Privacy Policy

This Privacy Policy explains how BLDR (“BLDR,” “we,” “us,” or “our”) collects, uses, and shares information when you use our mobile application (the “App”). By creating an account or using the App, you agree to the collection and use of information as described here.

1. Who We Are

BLDR is operated by Lenny Wandeto, an individual based in the United States. If you have any questions about this policy or how your data is handled, you can reach us at lennywachira01@gmail.com.

2. Information We Collect

Account information

When you create an account, you sign up using email and password, Google Sign-In, or Sign in with Apple. Depending on the method you choose, we receive your name, email address, and (for Google accounts) a profile picture. If you sign up with a password, we never see or store the password itself — it’s handled directly by our authentication provider, Supabase.

Profile & goals

To calculate your calorie and macro targets, we collect your date of birth (or age), sex, height, weight, fitness goal (lose weight, maintain weight, or build muscle), activity level, and preferred workout split and schedule.

Health & fitness data

We store the workout data you log: exercises, sets, reps, weight lifted, rest times, custom exercises and workout splits you create, and completed workout session history. We also store body-weight entries you choose to log over time.

Nutrition data

We store the meals and food entries you log, including calories, protein, carbs, and fat, whether you enter them manually, search for them, scan a barcode, or use AI-assisted logging (see Section 3 below).

Subscription information

If you subscribe to BLDR Pro, your purchase is processed entirely by Apple’s App Store or Google Play, in partnership with our subscription platform, RevenueCat. We never see or store your payment card details — we only receive your subscription status (active, cancelled, in a grace period) and which plan you’re on. To do this, RevenueCat receives your BLDR account ID (so a purchase can be linked back to your account), a device identifier assigned by your phone, and your purchase and transaction history from the App Store or Google Play.

Usage & analytics data

We use PostHog, a product analytics service, to understand how people use BLDR and to catch bugs. This includes which screens you visit, which features you use (for example, logging a workout or food entry), and technical information like your device type and app version. PostHog also records short screen recordings of your in-app activity to help us see where the App is confusing or broken — sensitive values like your weight and food entries are automatically masked in these recordings and are never shown in plain text. If the App crashes or hits an unexpected error, a report describing what went wrong is sent to PostHog as well.

3. AI Food & Workout Logging

BLDR offers an AI-assisted logging feature that lets you describe a meal in your own words, or take/upload a photo of your food, to automatically estimate its nutrition. When you use this feature:

• Your text description, or the photo you provide, is sent securely to our backend and then to Anthropic (maker of the Claude AI models) for analysis.
• Photos are used only to generate a nutrition estimate for that single request — they are not stored by BLDR and are discarded immediately after processing. We do not keep a copy of any photo you use for AI logging.
• The resulting nutrition estimate (not the photo itself) is saved to your food log, the same as any manually entered meal.

Barcode scans are looked up against Open Food Facts, and manual food searches are matched against the FatSecret food database. Neither service receives any information that identifies you personally — only the barcode or search term itself.

4. How We Use Your Information

We use the information described above to:

• Create and maintain your account
• Calculate personalized calorie, macro, and workout targets
• Let you log, track, and review your workout and nutrition history
• Power optional social features, like leaderboards, that you opt into
• Process and manage your BLDR Pro subscription
• Send you reminders and notifications you’ve enabled, scheduled entirely on your device
• Maintain the security and integrity of the App

5. Leaderboards & Data Visible to Other Users

BLDR’s leaderboards are opt-in only — by default, none of your data is visible to other users. If you choose to opt in from your Profile settings, other users on the leaderboard will be able to see:

• A display name — if you haven’t set a separate display name, we show the first word of the name on your account instead, so we’d recommend setting a distinct display name if you’d rather not show your real name
• Your profile picture, if one is set
• Your ranking for the metric you’re being compared on (for example, total workout volume, workout count, or a nutrition total) for the selected time period

You can opt out of leaderboards at any time from your Profile settings, which immediately removes you from other users’ view.

6. Third-Party Service Providers

We rely on the following service providers to operate BLDR. Each only receives the information necessary to perform its function:

• Supabase — hosts our database, authentication, and backend functions
• Google — if you sign in with Google
• Apple — if you sign in with Apple, and for App Store purchases
• RevenueCat — manages subscription status across platforms, as described in Section 2
• PostHog — product analytics, screen-recording-based session replay, and crash/error reporting, as described in Section 2
• Anthropic — processes AI-assisted food/workout logging requests (text and photos), as described in Section 3
• Open Food Facts — barcode-to-nutrition lookups
• FatSecret — food search results

We do not sell your personal information, and we do not share it with advertisers or data brokers.

7. Notifications

Any reminders BLDR sends you (like workout or meal reminders) are scheduled entirely on your device. We do not use a remote push notification service and do not collect a push token or send notifications from a server. You can manage or disable notifications at any time in your device settings.

8. How We Share Information

Beyond the service providers listed in Section 6, we only share your information:

• With other users, but only the specific leaderboard data described in Section 5, and only if you’ve opted in
• If required to by law, subpoena, or other legal process
• To protect the rights, property, or safety of BLDR, our users, or the public
• In connection with a merger, acquisition, or sale of assets, in which case we’d notify you before your information becomes subject to a different privacy policy

9. Data Retention

We retain your information for as long as your account is active. If you request deletion of your account (see Section 10), we will delete your personal data within a reasonable time, except where we’re required to retain certain records (for example, transaction records) to comply with legal or tax obligations.

10. Your Rights & Choices

You can:

• Access or update most of your profile and goal information directly within the App
• Opt in or out of leaderboards at any time
• Manage or disable notifications from your device settings
• Request a copy of your data, or request that we delete your account and associated data, by emailing lennywachira01@gmail.com

If you’re a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we’ve collected and to request its deletion — both of which you can exercise using the contact above. If you’re in the European Economic Area or UK, you have similar rights under the GDPR/UK GDPR, including the right to access, correct, or erase your data, and to object to or restrict certain processing.

11. Data Security

Your data is stored with Supabase and protected by row-level security policies that restrict access so that only you can read or modify your own profile, workouts, and food logs. Data is encrypted in transit. No method of transmission or storage is 100% secure, so while we work to protect your information, we can’t guarantee absolute security.

12. Children's Privacy

BLDR is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us at lennywachira01@gmail.com and we’ll delete it.

13. Where Your Data Is Processed

BLDR is operated from the United States, and your information is processed and stored on servers located in the United States. If you’re using the App from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll notify you through the App or by updating the “Effective” date at the top of this page. Continuing to use BLDR after changes take effect means you accept the updated policy.

15. Contact Us

Questions, requests, or concerns about this policy or your data? Email lennywachira01@gmail.com.