GLP Companion Privacy Policy

Effective date: September 11th, 2026
Contact: karl@kharles.com

GLP Companion is an iOS app that lets you log GLP‑1 medication doses, effects you notice, body measurements, and progress photos, and shows estimates based on published population half‑lives. It is a personal logging tool. It is not a medical device and does not provide medical advice.

This policy explains what the app stores, where it stores it, and what it never does.

Short version: your data stays on your iPhone, or in your own iCloud account if you turn on sync. The developer has no server, no account system, and no access to your data. Nothing is sold, shared, or used for advertising.

1. Information the app stores

Everything below is entered by you, or imported from Apple Health with your permission. The app stores nothing you did not choose to put in it.

The app does not collect your name, email address, account credentials, location, contacts, advertising identifiers, or device identifiers. There is no sign‑up and no login.

2. Where your data is stored

On your device

By default, all data is stored only on your iPhone, inside the app's private storage. Progress photos are stored with iOS's strongest file protection, which means they are unreadable while your phone is locked. Photos are never written to your Photos library.

Your data is included in your normal iPhone backups (iCloud Backup or an encrypted computer backup) according to your own device settings.

In your iCloud account (optional)

If you turn on Sync with iCloud in Settings, the app syncs your data to your private iCloud database using Apple's CloudKit so it appears on your other devices signed into the same Apple Account. Progress photos sync only if you separately turn on Sync photos. Both are off by default.

Your synced data is end‑to‑end encrypted. It is encrypted on your device with keys tied to your Apple Account and iCloud Keychain. The developer cannot read it, and Apple states it cannot read end‑to‑end encrypted CloudKit fields either. A consequence of this design: if you lose access to all your devices and your iCloud Keychain recovery, synced data cannot be recovered by anyone.

Sync uses your iCloud storage quota. You can turn sync off at any time; your data remains on the device.

Nowhere else

There is no developer server. The developer never receives, stores, or has any means to access your data.

3. Apple Health

If you turn on Sync from Apple Health, the app asks for read‑only permission to the following Health data types: body mass (weight), body fat percentage, waist circumference, and lean body mass. Imported values are stored in the app like any other measurement and are marked as coming from Health.

You can revoke Health access at any time in the iPhone Settings app under Privacy & Security → Health, or in the Health app under Sharing → Apps.

4. Progress photos

Photos you take in the app or import are copied into the app's private storage. On import, the app removes all metadata from the image file, including any location data, before saving it. Only the photo's original date is read, so the photo is filed on the day it was taken.

Access to photos inside the app is protected by Face ID, Touch ID, or your device passcode by default. When you leave the app while a photo is on screen, the app covers the screen so your photos do not appear in the app switcher.

Photos are not synced to iCloud unless you turn on Sync photos. When synced, they are end‑to‑end encrypted.

5. Notifications

Dose reminders are local notifications scheduled on your device. No data leaves your phone to deliver them. By default, reminder text does not mention your medication; you can choose to show details on the lock screen.

6. What the app does not do

The app makes no network connections other than Apple's CloudKit service, and only when you have turned sync on.

7. Third parties

The only third party involved is Apple, which operates iCloud, CloudKit, and Apple Health, and does so under Apple's Privacy Policy. If you choose to share diagnostics with app developers in your iPhone's Analytics settings, Apple may provide the developer with anonymized crash reports according to Apple's own policies; these do not include your app data.

8. Data retention and deletion

Your data is kept until you delete it.

Because the developer holds no data, there is nothing for the developer to delete on your behalf.

9. Children

GLP Companion is not intended for anyone under 18 and does not knowingly store information from children.

10. Security

The app relies on the security of iOS: sandboxed storage, file protection, device passcode and biometric authentication, and CloudKit end‑to‑end encryption. Please keep your device updated and protected with a passcode.

11. Changes to this policy

If this policy changes, the new version will be posted at this address with an updated effective date. Material changes will also be noted in the app's release notes.

12. Contact

Questions about privacy: [YOUR EMAIL]


GLP Companion displays estimates derived from published population pharmacokinetic parameters. It does not diagnose, treat, or recommend dosing, and it is not a substitute for advice from your prescriber or pharmacist.