Privacy Policy

Last updated: 20 July 2026

Lenari helps you understand an osteoporosis diagnosis. We know that trust matters most when the information is personal, so this policy explains — in plain language — what Lenari collects, what stays on your device, what leaves it, and who processes it.

The short version

Most of what you enter into Lenari stays on your phone. Two kinds of information leave your device: the DEXA scan image you choose to analyse (sent to an AI service that reads it and doesn't keep it), and anonymous usage and crash data (which helps us improve the app). We don't sell your data, and we don't run advertising.

Information stored on your device

When you use Lenari, the following is stored locally on your device and is used only to personalise your experience:

• Your name
• Diagnosis details, your main concern, and any medication you tell us about
• DEXA scan results (the interpreted summary, not the image)
• Supplement reminder preferences

This information is held in your device's app storage. You can clear all of it at any time from Profile → My Data → Delete all my data. Please note that this local storage is not separately encrypted at rest beyond the protections your device's operating system provides.

Information that leaves your device

DEXA scan analysis

When you choose to scan a DEXA report, the scan image is transmitted to a third-party AI service so it can be read and turned into a plain-language explanation. This uses OpenRouter, which routes the image to OpenAI's GPT-4o model. Lenari does not operate its own server, and does not store the scan image on a Lenari-controlled backend — only the interpreted text summary is saved locally on your device.

We have enabled zero-data-retention routing on this service, which means the scan image is only sent to processing endpoints that do not store your data. The image is used to generate your explanation and is not retained by the provider afterwards, and it is not used to train AI models. Scanning a DEXA report is optional — you can use Lenari without it.

Analytics and crash reporting

Lenari uses analytics and crash-reporting tools to understand how the app is used and to detect and fix problems. These run while the app is open. They collect:

• Usage analytics (PostHog): which screens are viewed, along with a device-local identifier. If you join the waitlist for a feature that isn't available yet, the details you entered during onboarding (your name, diagnosis, concern, and medication selection) are included with that signup so we can follow up appropriately.
• Crash and performance reporting (Sentry): crash reports, error traces, performance data, and standard device and operating-system information. This does not include your name or health details.

These tools help us keep Lenari reliable and make it better over time. They run while the app is open. You can limit this kind of collection through your device's operating system settings, or by not using the app.

App updates and notifications

Lenari uses Expo's over-the-air update service to deliver improvements without a full app-store update; this involves routine update checks and does not send your personal content. If you enable supplement reminders, a push-notification token is generated so reminders can be delivered to your device.

What we collect and why — at a glance

Data	Where it goes	Why
Name	On device; sent to PostHog only if you join a waitlist	Personalisation; follow-up on waitlist
Diagnosis, concern, medication	On device; sent to PostHog only if you join a waitlist	Personalisation; follow-up on waitlist
DEXA scan image	OpenRouter → OpenAI	To read and explain the scan
DEXA result summary	On device	To show your results
Screen views + device-local ID	PostHog	Understand and improve usage
Crash & performance data, device info	Sentry	Detect and fix problems

What we don't do

• We don't sell your personal information.
• We don't show advertising or use advertising identifiers.
• We don't require you to create an account.
• We don't collect your location, contacts, messages, or browsing history.

Your choices

• Delete your data: Profile → My Data → Delete all my data clears everything stored on your device. This does not delete data already sent to the third-party services above.
• Export your data: Profile → My Data lets you share a copy of your profile and DEXA summary via your device's share sheet.
• Skip the scan: the DEXA analysis feature is optional.

To ask a question about your data, or to request deletion of any information you believe we hold, contact us at the email below.

Children

Lenari is intended for adults managing an osteoporosis diagnosis and is not directed at children.

Changes to this policy

We may update this policy as Lenari develops. When we make material changes, we'll update the date at the top of this page.