, so the conversations, photos and scan reports we send to Anthropic may be processed outside the United States. If you access the Services from outside the United States, your personal information will be transferred to the United States and, for those requests, may be processed in other countries, where data protection laws may differ from those in your jurisdiction.

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the GDPR or UK GDPR, including access, rectification, erasure, restriction, objection, portability, and the right not to be subject to automated decision-making. For data transfers from the EEA or UK to the United States or other countries, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

12. Children's Privacy

Lexi is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us at privacy@meetlexi.ai.

13. Changes to This Policy

For material changes, we will send an email notification to your registered address at least 30 days before the changes take effect and display an in-app notice on your next login. Your continued use after the effective date constitutes your acceptance of the changes.

14. Contact Us

Flagship Digital LLC

7901 4th St N STE 300, St. Petersburg, FL 33702

Email: privacy@meetlexi.ai