The short version
- Your health entries stay on your phone. Weights, doses, side effects, check-ins and photos are stored on your device and are not uploaded to our servers.
- We never receive the numbers. Our analytics record that you logged a weight — never what it was.
- Apple Health and Health Connect are optionaland only ever used with the permission you grant.
- One exception, on iPhone:if you turn on daily Lock Screen reminders, thedatesof your upcoming doses are stored on our server so the reminder can be sent. Never the drug, the dose or your weight.
- We do not sell your personal information.
1. Health information you enter
The app is a personal log. Everything you record in it is stored in the app’s own storage on your device:
- Weight, goal weight and height
- The medication or compound you are taking, its dose, and the dates and times you log a dose
- How you take each one — by injection, by mouth, as a nasal spray, or on the skin
- Vials you record: how much compound is in them, the water you added, how much is left, and when you mixed it
- The injection site you choose for a dose, where you record one
- Your dose schedule and titration plan
- Side effects and their severity
- Daily check-ins, mood, energy, sleep, and water intake
- Progress photos
This information is not transmitted to Pretty Boa Media. Deleting the app removes it from your device. Progress photos in particular never leave your phone and are not backed up by us.If your device backs itself up (iCloud Backup or Google’s Android backup), the app’s data may be included in that backup. That is a service of your device manufacturer, governed by their privacy policy, not ours.
2. Apple Health and Health Connect
The app can connect to Apple Health (iPhone) or Health Connect (Android). These connections are entirely optional. If you decline, every feature except the automatic prefill still works — you simply type the values yourself.
| We read | We write | |
|---|---|---|
| Apple Health (iOS) | Weight, height, date of birth, biological sex, steps, workouts, calories, protein, fiber | Weight, water |
| Health Connect (Android) | Weight, height, steps, exercise sessions, calories, protein, fiber | Weight, hydration |
How we read. Height, date of birth and biological sex are read once, when you grant permission, to prefill the setup questions. Everything else is read for today only, each time you open the app or return to it: today’s weigh-in (only on a day you haven’t logged one yourself), today’s step total, the number of exercise sessions you’ve recorded today, and today’s calorie, protein and fiber totals — so your Today screen fills in without retyping. A weigh-in brought in this way is saved to your log, marked as coming from Health. Steps, exercise and nutrition are shown on screen and are not stored by the app. We never read history beyond today, nothing runs in the background, and none of these values are ever sent to our servers.
Writing happens only at the moment you log something in the app. When you record a weigh-in, that weight is saved to Apple Health or Health Connect; when you log water, that is saved too. Nothing is written at any other time.
Data read from Apple Health or Health Connect is used on your device only. It is not sent to us. You can withdraw these permissions at any time in iOS Settings or the Health Connect app, and the app will continue to work.
3. Daily reminders on iPhone
This is the one place health-related information leaves your device, and we want to be precise about it.If you enable the daily Lock Screen reminder on iPhone, we store the following on our server (Google Firebase) so that the reminder can be delivered at the right local time each morning:
- An anonymous push token for your device
- Your time zone
- Thedatesof your upcoming doses for roughly the next 30 days
- The short reminder text to display
What we do not store there: your name, your email, any account, your weight, your height, your medication’s name, your dose amount, your side effects, or anything you type. The record is a routing token, a time zone, some dates and a few short phrases.Turning the reminder off in the app deletes the record. This feature does not currently operate on Android.
4. Analytics, and why we never see your numbers
We use analytics to understand how the app is used — which screens people reach, where they get stuck, whether a feature is used at all. This is deliberately built so that health values are never included.Concretely: when you log a weight, our analytics receive an event meaning “a weight entry was created,” and whether it was typed or imported from Apple Health. They do not receive the weight. The same is true for doses, side effects, water and check-ins. Medication names, dose amounts, weights, heights and dates of birth are excluded by design, and that exclusion is enforced by automated tests in our codebase.
Session recordings
With your consent, we may record anonymised replays of app sessions to diagnose usability problems. These replays are masked: all text and all images are obscured before the recording leaves your device, so a replay shows the shape of a screen and where you tapped, not what it said or what you entered. Photographs are masked in the same way. You can decline this, and change your mind later, in the app’s privacy settings.
Approximate location
Our analytics provider works out an approximate location — country and city — from the internet address your requests come from, and keeps it with your analytics record. It is used only to understand where the app is used. The app does not ask for location permission and does not read your device’s location. You can turn analytics off in the app’s privacy settings, and nothing further is collected.
5. Subscriptions and payments
Subscriptions are sold through the Apple App Store and Google Play. We never see or handle your payment details — Apple and Google process the transaction and tell us only whether a subscription is active.We use RevenueCat to manage subscription status. RevenueCat receives an anonymous identifier for your installation, your purchase and renewal history, and your device’s country and platform. It does not receive any health information.
6. Advertising and attribution
If you installed the app after seeing an advertisement, we measure which campaign brought you, so we know where to advertise. This uses AppsFlyer, Meta and the advertising frameworks provided by Apple and Google.What these receive is installation and in-app event information — that the app was installed, opened, or that a subscription started — along with device and advertising identifiers. They never receive health information of any kind.On iPhone, we ask your permission before using the advertising identifier, through Apple’s App Tracking Transparency prompt. If you decline, attribution runs in a privacy-preserving mode that does not identify your device, and the app is otherwise unaffected.
7. Service providers we use
ProviderPurposeHealth data?Google FirebaseAnalytics, crash reporting, push notifications, remote configuration, and the reminder service in section 3Dose dates only, per section 3PostHogProduct analytics and masked session replayNoRevenueCatSubscription managementNoAppsFlyerAdvertising attributionNoMetaAdvertising attribution and measurementNoApple & GooglePayments, app distribution, campaign measurementNoThese providers process data on our behalf under agreements requiring them to protect it. Some are located outside your country; where data is transferred internationally we rely on safeguards permitted by applicable law.
8. This app is not medical advice
GLP1 Tracker – Glo and Peptide Plus are personal tracking tools. They are not medical devices, they do not diagnose or treat any condition, and they do not provide medical advice.Where the app displays comparisons against published clinical trial results, those are population averages shown for context only. They are not a prediction about you. Estimated medication levels shown in the app are modelled from published pharmacokinetic data and the doses you record — they are an illustration, not a measurement of your body.Always follow the instructions of your prescriber and never change a dose based on this app. If you are unwell, contact a healthcare professional.
9. Children
The app is not directed at children under 13, and we do not knowingly collect information from them. Peptide Plus is intended for adults only. If you believe a child has provided us information, contact us and we will delete it.
10. Your choices and rights
- Health connections:grant or revoke Apple Health / Health Connect access at any time in your device settings.
- Notifications:turn reminders off in the app or in device settings. Turning off the daily reminder deletes the record described in section 3.
- Analytics and session replay:opt out in the app’s privacy settings.
- Tracking:on iPhone, change your choice in Settings › Privacy & Security › Tracking.
- Your data:because your health entries live on your device, deleting the app deletes them. To request access to, correction of, or deletion of anything we hold, contact us at the address below.
If you are in the EEA or UK, you have rights under the GDPR including access, rectification, erasure, restriction, portability and objection, and the right to complain to your local supervisory authority. Where we process health information, we do so on the basis of your explicit consent, which you may withdraw at any time.
11. Retention
Health entries remain on your device until you delete them or remove the app. Reminder records (section 3) are kept only while the reminder is enabled. Analytics and attribution data are retained for as long as needed for the purposes described, and then deleted or anonymised.
12. Changes
If we change this policy materially we will update the effective date above and, where the change concerns health information, tell you in the app.