Everything you log stays on your phone. There is no account, no server, and nothing to leak — because there is nowhere for it to leak from.
The short version. Your doses, weights, symptoms and notes are written to a database on your device and never leave it. We cannot read them. Neither can anyone else.
All of it lives in a local database inside the app's private storage, which iOS encrypts at rest. It is included in your device backup if you have one, and it is deleted with the app.
Anonymous usage counts, and nothing else. We record that a screen was opened or that a dose was logged, so we can tell which parts of the app are working. We never send what you ate, what you weigh, which medication you are on, what your doses are, or how you felt.
These counts are tied to a random identifier generated on your device. It is not your name, your email, your phone number or your Apple ID, and it cannot be traced back to you. Analytics are processed by PostHog.
Subscriptions are handled by Apple. We use RevenueCat to check whether a subscription is active. Neither receives anything you logged — only the purchase itself.
Settings → Delete all data removes every record immediately and permanently. Deleting the app does the same. Since nothing was ever uploaded, there is no copy anywhere else to request.
This app is for adults who have been prescribed a GLP-1 medication. It is not directed at children and we do not knowingly collect anything from them.
If this policy changes in a way that matters, the date at the top changes and the new version appears here before it takes effect.