Privacy Policy

1. Information We Collect

When you use GLP Journey, we may collect the following information:

• Account information (email address, name)
• Health and nutrition data you provide (food logs, weight, symptom tracking, medication type, journey stage, and other health metrics you choose to record)
• Photos you submit for AI food analysis
• Chat conversations with the AI Coach
• Device information and usage analytics
• Cookies or similar tracking technologies on our website or within the app, such as analytics tools used to understand usage patterns and improve performance. If we implement analytics in the future, this policy will apply to data collected by those tools.

2. How We Use Your Information

We use your information to:

• Provide and improve the GLP Journey app and services
• Generate personalized meal scores and nutrition guidance
• Process AI food scanner requests
• Send important account and service notifications
• Analyze aggregate usage patterns to improve the product

3. Data Protection

Your health and nutrition data is encrypted at rest using AES-256 encryption and in transit using TLS. We use industry-standard security measures to protect your personal information. Photos submitted for AI food analysis are retained and associated with your meal log so you can view them later. You may delete meal entries, including associated photos, at any time from within the app.

Data Retention: We retain your account and health data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Aggregate, anonymized data that cannot identify you may be retained indefinitely for product improvement purposes.

4. Data Sharing

We do not sell your personal data to third parties. We may share data with:

• Cloud infrastructure providers (Microsoft Azure) for hosting and processing
• AI service providers (Azure OpenAI) for food analysis and coaching chat. Food photos, descriptions, and relevant health context are transmitted to Azure OpenAI solely to generate your results and are subject to Microsoft's data processing agreements
• Google for app distribution and subscription billing
• Law enforcement when required by law

5. Third-Party Links

GLP Journey may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any external sites or services you visit.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, email support@glpjourney.ai with the subject line "Privacy Request" and describe your request. We will respond within 30 days.

Residents of states with applicable consumer privacy laws — including but not limited to California (CCPA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) — may have additional rights. These may include the right to know what categories of personal data we have collected about you, the right to request deletion, and the right not to be discriminated against for exercising your privacy rights. To exercise any state-specific rights, contact us using the method above.

7. International Users

GLP Journey is operated from and data is processed in the United States. If you access the app from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using GLP Journey, you consent to this transfer.

8. Sensitive Health Data

Information you provide about GLP-1 medication type, dosage, weight, symptoms, and your health journey is considered sensitive health data. We apply the same encryption and access controls to this data as to all personal information, and we do not use it for advertising, share it with data brokers, or disclose it to third parties beyond those listed in Section 4.

9. Children

GLP Journey is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will promptly delete their data. If you believe a minor has provided us with personal information, please contact us at support@glpjourney.ai.

10. Contact

For privacy-related inquiries, contact us at support@glpjourney.ai.