Privacy Policy

LegLike ("LegLike," "we," "us," or "our") operates leglike.com and the LegLike application (the "Service"). LegLike is currently operated as an independent project and has not yet been incorporated as a formal legal entity. This Privacy Policy explains what information we collect, why we collect it, how it is used and protected, and the rights you have over it. If ownership or operation of the Service transfers to another operator, this Policy — or an updated version of it — will continue to govern your data, and we will notify users of any material change.

1. Who this applies to

We do not currently restrict the Service to a specific country or region, and we have not yet determined every jurisdiction our users are located in. We aim to handle personal data — including data protected by regulations such as the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and similar laws elsewhere — in a manner consistent with the principles those laws require: collect only what we need, use it only for the purposes described here, and let you access, correct, export, or delete it. We do not claim to have completed formal registration under any specific privacy regulator, and we will update this Policy as our legal structure and compliance obligations become clearer.

2. Information we collect

• Account information: name, email address, and a securely hashed password (we never store your password in plain text) when you register.
• Health & fitness information you provide: age, height, weight, activity level, fitness goals, self-reported pain areas, injury history, available equipment, and training frequency, collected during onboarding and used to personalize your plans.
• Assessment & plan data: mobility assessment scores (hip, knee, ankle, balance), and the AI-generated workout and rehab plans created for you, including the condition or region you describe when requesting a rehab plan.
• Contact form submissions: your name, email, and message when you reach us through the Contact page.
• Technical data: basic server logs (such as IP address and request timestamps) generated automatically by our hosting infrastructure for security and reliability. We do not currently use third-party advertising or analytics trackers, and this Policy will be updated if that changes.

3. Sensitive (health) data — special care

Some information you provide — pain areas, injury history, medical/physical conditions relevant to a rehab plan, and assessment results — is health-related personal data, treated as a special category of data under laws like the GDPR. We collect it only because you choose to enter it, only to generate and personalize your workout and rehab plans, and we do not sell it, and do not share it with advertisers or data brokers. You may decline to provide any of this information, though doing so will limit how well the Service can personalize your plans.

4. How we use your data

• To create your account and authenticate you when you sign in.
• To generate personalized workout plans, rehab plans, and mobility assessments, including by sending relevant profile data to our AI provider (see Section 5).
• To operate, maintain, and improve the Service, including troubleshooting bugs.
• To respond to messages you send through the Contact page.
• To meet legal obligations where they apply to us.

5. Who can access your data

Your data is stored in our hosted database. A small number of authorized administrators of LegLike can view account and usage information (such as name, email, plan, and aggregate counts) through an internal admin dashboard, strictly to operate and support the Service — never to sell or advertise to you. To generate AI plans, relevant profile fields (such as goals, pain areas, and injury history) are sent to our third-party AI infrastructure provider solely to produce your plan; that provider processes the data under its own data-processing terms and does not use it to train models on our behalf beyond what is needed to serve the request. We use standard third-party infrastructure providers (hosting, database, and file storage) to run the Service; each processes data only as needed to provide that infrastructure.

6. Data retention

We retain your account and health-related data for as long as your account is active, so your plans and history remain available to you. If you delete your account or request deletion (see Section 8), we will delete or anonymize your personal data within a reasonable time, except where we are required to retain limited records for legal, security, or fraud-prevention purposes.

7. Cookies

We use only the minimal, strictly necessary cookies required to keep you signed in and to remember your session. We do not currently use third-party advertising or cross-site tracking cookies. If that changes, we will update this Policy and, where required by law, ask for your consent first.

8. Your rights & how to reach us

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. Because LegLike does not yet publish a company address, we handle all privacy requests through our in-app Contact form. Select "Privacy" as the category and describe your request; we will respond as soon as reasonably possible. You may also delete most of your own data directly from your account settings where available.

9. Security

We use industry-standard measures — including password hashing and encrypted connections — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect data from them.

11. Changes to this Policy

We may update this Policy as the Service, our legal structure, or applicable laws change. We will update the "Last updated" date above and, for material changes, provide reasonable notice within the Service.

See also our Terms & Conditions and Medical Disclaimer.