Who this is between
Lean Protocol is operated by Ruzylo Cloud, LLC. This sheet says what we collect, why, where it sits, and what you can make us do with it.
Where the log lives
The web notebook stores your log in your own browser, on your own device. It is not uploaded, and there is no copy of it at this end — which is not a promise about our conduct but a fact about our architecture. We cannot read your doses, sell your symptoms, or produce your weights for anybody, because we do not have them.
If you later switch on account sync in the iOS app, that is an explicit choice you make, and we will say so in the product before anything moves. Until you do, the record is yours alone.
The only copy that ever leaves is the CSV you export yourself, to the person you choose to hand it to.
What we do collect
- Your email address — only if you join the register or buy. Used to write to you about Lean Protocol and nothing else.
- A sign-in identifier — if you use Sign in with Apple, we store the opaque identifier Apple gives us. Your real Apple ID and email are never sent to us unless you choose to share them.
- Payment details — handled entirely by Stripe and by Apple. We never see or store a card number.
- Ordinary server logs — IP address, user-agent, and request path, kept 30 days at most, for security and debugging.
What we do not do
- We do not sell your data. Not to a pharmaceutical company, not to an insurer, not to a data broker, not in aggregate.
- We run no third-party advertising trackers.
- We do not use your content to train any AI model.
- We take no affiliate fee from a clinic, a compounding pharmacy, or a supplement, so there is nothing here that profits from knowing what you take.
Where the rest of it sits
The register and any account records are held on Google Cloud in us-central1. Stripe holds payment data under its own policy, and Apple holds Sign in with Apple credentials under its own.
Your rights
- Access — write to privacy@ruzylo.dev and we send a copy of everything we hold on you within 30 days.
- Deletion — same address, done within 30 days, unless the law makes us keep a billing record.
- Correction — same address, or change it in the product where that applies.
- Portability — exports are provided as JSON or CSV.
The on-device log is not on that list because it is not ours to send or delete: clearing it is yours to do, on your device, at any time.
Children
Lean Protocol is not intended for children under 13, or under 16 in the EU, and we do not knowingly collect anything from them.
Changes
If we make a material change we will update this sheet and the effective date at its head, and write once to everyone on the register.
Contact
privacy@ruzylo.dev — Ruzylo Cloud, LLC, Thousand Oaks, California.