Privacy policy

1. Who we are

leanplease, which is the GetLeanPlease app and getleanplease.com, is run by Staple Healthcare Private Limited (CIN U86900MP2026PTC085261), 63-B Vaibhav Nagar, Kanadia Road, Indore 452016, Madhya Pradesh, India. In this policy, “we”, “us” and “our” mean that company, and “you” means the person using leanplease.

We collect and use your personal data under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. As the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 come into force, we follow them as well, and under them we are the Data Fiduciary for your personal data.

Your doctor is a registered medical practitioner and keeps their own medical record of your care, as described in section 4.

2. What we collect and why

Data marked sensitive is health or medical information, which the law treats as sensitive personal data.

Signing in

• Your mobile number. To create your account and sign you in with a one-time code sent on WhatsApp, and so our care team can call you.
• Your email address, only if you choose Continue with Google. To sign you in with Google.

Checking whether the medicine may suit you

• Your full name and year of birth. To identify you and confirm you are an adult.
• Your height, weight and, if you give it, your waist (sensitive). To work out your body mass index and give you a provisional answer.
• Your goal, your periods, and whether you are pregnant, breastfeeding or planning a pregnancy (sensitive). Because these change whether the medicine is safe for you.
• Your answers about health conditions and medicines (sensitive). For the same reason, and so your doctor has your history before your visit.

Before your doctor visit

• Photos of the front and back of an ID document, and a photo of your face. So our care team can confirm that you are the person being treated. You agree to this on the screen before you take them.
• Your blood test report (sensitive). For your doctor to read before your visit.
• Your pincode and address. To arrange a nurse visit for your blood test if you ask for one, and to deliver your medicine.
• Your payments. Whether you have paid, what for, and the payment reference. You pay on Razorpay’s page, and we never receive your card number, CVV or UPI PIN.

Your care

• Your visits, your doctor’s notes, your prescriptions and your dose plan (sensitive). This is your medical record, written by your doctor, and you can read it in the app.
• Your camera and microphone during a video visit. Only while you are in the visit, so you and your doctor can see and hear each other.
• Your messages with your doctor, our care team and the assistant (may be sensitive). To answer you.
• Your medicine orders. To deliver your medicine.

Your programme

• What you log: your weight, waist, shots, how you feel and any side effects, and what you eat (sensitive). To show you your progress and to answer your questions about it.
• Your answers about how you eat, such as your diet and foods you avoid (sensitive). To set your nutrition goal and steps.

Your phone

• A notification address, if you allow notifications. To send you reminders.

We do not collect your progress photos or your cycle days. They are stored only on your phone. If you open the app with Face ID, a fingerprint or your phone’s PIN, your phone does that check, and nothing about it is sent to us.

You can choose not to give us any of this. Some of it is needed for the service to work. Without it, we cannot provide that part of the service.

3. Your consent

We use your personal data with your consent. You give it when you create your account, and separately for your health data, on the screen before the health questions. We record which version of the consent you gave and when. You give separate consent before your ID photos.

You can withdraw your consent at any time. Message our care team in the app, write to support@getleanplease.com, or delete your account (see Delete your account). When you withdraw consent, we stop using your data and delete it as described in section 7. Withdrawing consent does not affect what we did before, and we may no longer be able to provide the service.

4. Who receives your data

We share your data only with the following, and only for the reason given.

• Your doctor, through Samvaid. Our doctors use Samvaid, a separate clinical platform, for video visits, notes, prescriptions and the doctor chat. Your doctor receives your answers, your blood report and your messages to them, to treat you. Your doctor keeps their own medical record of your care, as Indian medical rules require.
• A licensed pharmacy, when we have one. To prepare and deliver your medicine. We will name the pharmacy before your first order, and send your prescription only when you order.
• Razorpay, to take your payments. Razorpay has its own privacy policy.
• Amazon Web Services, which hosts our servers, databases and files in Mumbai, and runs the assistant’s AI model there.
• Meta (WhatsApp), to deliver your sign-in code. Meta receives your mobile number and the code, and may process them outside India.
• Google, only if you choose Continue with Google. Google confirms your account and gives us your email address. We use your email address only to sign you in, and we do not share it or use it for advertising.
• Expo, Google and Apple, to deliver notifications to your phone. They receive your phone’s notification address and the text of each notification, and may process them outside India.

Our care team, who work for us, can see your name, number and programme status, your messages to them and your ID photos, so they can help you and confirm who you are.

We do not sell or rent your personal data. We do not share it with advertisers, insurers or employers, or with your family unless you ask us to.

We will disclose personal data when the law requires us to, for example to a court or a government authority entitled to ask for it, or when it is needed to protect someone’s life or health in an emergency.

5. The assistant

The app has an AI assistant. When you ask it something, it reads your own record in the app, with the same access you have, and nothing more. Its AI model runs on Amazon Web Services in Mumbai. We do not use your data to train AI models.

The assistant gives general information. It does not diagnose, advise on treatment or prescribe. It can suggest something for you to log, but nothing is saved until you tap Save. Every decision about your treatment is made by your doctor.

The answer you see after the health questions is worked out by a fixed set of rules, not by AI. It is provisional, and only your doctor decides whether the medicine is right for you.

6. Where your data is stored

Your data is stored in India, in Amazon Web Services’ Mumbai region. The only data that may be processed outside India is described in section 4: your sign-in code through WhatsApp, your email address if you use Google, and notifications.

7. How long we keep it

• ID photos: deleted 30 days after you send them.
• Everything else in your account: kept while your account is open.
• When you delete your account or withdraw consent: deleted within 7 days of your request, except the records below. Before we delete your account, our care team calls you to confirm.
• Payment records: kept for as long as tax and company law require, currently up to 8 years.
• Your doctor’s medical record: kept by your doctor on Samvaid for at least 3 years, as Indian medical rules require.

8. Your rights

You can ask us to:

• Tell you what personal data we hold about you, what we use it for, and who we have shared it with.
• Correct, complete or update it.
• Delete it, apart from what the law requires us to keep.
• Stop using it, by withdrawing your consent.
• Let a person you name use these rights for you if you die or cannot act for yourself.

To make a request, message our care team in the app or write to support@getleanplease.com with the mobile number on your account. We may ask you to confirm who you are. We reply within 30 days.

If you have a disability and a lawful guardian acts for you, your guardian can make these requests for you. We will ask for proof that they are your guardian.

If you are not satisfied with our answer, write to our grievance officer (section 13). Once the Digital Personal Data Protection Act applies, you can also complain to the Data Protection Board of India.

9. Security

• Your data is encrypted when it is sent and when it is stored.
• Each part of our system can read only the data it needs, and our staff see only what their role requires.
• Our systems and Samvaid’s are separate, and every request between them is authenticated.
• Your sign-in is kept in your phone’s secure storage.
• Our technical logs record that an account did something, never your answers, your health data or your name.

If there is a breach of your personal data, we will report it to the authorities as the law requires, and we will tell you what happened, what it may mean for you, what we have done and what you can do.

10. Age

leanplease is only for adults aged 18 or over. We ask for your year of birth, and we do not knowingly collect data about anyone under 18. If we find that we have, we delete it.

11. This website

getleanplease.com sets no cookies and has no analytics or advertising trackers. It loads its fonts from Google Fonts, so Google receives your device’s IP address when you open a page. If you send us an email, we use it only to answer you.

12. Changes and language

If we change this policy in a way that affects you, we will tell you in the app before the change takes effect, and update the date at the top of this page.

This policy is in English. If you would like it in Hindi or another Indian language, write to us and we will send it to you.

13. Grievance officer and contact

For any question or complaint about your personal data, contact our Grievance Officer, Vansh Parikh:

• Email: admin@getleanplease.com
• Phone: +91 80859 64558, 8am to 8pm
• Post: Vansh Parikh, Grievance Officer, Staple Healthcare Private Limited, 63-B Vaibhav Nagar, Kanadia Road, Indore 452016, Madhya Pradesh

We acknowledge a complaint within 48 hours and resolve it within 30 days. If it is not resolved within 15 days, we will tell you where it stands.