← Back to Lea

Privacy Policy

Last updated: 23 August 2026

Your privacy matters to us. This Privacy Policy explains how LEA HEALTH, trading as Lea, collects, uses and protects your personal information when you use the Lea app, website and services.

For data-protection purposes, LEA HEALTH is the data controller.

1. Information we collect

Depending on how you use Lea, we may collect:

  • Account information, such as your name, email address, age or date of birth and account settings.
  • Health and wellbeing information, such as menstrual-cycle information, symptoms, mood, sleep, activity, fitness, nutrition, skincare and other information you choose to record.
  • Information you share with Lea AI, including questions, messages and information provided when using Lea's AI features.
  • Connected-service information, where you choose to connect services such as health platforms, calendars or wearable devices.
  • Technical information, including device information, app activity, crash information, IP address and similar security or analytics data.
  • Payment information. Payments may be processed by an app store or payment provider. We generally do not receive your complete payment-card details.

2. Health information

Some information processed by Lea, including information relating to your health and menstrual cycle, may be considered special-category personal data under UK data-protection law.

Where required, we will ask for your explicit consent before processing this information.

This consent will be requested separately and can be withdrawn. Withdrawing consent may mean that features which require health information can no longer operate.

3. How we use your information

We use personal information to provide and personalise Lea; calculate and generate relevant insights and recommendations; operate AI features; maintain your account and subscription; connect services you request; improve the safety, reliability and performance of Lea; provide customer support; prevent fraud and misuse; and comply with legal obligations.

We do not sell your personal health information to advertisers.

4. Our legal bases

Depending on the activity, we process personal information because it is necessary to provide the service you have requested, because you have given consent, because we have a legitimate interest in operating and securing Lea, or because we have a legal obligation.

Where we process special-category health information, we will identify an appropriate condition under applicable data-protection law, which may include your explicit consent.

You may withdraw consent at any time where our processing relies on consent.

5. AI and personalisation

Lea uses automated systems and AI to analyse information you provide and generate personalised insights and recommendations.

These systems can identify patterns in information such as your cycle, symptoms, lifestyle or previous interactions to make Lea more relevant to you.

Unless we tell you otherwise, Lea does not use automated decision-making to make decisions about you that produce legal or similarly significant effects.

6. Who we share information with

We may use trusted service providers that help us operate Lea, including cloud infrastructure, database and security providers, analytics services, customer-support tools, payment providers and AI technology providers.

We only provide them with information necessary for the relevant service and require appropriate protections for personal information.

We may also disclose information where required by law, to protect users or the security of Lea, or as part of a corporate transaction subject to appropriate safeguards.

7. International transfers

Some of our technology providers may process information outside the UK.

Where personal information is transferred internationally, we use appropriate safeguards required by applicable data-protection law, such as adequacy regulations or approved contractual protections.

You can contact us for more information about these safeguards.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing your account, meeting legal obligations, resolving disputes and maintaining security.

When information is no longer required, we delete or anonymise it in accordance with our retention processes. Some information may remain temporarily in secure backups before being deleted through normal backup cycles.

9. Your rights

Depending on applicable law, you may have rights to access your information, correct inaccurate information, request deletion, restrict or object to certain processing, receive a portable copy of certain information and withdraw consent.

You can exercise these rights through Lea where available or by contacting nevedya@withlea.com.

In some circumstances these rights are subject to legal limitations.

10. Account and data deletion

You may request deletion of your Lea account and associated personal information through the app, where available, or by contacting us.

We will delete or anonymise information unless we are legally required or otherwise permitted to retain particular information.

11. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.

No digital service can guarantee absolute security, but protecting the confidentiality and integrity of Lea users' information is a core part of how we operate the service.

12. Cookies and analytics

Our website and app may use cookies, analytics technologies or similar tools to operate the service, understand usage and improve performance.

Where consent is required for non-essential technologies, we will ask for it through our cookie or privacy controls.

13. Changes to this Policy

We may update this Privacy Policy as Lea develops or legal requirements change.

If we make material changes, we will take reasonable steps to bring them to your attention.

14. Questions or complaints

For privacy questions, requests or complaints, contact: nevedya@withlea.com

LEA HEALTH
35 FREDORA AVENUE HAYES UB4 8RD

We will acknowledge data-protection complaints in accordance with applicable UK law, investigate them appropriately and communicate the outcome.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your personal information.