Privacy

Last updated October 12, 2026. This page describes how the app handles information, in plain language. It is not legal advice.

What the app stores and where

Your log (weights, doses, calories, glucose, blood pressure, body measures, symptoms, notes and settings) is saved in your browser's local storage on the device you use. Nothing is sent anywhere unless you sign in to sync or create a doctor link.

If you sign in (invite only)

Your entries and a few settings (goal, start weight, height, units, dose day, chart choices) are copied to a private account on Amazon Web Services (Cognito for sign-in, a database for the log) so your devices stay in step. Each account can only read and change its own data. Requests are not logged with their contents.

Progress photos stay on your iPhone unless you switch on "Back up progress photos" in the app's settings. If you do, resized copies are stored in the same private account, can be viewed only by you (in the app and on the web), and are included in a doctor link only if you tick "Include my latest face photo" when you create it, in which case that one face photo is shown small at the top of the shared page. You can remove them from your account at any time, and "Clear all data" on the web removes them too.

Doctor links

A doctor link shows a read-only copy of your dashboard to anyone who holds the link. The secret is in the part of the address after the # sign, so it is not sent to a server or written to logs when the link is opened. Notes (comments and food notes) are included only if you tick that box. You can revoke a link at any time, and links stop working if your access is removed.

What we do not do

• No advertising, no analytics or tracking scripts, no third-party fonts or widgets.
• No selling or sharing of your data.
• The app only connects to its own sync service and the sign-in service.

Your choices

• Export your log as CSV at any time.
• "Clear all data" empties the log on the device and, when signed in, in your cloud account.
• Sign out keeps the data on the device; clearing your browser's site data removes it.
• To close an account entirely, use the contact link above.

Not a medical record

This is a personal tracking tool. It is not a health care provider and is not a covered entity or business associate under HIPAA, so it does not make HIPAA compliance claims. Do not rely on it for emergencies.