Privacy

Lenhart stores what you choose to log — your checklist, medications and doses, water, meals, movement, quiet minutes, brain-game plays, mood, saved quotes and journal entries — plus your email address, first name and time zone. It stores nothing else about you. We don’t collect your location, we don’t run analytics on what you write, and there are no ads.

• Account: your email address (to sign you in with a link) and, if you use Google or Apple sign-in, the identifier they provide. No password is stored — there isn’t one.
• Profile: your first name (so we can say hello), your time zone (so “today” is your today), and small preferences: whether you dismissed the care note, dose reminders on/off, your country for the Connect shelf, whether the mindfulness chime is on, and — if you set one — a salted hash of your journal passcode (never the passcode itself).
• What you log: checklist items and ticks, medications and dose logs, water, meals, movement, mindfulness sessions, brain-game plays (which game, for how long, and an internal difficulty level — never a score), mood, saved quotes.
• Journal: your entries and the prompt they answered. Journal text is shown only inside the journal. Drafts you haven’t saved stay on your device.

In a Postgres database hosted by Supabase, encrypted at rest and in transit. Every table uses row-level security: the database itself only ever returns your rows to your signed-in session. Staff access is limited to what’s needed to run the service, and never to browse journals.

To open instantly and work offline, Lenhart keeps a copy of your recent data in your browser’s storage on this device (not the journal), plus the app’s own files. Signing out removes that copy. Journal drafts and small preferences (like “installed” or “not now”) also live only on the device.

• Your location. “Support near you” opens your Maps app with a plain search; the search happens there, not with us. We hold at most a country code you chose.
• Analytics on your content, behavioural tracking, or advertising identifiers. There are no analytics SDKs and no ads.
• Anything from the organizations, communities or Maps results you open — those are independent sites; their privacy policies apply once you’re there.

This build sends no error reports anywhere. If we turn error monitoring on, this page and Settings → About will say so, and reports will never carry anything you wrote or logged.

• Export: Settings → Download my data gives you everything as one JSON file.
• Delete the journal: Settings → Delete all journal entries removes every entry and nothing else.
• Delete your account: Settings → Delete my account removes your account and every row of your data, immediately and permanently.
• You can change your name, time zone and country at any time in Settings.

Lenhart is a companion, not a clinician. It never suggests doses, targets or treatments; resources are starting points, not endorsements. Always confirm medical decisions with your care team.

Questions or requests: [contact email — to be added before launch].