Privacy policy

1. About this policy

This policy explains how George Kettle, trading as GLP&Me (“GLP&Me”, “we”, “us” or “our”), handles personal information when you use the GLP&Me mobile application, website and related services (together, the “Service”).

Some information you choose to record concerns your health. We treat that information as sensitive and use it only to provide, protect and improve the Service as described below.

2. Information we collect

Account information

Your email address, account identifier, authentication records and, if you choose Apple or Google sign-in, the account details that provider makes available to us.

Treatment and health information

Your medication name and form, dose, treatment start date, schedule, time zone, reminders, doses you mark as taken, skipped or delayed, injection site and notes. If you choose to record them, this also includes symptoms, check-ins, weight, goal weight and daily calorie totals. Weight, goal weight, calories, symptoms and notes are optional.

Subscription information

Your subscription product, status, store, trial or billing period, renewal status and expiry date. Apple or Google handles your payment details; GLP&Me does not receive your full card or bank details.

Device, app and support information

App version, build, platform and limited diagnostic details you choose to include when asking for support. When you choose email support, the message prepared by the app may include your account email, an account support identifier and subscription diagnostics, but not your treatment records.

Information stored on your device

GLP&Me stores your signed-in session and limited cached settings on your device. Treatment setup entered before account creation may also be stored temporarily on the device so you can finish setup. Reminder notifications are scheduled on your device; the current Service does not use your reminders for advertising or send them to an advertising network.

3. How we collect information

We collect information directly from you when you create an account, complete treatment setup, record information, change settings, buy or restore a subscription, or contact support. We also receive limited account and subscription information from authentication providers, app stores and RevenueCat.

4. How we use information

We use personal information to:

• create, authenticate and protect your account;
• save and display the treatment records you choose to keep;
• schedule reminders and apply your app preferences;
• calculate summaries and population-based medication estimates;
• provide, restore and check subscription access;
• respond to support and privacy requests;
• maintain the security and reliability of the Service; and
• comply with law and protect our legal rights.

GLP&Me does not sell your personal information, use your health information for advertising, or currently use third-party analytics or advertising SDKs.

Where consent is required to handle sensitive health information, we rely on the choice you make to enter and submit that information for these purposes. You can withdraw that consent for future handling by stopping optional tracking and deleting the relevant records or your account. Withdrawal does not affect handling that was lawful before it was withdrawn.

5. Calculations and estimates

GLP&Me may use the doses you record to calculate treatment summaries and population-based medication-level estimates. These are educational calculations, not measurements from your body, personalised predictions, diagnoses or treatment recommendations. They are not used to make decisions about your access to healthcare, insurance, employment, credit or other significant rights.

6. When we share information

We share information only as needed to operate the Service or where law permits or requires it. Current service providers include:

• Supabase, for authentication, database hosting and server-side functions;
• RevenueCat, for subscription status and purchase entitlement management;
• Apple and Google, for app distribution, purchases and optional sign-in when you choose it; and
• professional advisers, authorities or a successor to the Service where reasonably necessary to comply with law, protect people or the Service, resolve a dispute or complete a business transfer.

These providers process information under their own terms and privacy policies. We require providers handling information for us to use appropriate safeguards.

7. Overseas processing

Our providers may process personal information in Australia, the United States and other countries where they or their subprocessors operate. Privacy protections in those countries may differ from Australian law. We take reasonable steps to use reputable providers and appropriate contractual and technical safeguards.

8. Security

We use safeguards designed to protect personal information, including encrypted network connections, protected account sessions and database access controls that restrict signed-in users to their own records. No online service can guarantee absolute security. You are responsible for keeping your device and account credentials secure.

9. Retention and deletion

We generally keep account information and synced app records while your account is active and for as long as reasonably needed to provide the Service, maintain security, resolve disputes and meet legal obligations.

You can delete your account in GLP&Me under Settings. The current deletion process removes your GLP&Me account and account-linked records from Supabase and asks RevenueCat to delete its subscriber record. Deleting your account does not cancel an app-store subscription; manage or cancel that separately through Apple or Google.

Limited information may remain temporarily in secure backups or be retained where required for security, fraud prevention, accounting, dispute resolution or legal compliance. Information stored locally on your device may remain until you delete the app or clear its storage.

10. Your choices and rights

You can choose not to record optional information, change notification permission in your device settings, edit or delete individual records where the app provides that control, and delete your account in Settings.

Depending on where you live, you may also ask to access or correct personal information we hold about you, request deletion, object to or restrict certain processing, withdraw consent, or make a privacy complaint. We may need to verify your identity and lawful exceptions may apply.

11. Children

The Service is intended for people aged 18 and over. We do not knowingly collect personal information from children through the Service. Please contact us if you believe a child has provided personal information so we can investigate and delete it where required.

12. Questions and complaints

For privacy questions, access or correction requests, account deletion help or complaints, contact us at support@getglpandme.com. Please include enough information for us to understand the request, but do not email treatment records unless we ask for them.

We will acknowledge and investigate privacy complaints within a reasonable time. If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. You may also have the right to complain to a privacy regulator where you live.

13. Changes to this policy

We may update this policy when the Service, our information handling or legal requirements change. We will publish the revised policy, update the date above and provide additional notice in the app when a change materially affects your privacy.