Privacy Policy

Last updated: 25 July 2026

Who we are

GrowthUp, contactable at support@growthup.app. This policy covers the GrowthUp iOS app.

What we store on our servers

• Your account identifier from Sign in with Apple, and the email address Apple provides. If you chose "Hide My Email", we only ever see Apple's relay address.
• Your display name, if you enter one.
• Your username, if you pick one. This is how other people find you: someone who types it exactly can send you a friend request. There is no way to search for you by name, and no way to browse users.
• Your protocol: the items you add, their amounts, units, schedules, reminder times, vial and reconstitution details, and remaining quantities.
• Your dose history: which doses you marked taken, skipped or missed, and when.
• Your buy list and your notification preferences.
• Your profile photo, if you add one. Note that profile photos are stored in a bucket that serves them over public URLs — do not use a photo you would not want to be reachable by link.

• Your friends list, and any friend requests you have sent or received.
• Your sharing settings — the switches under Sharing & Privacy.

Our backend is Supabase. Data is held there under their security controls. Nothing above is readable by another user except through the friends feature described next.

What friends can see

Nothing, unless you turn it on. Every switch under Sharing & Privacy starts off, and a friend only exists once one of you has sent a request and the other has accepted it.

When you do turn something on, a friend can see your display name, your username, your profile photo, and whichever of these you enabled: your consistency score, your current streak, your total doses logged, and whether you have completed today. Separately, you can choose to show the compounds in your protocol and their schedule.

Friends never see an amount. Not a dose, not a vial strength, not a quantity — the app publishes no dose figure, yours or anyone else's, and the queries that serve your friends do not select one.

Turning a switch off stops it immediately, and removing a friend removes their access in both directions. Which of your numbers a friend may see is decided on our server, not in the app — a switch you have left off means the value is never sent, not that it is sent and hidden.

We do not show your protocol, your logs or your figures to anyone else: not to other users, and not to anyone outside the friends you have accepted.

What stays only on your device

• Apple Health data. GrowthUp requests read-only access — it cannot write to Health, and it does not upload what it reads. Steps, sleep, workouts, weight and heart rate are read on the device to draw your own screens and go nowhere else. You can revoke this at any time in the Health app.
• Your date of birth and biological sex, if you enter them.
• Your local cache of vial and reconstitution details.

What we do not do

• We do not sell your data.
• We do not share it with advertisers, and we do not use it for advertising.
• We do not run third-party analytics or tracking SDKs.
• We do not access your contacts, your camera roll beyond a photo you explicitly pick, your location, or your microphone.

Why we store it

To run the app for you: to show your protocol on every device you sign in on, to send the reminders you asked for, and to work out how much you have left. And, only where you have switched it on, to show the friends you have accepted what you chose to share with them.

How long

Until you delete it. Removing an item deactivates it. Deleting your account removes your profile, your protocol, your logs, your buy list, your notification preferences, your sharing settings, your shared progress figures, your friendships in both directions, your friend requests either way, and your profile photo.

Your choices

• Choose what friends can see, or share nothing at all: Profile → Sharing & Privacy.
• Remove a friend at any time: their profile → Remove friend. Access ends for both of you.
• Delete your account and its data: Profile → Delete Account.
• Revoke Health access: the Health app, under Sharing → Apps → GrowthUp.
• Turn off reminders: Profile → Notifications, or iOS Settings.
• Request a copy of your data, or ask a question: support@growthup.app.

Children

GrowthUp is for adults 18 and over. We do not knowingly collect data from children.

Changes

If this policy changes materially we will show you the new version in the app.