Privacy policy

Last updated 6 October 2026

Layaqa is a body-measurement tracker. You log measurements, and optionally progress photos, so you can see how your body changes over time. This page explains what we collect, why, who helps us run the service, and how to get your data deleted. Questions go to [email protected].

What we collect

• Account details. Your name, email address and a password, stored only as a one-way hash. If you sign in with Google, we receive your name, email address and Google account ID from Google. We don't get your Google password or access to anything else in your Google account.
• Profile answers. What you tell us during setup: your goal, preferred units, biological sex, age or birth date, which measurements you track, how often you check in, and whether you want photo reminders.
• Measurements. The check-ins you log: bodyweight, height, body-fat percentage, circumferences such as waist, chest or arms, and any custom fields you add, each with its date.
• Progress photos. Only if you upload them. They're private to your account and are served only to you while you're signed in.
• Friends. If you add friends, we store who you're connected to. Friends see your name, check-in streak and the direction of your trends (up, down or flat) as a percentage. They never see your measurements or photos.
• Usage and device data. Basic information your browser sends, such as IP address, browser type and pages visited, through our server logs, Google Analytics and Google reCAPTCHA.

How we use it

• To run the app: show your dashboard, trends, history and photos, and work out figures such as waist-to-hip ratio.
• To keep your account secure, verify your email address, reset forgotten passwords and stop automated sign-ups.
• To send emails you need, such as verification and password-reset messages.
• To understand how the app is used and improve it, using aggregate analytics.

We don't sell your data, and we don't use your measurements or photos for advertising.

Who helps us run Layaqa

We share data only with the services we need to operate. Each of them processes it on our behalf:

• Laravel Cloud hosts the app, its database and stored photos.
• Zoho ZeptoMail delivers our emails.
• Google provides Sign in with Google (only if you use it), Google Analytics (usage statistics) and reCAPTCHA (bot protection on sign-up and password reset).

We may also disclose information if the law requires it.

Google user data

When you choose "Continue with Google", we request only your basic profile (name), email address and Google account ID. We use them solely to create or sign in to your Layaqa account. We don't transfer this data to others except as described above, and we don't use it for advertising. Layaqa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use a session cookie to keep you signed in, a security cookie to protect forms, and a "remember me" cookie if you ask for one. Google Analytics and reCAPTCHA set their own cookies. You can block cookies in your browser, but signing in needs the session cookie.

Keeping and deleting your data

We keep your data for as long as your account exists. You can delete individual check-ins and photos at any time in the app. To delete your whole account and everything in it, go to Settings and choose Delete account. We'll email you a link to confirm. Once you confirm, your account is deleted after 7 days, and you can log in and cancel any time before then. After that, your account, measurements, progress photos and friends list are permanently deleted. If you can't sign in, email [email protected] from the address on your account and we'll delete it within 30 days. You can also ask us for a copy of your data, or to correct it, by emailing the same address.

Security

Connections to Layaqa are encrypted (HTTPS), passwords are hashed, and photos are only served to their owner. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

Children

Layaqa isn't meant for children under 16, and we don't knowingly collect their data. If you think a child has signed up, contact us and we'll delete the account.

Changes

If we change this policy, we'll update the date above. If the changes are significant, we'll tell you in the app or by email.

Layaqa is a measurement-tracking tool and doesn't provide medical advice. Questions about these pages go to [email protected].