Last Updated: June 18, 2026
djEnterprises ("we," "us," or "our") operates the GLP-1 Coach mobile application (the "App"). This Privacy Policy describes how we handle information in connection with your use of the App. The short version: GLP-1 Coach is built on-device first. Your journal, photos, and logs live on your iPhone, encrypted. We have no analytics, no advertising, no third-party trackers, and we never sell your data.
1. What We Collect, and Where It Lives
On your device only (this never leaves your phone unless you turn on an optional feature below):
- Journal entries — encrypted at rest with AES-GCM; the key never leaves your device's Keychain.
- Progress photos — encrypted on device; not uploaded anywhere.
- Medication, dose, injection, side-effect, and weight logs.
- Your first name (from Sign in with Apple) and app preferences.
2. Information Sent Off the Device
Data leaves your device only in these specific cases:
- Sign in with Apple (to Apple) — authenticates you. We receive your name and an Apple relay email, never your password and never your real email unless you choose to share it.
- Subscriptions (to Apple via StoreKit) — purchases and restores are handled entirely by Apple. We never see your payment details.
- Notifications (to Apple's APNs) — for time-sensitive reminders only.
- AI Coach & Knowledge features — when you ask the Coach a question, we send your typed question, the recent conversation, and a redacted context summary (your medication name, current dose, titration step, recent side-effect tags, a brief weight/activity summary, and your first name) through our processing server to Anthropic's Claude API. We never send your free-text journal entries, your progress photos, your full weight history, or your email.
- Meal photos (optional) — if you log a meal by photo, that image is sent through our processing server to Anthropic's Claude API for a one-time nutrition estimate, then discarded. Meal photos are not stored on our servers. Your progress photos are a separate feature and never leave your device.
- iCloud Sync (off by default, opt-in) — if you enable sync, your app data mirrors to your own private iCloud (CloudKit) database under your Apple ID. This is Apple's encrypted infrastructure; we cannot read it. Your journal text stays encrypted with your device key even within iCloud.
- Apple Health (off by default, opt-in, two-way) — if you connect Apple Health, we read your weight and daily steps to give the Coach better context and chart your trend, and — only if you allow it — we save the weigh-ins and meals you log in the app back to Apple Health. We only add your own entries; we never change or delete anything else in Health. Your Apple Health data is never used for advertising or data mining, and is never shared with any third party — the only exception is the brief activity summary you explicitly consent to send to our AI provider (Anthropic) so the Coach can give you personalized context, and never for any other purpose.
- App Store version check (to Apple) — on launch we ask Apple's public App Store catalog whether a newer version exists. This sends only the app's identifier — no personal data.
3. What We Do Not Do
- No analytics SDKs, advertising SDKs, or third-party crash reporters.
- No tracking across apps or websites. We do not request the IDFA.
- No sale or sharing of personal data with data brokers — ever.
- We build no advertising profiles, and we do not know which insights or recipes any user has seen.
4. AI Processing
The Coach, recipe, and meal-photo features are powered by Anthropic's Claude API, reached through our processing server. Anthropic acts solely as a data processor for this App and does not train its models on content submitted through its API. Anthropic automatically deletes API inputs and outputs within 30 days, retaining content longer only where flagged for Usage Policy violations or required by law, as described in its Privacy Policy and Commercial Terms. Our own processing server forwards your request and the reply; it does not retain the content of your messages or your meal photos.
We have confirmed that each third party with whom the App shares user data provides the same or equal protection of user data as stated in this policy. No other third party receives your data, and we never sell or rent any user data.
Your consent — and how to revoke it. The Coach, recipe, and meal-photo features only send data to Anthropic when you choose to use them, and the app discloses this before your first use. Sending happens only when you tap to ask the Coach, generate a recipe, or analyze a meal photo — so you can stop all AI data sharing at any time simply by not using those features. Apple Health and iCloud Sync are independently opt-in and can be disabled at any time. Deleting your account (Settings → Delete everything) ends all data sharing and removes your on-device data.
5. Your Choices and Rights
- Delete everything — in-app account deletion erases your on-device data, encryption keys, and (if sync was on) requests deletion of your private iCloud data.
- Export your data — one-tap export to a file you control, via the iOS Share Sheet.
- Turn features off — iCloud Sync and Apple Health are opt-in and can be disabled at any time.
6. Children
GLP-1 Coach is intended for adults (18+). It is not directed at children, and weight-loss medication guidance is not appropriate for minors.
7. Medical Disclaimer
GLP-1 Coach is an information and journaling tool — not a medical device and not a substitute for professional medical advice. It does not diagnose, treat, or recommend dose changes. Always consult your prescriber.
8. Security
Journal text and photos are encrypted at rest on your device with CryptoKit (AES-GCM); keys live in the iOS Keychain. All network communication uses HTTPS. Our Anthropic API key lives only in secure server environment variables, never in the App.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes are posted here with an updated date, and material changes are surfaced in the app.
10. Contact Us