Privacy Policy.
GLP-1 & Peptide Tracker for iOS — last updated 31 August 2026.
Short version: your health data never leaves your device, and we never see it.
There is no account to create and no server of ours holds your health data. We cannot read your injections, your weight, or your symptoms, not because we promise not to, but because they are never sent to us. We do use two services to run the business side of the app, described below: one to check whether your subscription is active, and one to see which screens people use and where the onboarding fails, never what you typed into them.
What the app stores, and where
Everything you enter — injections, doses, injection sites, vials, schedules, weight, measurements, side effects and notes — is stored on your device, in the app's private storage.
If you are signed into iCloud, this data also syncs to your own private iCloud account, so it moves with you between your devices. That storage belongs to you and is governed by Apple's terms. We have no access to it and no way to request it.
Apple Health
The app can read and write a small, specific set of Apple Health data, and only if you explicitly grant permission:
- Written by the app: body weight you enter.
- Read by the app: body weight, dietary protein and water, so figures you already track elsewhere are not typed twice.
This exchange happens entirely on your device, between the app and Apple Health. Nothing is transmitted to us. You can revoke access at any time in the Health app, under Sharing, and the rest of the app keeps working.
Purchases
Subscriptions are processed by Apple. We never see or handle your payment details. From Apple we receive only whether a subscription is currently active, which is what unlocks the paid features.
To check that status across your devices without building our own server, we use RevenueCat, a service used by many subscription apps to verify Apple purchases. RevenueCat receives your purchase history (which product you bought, whether it is active) from Apple, but never your name, your email, or anything you enter in the app. Your account with RevenueCat is anonymous: nothing ties it to your identity.
Product analytics
We use TelemetryDeck, a privacy-focused analytics provider, to count anonymous events, such as a dose being logged, an onboarding screen being reached, or the paywall being shown, so we can see where people get stuck and fix it. TelemetryDeck never receives the product name you typed, a dose amount, your weight, a symptom, or any other text you write in the app: only which screen or which closed-ended choice, never the content.
TelemetryDeck assigns your device a rotating, double-hashed identifier that cannot be traced back to you. We cannot ask TelemetryDeck who you are, because neither we nor they have that information. Learn more at telemetrydeck.com/privacy.
Advertising measurement
When the app is first opened, it requests an attribution token from Apple's AdServices framework. This token lets us know whether an install came from one of our Apple Search Ads campaigns. It contains no personal information and does not identify you.
The token is sent once to Apple, and to Apple only, so the app can learn which of our campaigns brought you here. Apple returns a campaign number, nothing about you. We use it to show you the part of the app that matches what you were searching for.
This is the only network request tied to advertising measurement. The app also talks to RevenueCat and TelemetryDeck, described above; neither receives your health data. The attribution token is not used for advertising profiles, is not shared with advertising networks, and is not combined with any of your health data. Apple's AdServices is not covered by App Tracking Transparency, which is why the app never asks to track you across other companies' apps and websites — because it does not.
Notifications
Dose reminders are scheduled locally by your device. They are not push notifications, no server sends them, and their content never leaves your phone.
What we do not do
- No advertising SDKs and no cross-app trackers.
- No analytics service ever receives your injections, doses, weight, symptoms, or anything you typed.
- No selling, renting or sharing of your data — there is nothing to sell.
- No AI processing of your health data, on device or elsewhere.
- No account, no email address required, no login.
Your data, your control
- Export: Settings → Export produces plain CSV files of your injections, measurements and side effects.
- Delete: deleting the app removes its data from your device. To remove the synced copy, use Settings → your name → iCloud → Manage Account Storage on your device.
- Access: because we hold nothing, there is nothing for us to send you. Your data is already entirely in your hands.
If you are covered by the GDPR, the UK GDPR or the CCPA, the rights those laws grant you over data held by a company apply to data a company holds. We hold none.
Children
The app is not directed at children and is not intended for anyone under 13.
Medical disclaimer
GLP-1 & Peptide Tracker is a personal journal. It is not a medical device, it does not provide medical advice, and it does not make predictions about your health. Always follow the instructions of your prescriber.
Changes
If this policy changes in a way that affects how your data is handled, we will update this page and the date at the top. Material changes will also be noted in the app's release notes.
Contact
Questions about this policy: privacy@abakira.com
Abakira LLC · Support