Lotta legal documents

1. Who we are

Registered office: Lisbon, Portugal

Company number (NIPC): 519547942

We decide what the app records and what it's used for. Data protection law calls that being the "controller", which in practice means we're the ones answerable to you for everything in this document.

If you want to talk to us about your information, write to privacy@lotta.health.

2. What this document covers

If you're in the United States, section 17 sets out what US law adds, and links to our separate Consumer Health Data Privacy Policy.

3. What Lotta knows about you

Where it comes from

Everything Lotta holds comes from you: what you tell us when you sign up, and what you record as you use the app.

There are two exceptions. Apple sells you your subscription, so Apple tells us whether you have one and what kind. And if you sign in with Apple or Google, they pass us the sign-in details you agree to share.

We don't import your information from other apps. We don't buy data about you from anyone. We don't go looking for anything you haven't recorded yourself.

What you record, section by section

When you sign up

• Your email address, or your Apple sign-in if you use one
• Your first name and your date of birth
• The country you live in
• Your biological sex, your gender (you can choose not to say), and your height
• Where you are in your treatment
• What you'd like help with, and what's on your mind
• When you'd like your reminders

Med

• Your medication: which one, the dose, and when you take it
• Symptoms, and how you're feeling

Eat

• Meals and drinks, including photos of them if you want
• Food allergies and intolerances, and foods that sit badly with you

Weight

• Your weight when you start, and the entries you add after that
• Your BMI, which the app shows from your weight and height

Anywhere in the app

• Notes you type yourself

Behind the scenes

• Whether you have a subscription or a free trial, and what kind
• Your reminder and notification settings
• Only if you switch it on: how you use the app (section 4)
• Crash reports, if the app fails on your phone (section 5)

What's required and what's optional

• Required: your sign-up details and everything in Med. They're what Lotta is, so without them there's no app to use.
• Optional: Eat and Weight. Each one is separate, and you can switch either on or off at any time in Settings → Privacy.
• Optional, and off unless you turn it on: app analytics.

If you leave Eat or Weight off, the parts of Lotta built on them have nothing to work with, so those features won't show you anything. Everything else works exactly as before. Section 9 covers what happens to what you've already logged when you switch something off.

How we look after it

Some of what you record is information about your health. We protect everything you record with specific security measures, which section 12 describes.

Notes you type are just notes

There are three places where you can type freely: a note on any log, a custom allergen name, and a food you tell us sits badly with you.

We store what you write, show it back to you, and include it in any copy of your data you ask us for.

The app never reads it. Nothing you type there is matched against anything or used to pick what you see. If you want something to change what Lotta shows you, record it through the app's own controls.

Your date of birth

We use your date of birth to confirm you're 18 or over.

4. Why we hold it, and our legal reasons

The law requires a legal reason for everything we do with your information. Here's each one.

App analytics is a separate question, and it's off unless you turn it on

We'd like to know which parts of the app people use, so we can make the ones that matter better. That's not necessary for Lotta to work, so it's a separate choice, unticked by default, and refusing it changes nothing about the app you get.

If you do switch it on, we don't include health information in it. Not your medication, not your symptoms, not your weight.

We won't call this data anonymous, because it isn't. It's kept apart from your health record and it isn't labelled with your name, but it's still connected to an account, and we'd rather tell you that than use a word that sounds better than the truth.

Three things we don't do

We don't sell your information.

We don't use it for targeted advertising, and we don't let anyone else use it for that either. Lotta has no advertising in it.

We don't use your information to train AI models.

5. Who else handles it

Companies that work for us

These companies work only on our instructions. They can't use your information for their own purposes, and their contracts with us say so.

Services you deal with directly

Apple. Apple sells you the subscription. We don't handle the payment, and we never see your card. That's between you and Apple, under Apple's own terms. If you sign in with Apple, Apple confirms who you are under those same terms.

Google. If you sign in with Google, Google confirms who you are under its own terms.

Open Food Facts. A public, non-profit food database based in France. When you search for a food or scan a barcode, it receives what you searched for and your device's internet address, and nothing else. It handles that under its own privacy policy.

6. Where your information is kept

A few of the companies in section 5 are based in the United States, or use services there: RevenueCat, Expo, and parts of Brevo's service. What they handle is account and device information, never what you record about your health. Those transfers are protected by the safeguards the law requires: standard contractual clauses approved by the European Commission, the UK's equivalent for UK users, or the EU-US Data Privacy Framework. You can ask us for a copy of the safeguards at privacy@lotta.health.

If you're in the UK, your information travels from the UK to Ireland. UK law allows that. The UK has approved transfers to countries in the European Economic Area, which includes Ireland, so no additional arrangement is needed.

If you're in Brazil, your information travels to Ireland, and Brazilian law allows that: in January 2026 Brazil's data protection authority recognised the European Union as providing an adequate level of protection. Where one of the United States companies above handles your account or device information, that transfer is allowed because it's needed to provide the service you signed up for. You keep every right Brazilian law gives you, and section 8 lists them.

7. How long we keep it

While you're using Lotta

Everything you record stays until you remove it or delete your account. Your logs aren't deleted if your subscription ends.

If you delete your account

Everything goes. It becomes invisible immediately, it's recoverable for thirty days if you change your mind, and after that a job runs that deletes it permanently. Section 10 covers this properly.

If you stop using Lotta without deleting it

People sometimes stop using an app without closing their account. When that happens, we don't keep your information indefinitely.

So: if you haven't opened Lotta for twenty-four months, we'll email you to say the account is heading for deletion, tell you the date, and remind you that opening the app keeps it and that you can ask for a copy of your data first. If we hear nothing for three months after that, the account is deleted, with the same thirty-day window as any other deletion.

Altogether that's about twenty-seven months from your last visit before deletion starts, and about twenty-eight before it's final.

If you have a live subscription, none of this applies. We don't auto-delete an account someone is paying for.

The one thing we keep after everything else is gone

When we delete your data, we keep a record of the consents you gave, the ones you took back, and the deletion itself.

We keep it for two reasons. If you ever ask whether you agreed to something, the law puts the burden on us to prove it, and without a record we can't. And if you ask us to delete your data, the record is the only evidence that we actually did.

It's kept apart from everything else and it doesn't read as health information. Your identifier in it is a code, not your name. Your email address is held separately again, under lock, and the two are only ever put together if you ask us to or if a court requires it.

We keep it for six years after your account is deleted, which covers the usual time limits for legal claims in the countries we operate in. Then it's deleted.

8. What you can ask us to do

Your rights, one by one

• Find out whether we hold anything about you at all. A yes or no, with nothing else attached.
• Get a copy of everything we hold. Your account, your consents, everything you've recorded, your history, the record of which content the app showed you, your subscription details, analytics if you turned it on, anything you've written to support, and when your data was accessed and why.
• Take your data elsewhere. This one is narrower than a copy, on purpose: it's the information you gave us and the entries you made.
• Correct something that's wrong. We change the specific thing and nothing else.
• Delete your data. Section 10.
• Tell us to stop using it while a question is unresolved, without deleting it.
• Object to us using it.
• Take back your permission, for any part, at any time. Section 9.
• Ask who your information has been shared with.
• Complain. Section 14.
• Appeal, if we turn a request down. We'll tell you how at the time we refuse, and you can always go to a regulator instead or as well.

How to ask

Write to privacy@lotta.health and tell us what you want. You don't need to use particular words or give a reason.

We'll need to be sure it's really you before we hand over health information. That usually means answering from the email address on the account. We'll never make you create an account, or keep one open, in order to exercise a right.

How long we take

Two things worth knowing

Getting a copy isn't instant. One of us puts it together by hand, which is why the timescales above are what they are rather than a download link.

If you've already started deleting your account, anything you ask for between then and the final day is handled by email. There's nothing to log in to at that point, so we do it that way instead, and we'll tell you so on the deletion screen.

9. Turning something off, and taking back your consent

Turning off and deleting aren't the same thing

Turning something off stops Lotta using that part of your information from that moment on.

Deleting removes it. That's section 10.

You can do either at any time, from Settings → Privacy. They're two separate controls, and neither one is buried inside the other.

What if I want to stop tracking something?

Switch it off. Eat and Weight are yours to turn on and off whenever you like.

Medication and symptoms are different. They're what Lotta is, so they're part of the app rather than an option inside it. If you want to stop those, you're deleting your account, and section 10 covers what happens then.

What happens to what I already logged?

When you switch a domain off, we'll ask you one question straight away: keep what you've already logged, or erase it?

Both answers are fine. You might be pausing for a month and want your history waiting when you come back. You might want it gone today. We ask instead of guessing, and we write down what you told us, so if it ever comes up, we can show that you were asked and that we did what you said.

If you choose to erase, everything in that part of the app is gone within fifteen days.

If you choose to keep, it just sits there. Nothing reads it. Nothing uses it. It waits until you either switch the domain back on or ask us to delete it, either through this same route or by deleting your account.

There's no time limit on that, because you're the one who ends it. Choosing to keep your data is you telling us to go on holding health information for you, and we treat it as exactly that: your decision, live until you change it.

Does taking back consent undo what came before?

No, and we want to be straight about that. Turning something off stops Lotta using that information from that point forward. It doesn't reach backwards, and it doesn't make what happened before it improper. What it does is stop things, from the moment you say so.

Will turning something off change how Lotta treats me?

Only in the obvious way. Switch off Eat and the food parts of Lotta stop working, because there's nothing for them to work on. That's the switch doing what it says.

Everything else carries on exactly as before. We won't degrade the rest of the app, and we won't treat you differently for having used a right that's yours.

10. Deleting your account

What happens when you tap delete

Everything becomes invisible immediately. You can still sign in, but there's nothing there.

For thirty days, you can cancel the deletion and get everything back exactly as it was.

After thirty days, a job runs and removes it permanently. That job deletes; it can't read.

The only thing that survives is the record described at the end of section 7: that you consented, that you withdrew, that you deleted. Nothing about your health.

Your subscription is a separate thing, and this part matters

Deleting your Lotta account does not cancel your Apple subscription. We can't cancel it for you. Nobody at Lotta can. An App Store subscription belongs to your Apple ID, and only you can end it, from your Apple settings.

If you delete your account without cancelling, you'll keep being charged for an app showing you nothing. So do that first. The deletion screen points you to the right place in your Apple settings.

If you're on a free trial, the same applies. Deleting your account doesn't cancel it, and unless you cancel it through Apple before it ends, it turns into a paid subscription.

Once you cancel, your subscription runs to the end of the period you've already paid for. Anything to do with refunds is handled by Apple, under Apple's terms, and you can ask them directly.

Cancelling your subscription is not the same as deleting your account

If you cancel or let a subscription lapse, nothing is deleted. Your account stays, your logs stay, and you can ask us for a copy of your data at any time.

If you've asked us for something and then delete

If you've asked for a copy of your data, or made any other request, we finish answering it before the deletion completes. We won't destroy the record we need in order to answer you.

11. When a person can see your data

The default

Lotta is built so that we can't casually look. There's no admin screen anywhere that displays your health information, so there's nothing for one of us to idly open.

When we can look, and only then

When you've reported a problem and asked us to. You tell us something's wrong; we ask your permission in the app; you say yes; we look at the part you reported, for as long as it takes to fix it. Not your whole history.

When you've made a request under section 8 and we need to reach your data to answer it.

When a court or the law requires it. Only what's specified, nothing more.

When we're investigating fraud or abuse of the app. Your account and how it's been used, not your health record.

Billing questions never need health information, and don't get it.

Every access is written down

Each time someone reaches your data, it's recorded: who, when, and why. That record exists so the rules above can be checked rather than just claimed.

Anyone who could ever reach your health information, including anyone we work with, is under a written duty of confidentiality before they get anywhere near it.

12. How we protect it

Our hosting provider is bound by contract to keep it in the EU and to apply the security measures data protection law requires, and access by our team is limited to the situations in section 11.

13. Lotta is for adults

Lotta is built around prescription medication and how it affects your body. It isn't a product for children, and we've set the age at 18 everywhere, higher than the law requires in any country we operate in.

How we check

We ask for your date of birth when you sign up. You can't enter a birth year that would make you under 18.

If someone under 18 gets in anyway

If we find out an account belongs to someone under 18, we delete it and everything in it. We don't keep a record of the child.

If you're a parent or guardian and you think your child has an account, write to privacy@lotta.health and we'll deal with it.

14. If you're unhappy

Complaining to us

Write to us and say what's wrong. We'll come back within 30 days to confirm we've got it, and we'll tell you the outcome once we've looked into it.

You don't have to complain to us first. It's just usually faster, and if we've made a mistake we'd rather fix it than hear about it from a regulator.

Complaining to a regulator

You can complain to the data protection authority in your country. That right exists independently of anything we do. We can't waive it, delay it, or ask you not to use it.

15. When this document changes

Every version of this policy carries a version number and the month and year it was last updated, both at the top of the page. We keep the older versions, so it's always possible to show you the exact wording you agreed to.

What happens depends on what changed

If we ever change something in a way that reaches back over information we already hold, we'll email you and tell you in the app before the change takes effect. You can then switch off or erase the parts affected in Settings → Privacy, or delete your account.

16. Who to contact

Filipa Figueiredo Filipe, one of our founders, leads data protection at Lotta for every country we operate in. Write to privacy@lotta.health with a question, a request under section 8, or a complaint, and it reaches her.

If you're in Brazil, Brazilian law requires us to name an Encarregada pelo Tratamento de Dados Pessoais and publish how to reach her. That's Filipa Figueiredo Filipe, at the same address, with Margarida Mendes da Maia as her designated substitute.

17. If you're in the United States

Our Consumer Health Data Privacy Policy

Washington and Nevada require health information to be described in a separate document. You can read ours in the app under Settings, and at lotta.health/privacy.

What we don't do

We don't sell your personal information, and we don't use it for targeted advertising. Nobody tracks you across other websites or services through Lotta.

If you're in Nevada

• What we collect and who handles it: sections 3 and 5.
• Reviewing and correcting your information: section 8.
• How we tell you about changes: section 15.
• The date this notice took effect: 01/10/2026

Nevada also asks us to give you a way to tell us not to sell your information. We don't sell it, but if you want to tell us anyway, write to privacy@lotta.health. We'll respond within 60 days, and if we need longer we can take another 30 and will tell you.

18. Our website, the waitlist and the beta

Visiting our website

Our legal reason is our legitimate interest in knowing how the site is used, and you can object (section 8).

Cookies

Our website doesn't use cookies, and it doesn't save anything else on your device.

We count visits with PostHog, in a mode that saves nothing on your device. When you open a page or press a button, PostHog receives the page's address, the page you came from, any campaign label in the link you followed, your type of browser and device, and your screen size. To tell visits apart within a day, PostHog turns your internet address and browser into a scrambled code using a key that changes every day, then removes your internet address. A visit on one day can't be linked to a visit on another, and we never learn who you are. We don't use any of this for advertising.

Like any website, our host (GitHub) and the services that deliver our fonts and code (Google Fonts, Cloudflare and jsDelivr) receive your internet address when your browser asks them for those files.

Your choices: you can object to the visit counting (section 8), or block it with your browser's privacy settings or a content blocker. The site works the same either way.

The waitlist

You give us your email address and your country, and we use them to keep your place and tell you when Lotta launches. If you also tick the box for news, we'll send you emails about Lotta. You can unsubscribe from any email.

Legal reason: your consent. We keep your details until 12 months after Lotta launches, or until you unsubscribe, whichever comes first.

Applying to the beta

The application asks your name, your country of residence, your email and where you are in your journey with GLP-1 medication. Because that answer can show you take, or are considering, a prescription medicine, we treat it as health information.

If you came to us through a link we shared, we also save that link's label (for example "instagram") with your application, so we know which channels bring people to Lotta.

Legal reason: your consent, and your explicit consent for the medication answer.

Your application is deleted three months after the beta ends. If you participate in the beta testing, we use your email to invite you, and the rest of the application is deleted once you've joined.

Your application is stored with Brevo, you can find their Terms of Service here and their Privacy Policy is here.

Testing the beta

Apple sends your invitation and installs the test version through TestFlight, under Apple's own terms. Apple passes us any crash reports and feedback you choose to send.

At the start and end of the beta we ask a few questions, such as how confident you feel about eating well and where you are with GLP-1 medication. Your answers are linked to a tester code, not your email address.

Legal reason: your explicit consent. We delete them six months after the beta ends.

1. What counts as consumer health data

Information that is linked to you and says something about your physical or mental health. In Lotta, that means what you record, and what the app selects for you based on it.

2. What we collect, where it comes from, and what we do with it

We also use any of this to answer a request you make under section 4, and when the law requires it.

We don't buy health data about you, and we don't import it from other apps.

How it's handled. Everything you record is stored on servers in Ireland (EU), run by our hosting provider, and protected with security measures suited to health information. A person at Lotta sees your health data only if you've reported a problem and said yes in the app, to answer a request you've made, or when the law requires it. Every access is logged. Lotta doesn't make automatic decisions about you that have legal or similarly significant effects.

3. Who we share it with

We don't share your consumer health data with any third party, and we don't sell it. Lotta has no affiliates.

A few companies process it for us, only on our instructions and under contracts that stop them using it for anything else:

• Hosting and database (Supabase, Ireland): everything you record
• Food photo recognition (pending): the meal photo only, with no name or account attached
• Brevo: your beta application, if you apply

Other companies that help us run Lotta, such as email, subscription management and notifications, handle your account details, which could show that you use Lotta. They're listed in section 5 of our Privacy Policy, and they work only on our instructions too.

When you search for a food or scan a barcode, what you searched for goes to Open Food Facts, a public food database in France, together with your device's internet address. It doesn't receive your name, your account, or anything you've recorded.

No third party collects information about your activity over time and across other websites or apps through Lotta. We don't use your information for advertising.

4. Your rights, and how to use them

• Confirm and access. Ask whether we collect, share or sell your consumer health data, and get a copy. We'll also list any third parties or affiliates we've shared it with, with a way to contact each one. Today that list is empty.
• Review and correct. You can change most of what you've recorded in the app. For anything else, ask us.
• Withdraw consent. Switch Eat or Weight off at any time in Settings → Privacy. We'll ask whether to keep or erase what you've already logged; if you choose erase, it's gone within 15 days. Medication and symptoms are the core of Lotta, so withdrawing consent for those means deleting your account.
• Delete. Do it in the app, or ask us by email. Your account becomes invisible straight away, and you can cancel the deletion for 30 days. After that it's permanent. Everything is deleted within 30 days of confirming the request is yours. We tell every company that processes it for us, and they delete their copies. Copies in backup systems are removed within six months at most.

How to ask. Email privacy@lotta.health from the address on your account. We'll never make you create an account to use these rights. It's free at least twice a year. We answer within 45 days. If we need longer, we can extend once by another 45 days, and we'll tell you why before the first 45 days are up.

If we say no. Reply to our decision with the word "appeal". We'll answer in writing within 45 days and explain why. If we still say no, we'll tell you how to complain to the Attorney General of Washington or Nevada.

Using any of these rights won't change how Lotta treats you. If you switch something off, the only effect is that the features built on it stop working.

5. Changes to this policy

Every version shows its effective date and version number at the top. Before we collect a new kind of health data, use it for a new purpose, or share it with anyone new, we'll tell you and ask for your consent first. For any material change, we'll email you and tell you in the app before it takes effect.

6. Contact

privacy@lotta.health. Filipa Figueiredo Filipe, one of our founders, leads data protection at Lotta.

1. Who you're contracting with

When these terms say "we" or "us", that's who we mean.

• A private limited company (sociedade por quotas) registered in Portugal
• Registered office: Lisbon, Portugal
• Registered at the Conservatória do Registo Comercial de Lisboa under registration and tax number (NIPC and NIF) 519547942
• Email: hello@lotta.health, or privacy@lotta.health for anything about your information

You download Lotta from Apple's App Store, but Apple isn't a party to this agreement. Section 7 explains what that means.

2. What Lotta is, and what it isn't

What Lotta does

• Records what you tell it: your medication and doses, your symptoms and how you're feeling, and, if you switch them on, your meals and your weight. Also anything you write in your own words.
• Shows that information back to you, in your own words and numbers.
• Selects which of our articles and content you see, based on what you've recorded.
• Turns what you've logged into questions you may want to bring to your clinician, including a PDF you can choose to share with them.

That's the whole list. Everything in Lotta is either something you put there, or something we wrote before it could appear.

What Lotta doesn't do

• It doesn't diagnose anything, or tell you what's wrong.
• It doesn't tell you what dose to take, when to take it, or whether to change or stop.
• It doesn't tell you whether a symptom is serious, normal, or nothing to worry about.
• It doesn't predict anything about your body, and it doesn't work out how much medicine is in it.
• It doesn't replace your doctor, nurse or pharmacist, and it isn't a second opinion.

Decisions about your treatment are between you and the people treating you. Lotta's job is to help you arrive at those conversations with your own information in front of you.

If it's an emergency

Don't use Lotta. Call your local emergency number, or go to your nearest emergency department. Nobody at Lotta watches what you log, and writing something in the app doesn't reach anyone who can help you.

3. Who can use Lotta

• You must be 18 or over. Lotta is built for adults, and we don't make a version for anyone younger.
• The account is yours alone. Don't share it, and don't set one up for someone else.
• Record your own information, not somebody else's.
• You'll need a compatible iPhone, and an internet connection for some things.

We ask for your date of birth when you sign up. If we find out an account belongs to someone under 18, we delete it and everything in it.

4. Agreeing to these terms

How you agree. Before you start, the app shows you a link to these terms beside the button and tells you that starting means agreeing to them. Nothing is agreed for you.

It's separate from your health-information consent. Agreeing to these terms and agreeing to us handling your health information are two different decisions, made on two different screens. One never stands in for the other.

What we keep. When you agree, we record which version of these terms you agreed to, and the date. You can see that date in the app under Settings. We keep every past version, so if you ask, we'll send you the exact wording you agreed to.

5. What we provide

Availability. Lotta will sometimes be unavailable: for maintenance, because something has broken, or because a service we rely on has. We'll keep that as short as we can, but we can't promise uninterrupted service.

Changes to features. We improve Lotta over time, which means adding, changing and sometimes removing things. If we're going to remove or significantly change something you pay for, we'll tell you first, and section 14 explains your options.

Reminders. Reminders you set are a convenience. They depend on your phone and its settings, and they can fail to arrive. Please don't rely on Lotta as the only way you remember a dose.

Your legal rights. Nothing in this section takes away rights your consumer law gives you. If Lotta isn't as described or doesn't work properly, you have remedies under that law, and this agreement doesn't reduce them.

6. Your subscription and free trial

• What you see before you start. The app shows you the price, in your currency, how often you'll be billed, how long your free trial lasts, and that you'll be charged when the trial ends unless you cancel.
• The free trial. You aren't charged during it, and we'll remind you before it ends. To avoid being charged, cancel at least 24 hours before the trial ends. If you don't, your paid subscription starts and Apple charges you. Apple decides who is eligible for a free trial, and it's one per person.
• Renewal. Apple renews your subscription automatically at the end of each billing period, the way any App Store subscription renews, until you cancel.
• Before each yearly renewal, we'll warn you. At least 30 days before your subscription renews, we'll email you with the renewal date, the last day to cancel, the price and how often you'll be charged, how long the renewal lasts, and a link to cancel.
• Cancelling. Cancel at any time, in the app (Settings, then Subscription) or by emailing hello@lotta.health. Renewal can only be switched off in Apple's subscription settings, which the app takes you to, so if you cancel by email and Apple still charges you, we'll refund that charge. You keep access until the end of the period you've paid for. Cancelling doesn't delete your account or anything you've logged.
• Price changes. A price increase never applies to a period you've already paid for. It only applies from your next renewal, after you've been told about it, and you can cancel before then at no cost.
• If your subscription ends, your account and everything you've logged stay, and you can ask us for a copy at any time.

7. Buying through the App Store

• Apple handles the money. Payments, renewals, cancellations and refunds go through Apple, under Apple's Media Services Terms.
• Deleting your Lotta account does not cancel your subscription. Cancel it separately, as section 6 explains.
• New phone? Sign in and use Restore purchase.
• Refunds are requested from Apple at reportaproblem.apple.com. Section 8 covers your right to change your mind.

What Apple requires us to tell you

• This agreement is between you and Lotta, Lda only, not Apple. We, not Apple, are responsible for Lotta and its content.
• The permission to use Lotta in section 10 covers Apple devices you own or control, as the Usage Rules in Apple's Media Services Terms allow.
• We, not Apple, are responsible for maintaining and supporting Lotta. Apple has no obligation to provide any maintenance or support for it.
• If Lotta fails to conform to any warranty that applies to it, you can tell Apple, and Apple will refund the price you paid for it. To the extent the law allows, Apple has no other warranty obligation for Lotta. Any other claim, loss or cost caused by a failure to conform is ours to deal with, under section 13 and your consumer law.
• We, not Apple, are responsible for dealing with any claim about Lotta or your use of it, including product liability claims, claims that Lotta doesn't meet a legal or regulatory requirement, and claims under consumer protection, privacy or similar laws.
• If anyone claims that Lotta or your use of it infringes their intellectual property, we, not Apple, are responsible for investigating, defending, settling and discharging that claim.
• You must comply with any third-party terms that apply when you use Lotta, such as your mobile network's.
• Our name, address and contact details are in section 1.

8. Changing your mind

The 14 days. You can change your mind within 14 days of starting your subscription, including any free trial, without giving a reason. If you've been charged in that time, you get a full refund.

How to do it.

1. In the app, go to Settings, then Subscription, and tap Withdraw from contract here. Or email hello@lotta.health, using the form at the end of these terms if you like. Any clear statement is enough, and we'll confirm straight away that we've received it.
2. If you've been charged, request your refund from Apple at reportaproblem.apple.com.

If Apple doesn't refund you, tell us and we'll refund you ourselves, within 14 days of hearing from you.

After the 14 days. Cancelling stops future renewals, and you keep access until the end of the period you've paid for. Anything else about refunds is handled by Apple under its terms, and your consumer law rights apply as well.

If you're in Brazil, your 7-day right to change your mind (direito de arrependimento) sits inside these 14 days, and works the same way.

9. What you put into Lotta

Your information is yours. Your logs, your photos, your notes and everything else you put into Lotta belong to you. You give us permission to store it, show it back to you, and use it as the Privacy Policy describes. That's the whole permission. We don't publish it, and we don't share it with other users.

We don't use your information to train AI models.

It's only as accurate as your entries. What Lotta shows you depends on what you record, so please record things as they are.

Meal photos. When you photograph a meal, Lotta reads the photo and shows you what it thinks is on the plate. That's an estimate: close, not exact. Nothing is logged until you tap to log it, and you can change anything first. It isn't a nutritional assessment and it isn't advice.

Notes you type. They're stored, shown back to you, and included in any copy of your data you ask for. The app never reads them, and nothing you type there changes what Lotta shows you.

The PDF for your clinician. When you export it, you choose where it goes, using your phone's own sharing options.

10. What we put into Lotta

Your permission. We give you a personal, non-exclusive, non-transferable permission to use Lotta on your own devices, for yourself and not for any business, for as long as this agreement lasts. Please don't copy our content out, republish it, or use it to build something else.

Our articles are general information written for people taking GLP-1 medicines. They aren't written about you, and they aren't medical advice.

Food information. When you search for a food or scan a barcode, the results come from Open Food Facts (openfoodfacts.org). Its database is available under the Open Database License, and its product images under Creative Commons Attribution ShareAlike. Open Food Facts doesn't guarantee its data, and food information and nutrition numbers, including those read from a photo, can be incomplete or wrong.

11. Rules of use

Please don't:

• Sell, rent or share your account, or let someone else use it.
• Record another person's health information in your account.
• Try to reach anyone else's information, or get around the separation between accounts.
• Copy, scrape or bulk-extract our content or the app.
• Upload anything unlawful.
• Take the app apart to work out how it's built, except where the law gives you a right to do that which can't be taken away. Where it does, that right stands and this line doesn't touch it.

If you think something in Lotta is unlawful, write to hello@lotta.health and tell us what it is and where you found it. We'll look at it, decide what to do, and tell you what we did and why.

12. Ending it

If you want to stop

You can delete your account at any time, in Settings.

• Straight away, everything becomes invisible. Nothing is shown and nothing syncs.
• For 30 days, you can change your mind. Sign back in and choose Restore my account, and everything comes back as it was.
• After 30 days it's gone, permanently. We can't get it back.

During those 30 days, anything you want to ask us about your information goes by email, because the app won't show it to you.

Deleting your account does not cancel your subscription or a free trial. Cancel it separately, as section 6 explains, or you'll keep being charged. A free trial you don't cancel turns into a paid subscription.

If you don't agree to us handling your health information when you first set up Lotta, Lotta can't start. Your account is then deleted after 30 days, and if you started a free trial, cancel it as section 6 explains.

If we have to stop

We can suspend or close your account if you seriously or repeatedly break these terms, if the law requires us to, or if we stop offering Lotta altogether.

Unless the law or the seriousness of what happened prevents it, we'll tell you first, explain why, and give you a chance to put it right. If we stop offering Lotta altogether, we'll give you at least 30 days' notice, and time to ask for a copy of your information.

If we stop offering Lotta, or close your account for a reason other than your breaking these terms, we'll refund the time you've paid for and won't get.

13. When things go wrong

Things we never limit

We don't exclude or limit our responsibility for death, personal injury or harm to your health that we're legally responsible for; for fraud; for deliberate wrongdoing or gross negligence; or for anything else the law doesn't allow us to limit.

What we are responsible for

If we fail to comply with these terms, or fail to provide Lotta with reasonable care and skill, we are responsible for loss or damage you suffer that is a foreseeable result of our breach or failure. Loss or damage is foreseeable if it was an obvious consequence of our breach or failure, or if you and we both contemplated it when you agreed to these terms.

What we are not responsible for

• Things genuinely outside our control, including failures of the networks, devices, app stores and services Lotta depends on.
• Your device, its settings, and whether your reminders reach you through it.
• Decisions about your health or treatment, made by you or by a healthcare professional. Lotta shows you your own information and our general content. It doesn't advise on treatment, and it isn't part of that conversation.
• Loss that wasn't foreseeable, and business losses. Lotta is for personal use.

Your legal rights

You may have rights under the consumer law of the country you live in that go further than this section.

14. Changes to these terms

When we can change them. To reflect a change in the law, in how Lotta works, or in the services we depend on; for safety or security; or to make the wording clearer. We won't use this to change the deal for reasons that have nothing to do with any of those.

How you'll know. For any change that matters to you, we'll email you and tell you in the app at least 30 days before it takes effect, and say what's changing. A change the law requires sooner, or one that only fixes wording, can take effect sooner. For some changes, we'll ask you to agree in the app before you carry on. If you're in Brazil, any change that affects your rights applies to you only once you've agreed to it.

You can say no. If a change affects you negatively in more than a minor way, you can end this agreement at no cost, at any time up to 30 days after we tell you about it or after it takes effect, whichever is later. A change to these terms never costs you anything extra.

Changes aren't retroactive. A new version applies from the day it takes effect. It doesn't reach back over what already happened.

15. Complaints

Come to us first. Tell us what's wrong. We'll reply within five days, and if we need longer to put it right, we'll tell you when you'll hear from us.

If you live in Portugal and we can't resolve it between us, you can take it to a consumer arbitration centre, and for disputes of up to €5,000 we have to take part. Where no regional centre covers where you live, it's CNIACC (cniacc.pt). In Lisbon, it's the Centro de Arbitragem de Conflitos de Consumo de Lisboa (centroarbitragemlisboa.pt). Every centre is listed at consumidor.gov.pt.

A complaint about how we handle your information has its own route, including your right to go to a data protection authority. The Privacy Policy explains it.

16. Which law applies, and where you can go to court

• These terms are governed by Portuguese law.
• If you're a consumer, you keep the protection of the mandatory laws of the country where you live.
• If you live in the United States, the consumer protection laws of your state continue to apply to you, and you can bring a claim in the courts where you live, including small claims court.

17. Contact

Anything about Lotta or these terms: hello@lotta.health

Anything about your information: privacy@lotta.health

Our company details are in section 1.

Annex A. While Lotta is in beta

This annex applies if you're testing a beta version of Lotta. It sits on top of the terms above. Where the two disagree, this annex wins, but only while you're in the beta. It stops applying when Lotta is released on the App Store.

The beta is free. Any purchase you make in the beta is a test, and you won't be charged for it. Test subscriptions renew on a fast test cycle and don't carry over to the App Store version. Sections 6, 7 and 8 don't apply to you while you're testing. When Lotta is released, you'll only ever pay if you choose to start a subscription yourself.

It's unfinished, and it will show. Things will be missing, things will break, and features will change or disappear between versions. Something you record could be lost if a version goes badly wrong. We'd rather tell you that plainly than have you find out.

That's a warning, not a disclaimer. Being in the beta doesn't reduce what we're responsible for under section 13, or your rights under your own country's consumer law. We look after your information exactly as the Privacy Policy describes.

Getting the beta. Apple sends your invitation and installs the test version through TestFlight, under Apple's own terms.

Tell us when something breaks. Use TestFlight's feedback option, or write to hello@lotta.health.

The beta can end. We can end your beta access, and the beta itself can end, at any time. Your account and your information aren't deleted because of it. The Privacy Policy explains how you can delete them whenever you want.

Annex B. Form for changing your mind

You don't have to use this form. Any clear statement to us works. If you'd like to use it, copy it into an email to hello@lotta.health.

To: Lotta, Lda, Lisbon, Portugal · hello@lotta.health
I hereby give notice that I withdraw from (cancel) my contract for the provision of the following service: Lotta subscription
Name:
Email address on my Lotta account:
Date: