A couple of users on the genzedong matrix chat expressed concern over Lemmygrad’s lack of privacy policy. Lemmy already supports setting legal information in the site admin settings (although it’s hard to find the legal page if you don’t already know about it since there are no links to there).
It could also be worth letting admins on other instances know about this feature, as I’m sure many of them would want to add privacy policies to their instances as well.
I know out of the box Lemmy doesn’t provide any real analytics like Google Analytics or anything similar.
Other then that, only your account actions are logged, which is necessary for the site/service to function.
It should be noted that the use of any native apps that are not FOSS in origin could offer your data up too the app vendor. Jerboa requires no permissions to install, and is maintained by one of the Lemmy devs. From what I can tell it also doesn’t collect anything other than your account actions.
But that is separate from Lemmygrad.