Privacy Policy

Effective July 2026

The short version

Your health data stays on your iPhone. Glipath's servers do not store your doses, weight, food logs, side effects, labs, or any other health record — that data lives in an on-device database that only you control.

What stays on your device

Everything you log: medications, doses, weight and biometrics, food logs and food-noise ratings, side effects, supplements, labs, inventory and costs. Computed views (like the estimated medication-level curve) are calculated on the device too. Deleting the app deletes this data. If you enable the optional iCloud sync, your data syncs throughyour personal iCloud account using Apple's CloudKit — we cannot read it.

What our servers process

• Food photo scanning (optional): if you scan a meal, the photo is sent to our server and an AI provider to identify foods, then discarded. Photos are not stored; results are saved only on your device.
• Account: an anonymous identifier so the app works without an email or password. No name, no health data attached.
• Purchases: subscription status via Apple and RevenueCat (receipt validation). We never see your payment details.
• Usage analytics & crash reports: anonymous app events (e.g. "a dose was logged") to understand what features matter, sent to analytics providers we use (Google Firebase Analytics, Mixpanel, Amplitude, Segment), and crash reports (Bugsnag) so we can fix bugs. Never the values — not the medication, dose amount, weight, or any other health number. Events carry a random app identifier, not your name or email.
• Install attribution: to know which of our ads work, attribution partners (AppsFlyer) and ad-platform SDKs (Google, TikTok) receive install and in-app conversion signals — that the app was installed or a subscription started, tied to a device advertising identifier where you've allowed tracking. These signals never include any health data, and we don't send them your identity.
• Waitlist: if you join, we store your email address and which page you signed up from — nothing else. Launch news only; unsubscribe anytime by replying, and we delete it on request.
• Website analytics: this website uses PostHog and may use Google Analytics to understand which pages are useful — standard page views and clicks, never anything you type into a form other than the fact that it was submitted.

The assistant, and when a question can leave your phone

The in-app assistant answers its built-in commands entirely on your device, from the data already stored there — nothing is sent anywhere. Chatting in free text is different, and nothing is sent until you've agreed to it: the first time you try, the app shows you exactly what would happen and asks for your consent. Only after you agree is a question (with the minimum context needed to answer it) sent through our server to OpenAI to generate a reply. What we send is not tied to your name or email, photos and health records stay on the device, and chatting is never required — the commands work without it.

What we never do

• Sell your data, or give your health data to anyone — advertisers, data brokers, analytics providers, anyone. It isn't on our servers to give.
• Store your health records on our servers.
• Give medical or dosing advice — Glipath is a tracker, not a provider.

Your choices & contact

Export your data from the app anytime (JSON/CSV/PDF, generated on-device). To delete server-side records (anonymous account, waitlist email), email[email protected] and we'll confirm within 30 days.