Privacy Policy

This Privacy Policy explains how Lepo Labs (“Lepo,” “we,” “us,” or “our”) handles personal data when you use the Lepo Android application, visit lepo.health, or join our launch waitlist. Lepo helps you understand recovery, sleep, activity, stress, and related health signals using information available through Android Health Connect.

Who we are

Lepo Labs is the provider of the Lepo application and website. We are building Lepo in the European Union and are committed to handling personal data in accordance with applicable EU data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security. Questions or privacy requests may be sent to privacy@lepo.health.

Data the app accesses

With your permission, Lepo may read health and fitness information made available through Health Connect. Depending on the data you and your connected apps provide, this can include sleep sessions, resting heart rate, heart-rate variability (HRV), steps, workouts, activity, and related timestamps. Lepo uses this information to calculate personal baselines, recovery and activity scores, trends, and explanations requested from the coach.

You control Health Connect permissions in Android settings and can revoke them at any time. Lepo requests only the categories needed for the features you choose to use. Where possible, health information and score calculations are processed and stored on your device. Health data used to build your core scores is not uploaded to our servers.

Waitlist and website data

If you join the launch waitlist, we collect only the email address you submit. We use it to tell you when Lepo launches on Google Play. We do not use the waitlist for a general newsletter, and we do not require health information to join. We store the normalised address with the submission date and the source “landing” so we can operate the list, prevent duplicate entries, and demonstrate when consent was provided.

We do not use analytics, advertising trackers, or external font services on this website. Our hosting provider may process limited technical information, such as IP addresses and request logs, as necessary to deliver and secure the site.

Legal bases and retention

We process Health Connect data to provide app features you request and, where required, on the basis of your explicit consent. We process your waitlist email based on your consent to receive the launch notification. You may withdraw that consent at any time by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

Waitlist records may be retained for up to ten years unless you ask us to remove your address sooner, though we intend to delete or repurpose the list after the launch notification only with fresh permission. On-device app data remains subject to your device controls, app deletion, and Health Connect settings. We retain operational records only as long as reasonably necessary for the purpose described or to meet legal obligations.

Sharing, sales, and international handling

We do not sell personal data or health data. We do not share it for cross-context behavioural advertising. We may use carefully selected service providers to host the website, store waitlist entries, deliver launch email, or protect our services. They may process data only on our instructions, for the stated purpose, and subject to appropriate confidentiality and security obligations.

We aim to keep personal data within the European Economic Area where practical. If a provider processes personal data outside the EEA, we will use an approved transfer mechanism and appropriate safeguards, such as an adequacy decision or standard contractual clauses.

Your rights and security

Depending on where you live, you may have rights to access, correct, erase, restrict, or receive a copy of your personal data; object to certain processing; withdraw consent; and complain to your local supervisory authority. To exercise a right, email us at privacy@lepo.health. We may need to verify your request and will respond within the period required by applicable law.

We use technical and organisational safeguards designed to protect personal data, including minimising collection, limiting access, and using reputable infrastructure. No method of storage or transmission is completely secure, but we review safeguards as the service develops.

Changes and contact

We may update this draft as Lepo develops, including when app functionality or service providers change. We will post the current version here and revise the date above. Material changes will be communicated where required. Contact Lepo Labs at privacy@lepo.health with questions or requests.