Privacy Policy

Last updated: October 3, 2026

This Privacy Policy explains how the Lymi iOS app ("Lymi", "the app", "we", "us") and our website www.lymitheapp.com handle your information. You do not need an account. Your optional first name, onboarding answers and routine history stay on your device. Apple and RevenueCat process subscription information as described below.

1. Who is responsible

The controller responsible for the app within the meaning of the EU General Data Protection Regulation (GDPR) is:

2. Summary

• No account or sign-up. You may enter an optional first name; it stays on your device. We do not ask for an email address.
• Your onboarding answers, routine history and streaks are stored only on your device. We cannot see them.
• Subscriptions are processed by Apple and RevenueCat. For that purpose an anonymous app-user ID and purchase/receipt data are shared with them.
• No analytics events are sent in the current app configuration, no advertising SDKs, and no tracking across other apps or websites.
• A daily reminder uses local notifications only, and only if you allow it.
• To delete your data, use Profile → Reset all data in the app or simply delete the app.

3. Data stored on your device

When you use Lymi, the app stores the following information locally on your iPhone:

• Onboarding answers — for example which body regions you are interested in and what your goals are. These are used to suggest routines.
• Routine history — which routines you completed and when.
• Streaks and reminder settings — your current and longest streak and, if enabled, the time of your daily reminder.

This information never leaves your device as part of Lymi's own functionality. We do not operate a server that receives it, and we have no way to access it. It is not linked to your identity.

Please note that your device may include app data in iCloud or local device backups managed by Apple according to your own iOS settings. Those backups are governed by Apple's privacy policy, not by this one.

4. Subscriptions (RevenueCat and Apple)

Lymi offers auto-renewable subscriptions purchased through Apple's in-app purchase system. To manage and validate these purchases we use the RevenueCat Purchases SDK, provided by RevenueCat, Inc., 300 Lenora Street, Seattle, WA 98121, USA.

For this purpose the following data is processed and shared with RevenueCat and Apple:

• A randomly generated, anonymous app-user ID created on your device. It is not linked to your name, email address, Apple ID or any other identifier we hold.
• Purchase and receipt data, such as the product purchased, transaction identifiers, purchase and renewal dates, price and currency, subscription status (active, expired, in trial, cancelled) and the App Store receipt required to validate it.
• Basic technical information needed for the SDK to work, such as app version, iOS version, device locale and country of the App Store.

RevenueCat acts as our processor and uses this data only to deliver the subscription service. RevenueCat's own privacy policy is available at revenuecat.com/privacy. RevenueCat is based in the United States; the transfer is safeguarded by standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

The purchase itself is handled by Apple. Apple processes your payment details and Apple ID under its own privacy policy (apple.com/legal/privacy). We never receive your payment details.

5. Daily reminder notifications

Lymi can send you one reminder per day to do your routine. This uses local notifications that are scheduled and delivered entirely on your device. No push server is involved and no data is transmitted to us or to anyone else.

The reminder is optional. iOS will ask for your permission before any notification is shown, and you can change your decision at any time in the app or in iOS Settings → Notifications → Lymi.

6. No analytics, ads or tracking

• The current app configuration does not send analytics events. The included TelemetryDeck integration is inactive unless configured in a future release.
• Lymi does not include any advertising SDK and shows no ads.
• Lymi does not track you across other companies' apps or websites and does not request the iOS App Tracking Transparency permission, because there is nothing to track.
• Lymi does not access your location, contacts, photos or Apple Health data. Wellness goals and body regions you select during onboarding stay on your device.

If you choose to contact us by email, we will of course receive the information you send us (see section 13).

7. Our website

Our website www.lymitheapp.com is a static website without user accounts, forms, cookies, analytics or advertising.

• Hosting and server logs. The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit a page, your browser automatically sends technical data to Vercel's servers: IP address, date and time of the request, requested page, referrer URL, browser type and operating system. This data is needed to deliver the website and to protect it against attacks and abuse. Vercel stores these access logs only for a short period. Vercel processes the data on our behalf under a data processing agreement. Transfers to the USA are based on Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
• No cookies, no tracking. The website does not set cookies and does not use analytics, tracking pixels or social media plugins.
• Fonts. All fonts are hosted on our own server. No connection is made to Google or other font providers.
• Links to the App Store. The App Store buttons are plain links. Data is only sent to Apple if you click them and open the App Store.
• Email. If you email us, we process your email address and message to answer your request.

8. Legal basis (GDPR)

Where the GDPR applies, we process the limited personal data described above on the following legal bases:

• Art. 6(1)(b) GDPR — performance of a contract: processing of the anonymous app-user ID and purchase/receipt data by RevenueCat and Apple is necessary to provide, validate and restore the subscription you purchased.
• Art. 6(1)(a) GDPR — consent: daily reminder notifications are only scheduled after you grant notification permission. You can withdraw this consent at any time with effect for the future.
• Art. 6(1)(f) GDPR — legitimate interests: if you contact us by email, we process your message to answer your request. Delivering and securing our website through server logs (section 7) is also based on our legitimate interest in a stable and secure website.

Data stored only on your device under your own control (section 3) is not processed by us and therefore does not require a legal basis on our side.

9. Retention and deletion

• On-device data remains on your device until you delete it. You can delete it at any time via Profile → Reset all data in the app, or by deleting the app from your device.
• Subscription data held by RevenueCat is retained for as long as needed to manage your subscription and to meet legal, accounting and tax obligations, after which it is deleted or anonymised. On request we can ask RevenueCat to delete the data associated with your anonymous app-user ID; please note that this may prevent you from restoring a purchase.
• Support emails are kept for as long as necessary to handle your request and for any applicable statutory retention periods.

Because Lymi has no accounts, there is no "account" to delete. See also our data deletion page.

10. Your rights

Under the GDPR you have the following rights regarding personal data we process about you:

• the right of access (Art. 15 GDPR);
• the right to rectification (Art. 16 GDPR);
• the right to erasure (Art. 17 GDPR);
• the right to restriction of processing (Art. 18 GDPR);
• the right to data portability (Art. 20 GDPR);
• the right to object to processing based on legitimate interests (Art. 21 GDPR);
• the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR);
• the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement.

To exercise these rights, email support@lymitheapp.com. To help us locate subscription records at RevenueCat, you can use Profile → Copy support ID in the app and include the copied ID in your message.

11. Children

Lymi is not directed at children. The app is not intended for anyone under 13 years of age, or under 16 years of age in the European Union. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time, for example when the app gains new features or when legal requirements change. The current version is always available at this address, and the date at the top shows when it was last updated. Where changes are significant, we will inform you within the app.

13. Contact

If you have any questions about privacy in Lymi, contact us at: