Privacy Policy

Lean Ledger · Last updated 2 October 2026

Lean Ledger is a calorie and nutrition tracker that runs in your web browser. It keeps your data on your own device, and sends it anywhere only if you turn on Google Drive sync yourself.

What the app stores

• Your profile: sex, age, height, weight, body-fat percentage, activity level, goal and target weight.
• Your log: the foods you record, the amounts, and your daily weigh-ins.
• Foods you add: names and nutrition values you enter yourself.
• Settings: theme, whether built-in foods are shown, and your Google Drive sync preference.

Nothing else is collected. There is no account, no email address and no password.

Where it is stored

On this device

In your browser's local storage, under the key leanledger_state_v2. It stays there until you clear your browser's site data or use Reset in the app.

In your Google Drive — only if you connect sync

The app requests a single permission: https://www.googleapis.com/auth/drive.appdata. That grants access only to a hidden, per-application folder (appDataFolder) inside your Google Drive. It does not grant access to any of your other Drive files, and the file does not appear in your Drive file list or in any other app.

The file contains the same information listed above, as plain JSON. It exists so your plan, log and custom foods can follow you between your own devices.

On the web server

The app is served as static files by Cloudflare Pages. Like any web host, Cloudflare may record standard technical request data such as IP address and user agent for security and operations. The app itself sends nothing to the server after it has loaded.

What the app does not do

• No analytics, telemetry, advertising or tracking cookies.
• No accounts, and no collection of your email address or contacts.
• No third-party servers, apart from Google Drive (only if you connect it) and a public CDN used to download the label-scanning library described below.
• We do not sell, rent or share your data with anyone.

Google user data

• Scope requested: drive.appdata only. The app never requests access to your other Drive files, Gmail, Calendar, or any other Google service.
• How it is used: solely to save and restore the data you entered in this app.
• How it is shared: it is not shared. There is no server operated by us that receives or stores it.
• Human access: we cannot read it. The folder is private to the application, and we hold no credentials or mechanism that would let us access your Google Drive.
• Limited Use: Lean Ledger's use of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide the app's user-facing features, is not sold, is not used for advertising, and is not used to train machine-learning models.
• Revoking access: Disconnect in the Data tab revokes the app's access immediately.

Nutrition label scanning

A photo you take of a nutrition label is processed entirely on your device by an OCR engine (Tesseract.js) running in your browser. Your photo is never uploaded. The first time you use this feature, the app downloads the OCR engine and its language data from a public CDN (jsDelivr); that request contains no image and no personal data.

Retention and deletion

• Local data: Data → Reset erases everything on this device immediately.
• Synced copy: Data → Google Drive sync → Delete synced data removes the file from your Google Drive.
• Access: Disconnect revokes the app's Google access.
• Clearing your browser's site data also removes the local copy.

Children

The app is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, the date at the top changes with it. Material changes will also be noted in the app.

Contact

Questions about this policy or your data: diet@amarfadil.com.