How GLPMGR handles your data

1 Overview

GLPMGR is a medication, weight, and symptom tracker built for people on GLP-1 treatment plans. It is designed around a simple idea: information as sensitive as your injection log and body photos should stay under your control, not ours. GLPMGR is provided by iSafeNet.

This policy explains exactly what GLPMGR records, where it lives, and what — if anything — ever leaves your device. There is no account to create and no GLPMGR server to send data to, so most of this policy is a description of on-device behavior rather than a list of things we do with your information.

2 Data you enter

Using GLPMGR, you may choose to record:

All of it is optional — GLPMGR only stores what you choose to type, select, or photograph inside the app.

3 Health app (HealthKit)

GLPMGR can use Apple's Health app in two optional ways, both off by default and both only if you grant permission: it can write the weight you log to Health, and it can read today's protein, water and dietary energy (calorie) totals from whichever food-tracking app you already use, to show on the Today screen. These exchanges happen through Apple's HealthKit framework directly on your device.

• GLPMGR only requests the specific HealthKit data types it needs — it writes body mass, and reads protein, water and dietary energy totals — never your full health record. It does not read your weight history from Health, and it never writes nutrition data.
• You can grant or revoke this access at any time in Settings → Privacy & Security → Health → GLPMGR.
• Health data GLPMGR reads is used solely to display and calculate information inside the app. It is never transmitted to us or to any third party.

4 Photos

Progress photos you add are selected through Apple's native photo picker, which does not require GLPMGR to have general access to your photo library — only the specific images you pick. Selected photos are copied into GLPMGR's own app storage and shown to you inside the Journey and Photos views.

5 Where your data lives

Everything you record is stored locally on your device in a private, sandboxed app database, shared only between the GLPMGR app, its Today/Next Dose widgets and Live Activity, and — if you use the GLPMGR Apple Watch app — your paired Apple Watch. The Watch receives your next dose, medication and recent weights from your iPhone, and can send a weight you log on the Watch back to it; these transfers go directly between your own devices using Apple's WatchConnectivity, never through a server. GLPMGR does not operate any backend servers, and nothing you enter is uploaded anywhere by default.

6 iCloud sync (optional, off by default)

GLPMGR offers an optional setting to sync your data across your own devices using your personal iCloud account. This feature:

• Is off unless you turn it on in Settings.
• Stores data only in your private iCloud database — never a shared or public one, and never anywhere GLPMGR's developer can access it.
• Is managed end-to-end by Apple's iCloud infrastructure, subject to Apple's own privacy practices.
• Can be turned off at any time, which stops future syncing (existing iCloud data is managed through your Apple ID iCloud storage settings).

7 Notifications

Dose reminders, low-supply alerts and any other reminders you turn on (such as a weekly weigh-in reminder) are scheduled entirely on-device using Apple's local notification system. No reminder data is sent to a server to trigger these notifications — your phone handles the whole thing offline.

8 Subscriptions & payment

GLPMGR is sold as an auto-renewable subscription (monthly or yearly, with a 7-day free trial on the monthly plan for eligible new subscribers) through Apple's App Store using StoreKit. There is no free tier. All payment details — card numbers, billing address, and purchase history — are collected and processed by Apple, not by GLPMGR. The app checks with Apple's StoreKit, on your device, whether an active subscription exists, so it can unlock; we don't receive your payment details or purchase history.

9 Exporting your data

GLPMGR lets you export your entries as a JSON or CSV file, or as a PDF report, at any time from Settings. This export is generated entirely on your device and handed to iOS's native file-saving screen — no network request is made and no copy is sent to us. Where you send that file afterward (email, Files, AirDrop, a doctor's portal) is entirely up to you. You can also import a previously exported file; it is read entirely on your device.

10 No analytics, ads, or tracking

GLPMGR contains no analytics SDKs, no advertising networks, and no third-party trackers of any kind. We do not know how often you open the app, which screens you visit, or anything else about your usage. There is nothing to opt out of, because nothing is being collected. The app itself makes no network requests to us. The links in the app to the Terms of Use and this Privacy Policy open web pages hosted on GitHub Pages in your browser; like any website visit, that request is visible to the web host, and it is separate from anything you record in GLPMGR.

11 Sharing your data

We don't share, sell, or rent your data to anyone — there is no data on our servers to share in the first place. The only parties who ever touch your information are:

12 Retention & deletion

You control retention directly: delete any entry or photo inside the app at any time. Deleting the GLPMGR app removes its entire local database from your device. If iCloud sync was enabled, you can also remove synced data via Settings → [your name] → iCloud → Manage Storage on your device.

13 Children's privacy

GLPMGR is intended for adults managing their own GLP-1 treatment and is not directed at children. We do not knowingly collect information from children under 13 (or the relevant minimum age in your region). Since GLPMGR keeps data on-device with no account system, we have no practical way to identify a user's age — if you believe a child has used GLPMGR to store personal information, the data can be removed by deleting the app.

14 Security

Your data benefits from iOS's standard app sandboxing and device-level encryption. If you enable iCloud sync, data in transit and at rest is protected by Apple's iCloud security model. Because there is no GLPMGR server or account, there is no central database of users' data that could be breached on our end.

15 Changes to this policy

If GLPMGR's data practices change — for example, if a future version introduces an optional server-backed feature — this policy will be updated and the "Effective" date above will change accordingly. Material changes will be noted in the app's release notes.

16 Contact

Questions about this policy or your data can be sent to iSafeNet at info@isafenet.app.