Privacy Policy

What We Collect

Health Data (Stored Locally on Your Device)

•Injection records (medication, dose, date, location, notes)
•Weight measurements
•Side effects and severity
•Progress photos
•Weekly reflections
•Medication inventory

This data never leaves your device unless you:

Sync with iCloud (controlled by your iOS settings)
Generate and share a doctor visit report (you control when and with whom)
Enable HealthKit sync (you control permissions)

Anonymous Usage Analytics

We use TelemetryDeck to understand how people use Gilly so we can make it better.

What We Track:

•App opens and session duration
•Which features you use
•Actions taken (e.g., "user logged an injection")
•Errors that occur
•General medication type (NOT specific drug names)

What We DON'T Track:

•Your actual doses, weights, or health values
•Specific medication names
•Your name, email, or any identifying information
•Your location
•Content of your notes or reflections
•Your photos

How It Works:

TelemetryDeck automatically hashes all identifiers, meaning even we can't connect analytics data back to you. It's like counting "someone opened the app" without knowing who that someone is.

How We Use Your Data

On Your Device

•Display your injection history, weight trends, and progress
•Calculate medication levels
•Send you reminders (if you enable them)
•Generate doctor visit reports (when you request them)

Analytics (Anonymous)

•Understand which features are most valuable
•Identify and fix errors
•Decide what to build next
•Calculate daily/weekly/monthly active users

Your Control

You Control Your Health Data

•
iCloud Sync: Managed through iOS Settings → [Your Name] → iCloud → Gilly
•
HealthKit Integration: Grant/revoke access in iOS Settings → Health → Data Access & Devices → Gilly
•
Delete Everything: Settings → Delete All Data (permanently removes all local data)

You Control Analytics

You cannot currently opt out of anonymous analytics, but we're considering adding this option in a future update. Since all data is anonymized and hashed, there's no way to connect it back to you.

Data Security

Local Storage: All health data encrypted via iOS security
iCloud Sync: End-to-end encrypted by Apple
HealthKit: Protected by Apple's security framework
No Server Storage: We don't operate servers that store your health data
Analytics: Transmitted over HTTPS to TelemetryDeck's secure infrastructure

Third-Party Services

TelemetryDeck (Analytics)

Privacy-first analytics platform
GDPR and CCPA compliant
No cross-app tracking
No user profiling
Data stored in EU (GDPR compliant)
TelemetryDeck Privacy Policy →

Apple Services

•
iCloud: If you enable sync (optional)
•
HealthKit: If you grant access (optional)
•
App Store: For app distribution and purchases

What We DON'T Use:

No ad networks, no tracking SDKs, no social media integrations.

Children's Privacy

Gilly is not intended for children under 13. GLP-1 medications are prescription drugs for adults. If you're under 13, please don't use this app.

Medical Disclaimer

Gilly is a tracking tool, not medical advice. We use observational language ("you logged") not prescriptive language ("you should"). Always consult your healthcare provider for medical decisions.

Data Retention

•
Local Data: Stored until you delete it
•
iCloud Data: Stored until you delete it or disable iCloud sync
•
Analytics: TelemetryDeck retains anonymous signals for 2 years

International Users

Gilly can be used worldwide. Analytics data is processed by TelemetryDeck in the EU (GDPR compliant). Your health data stays on your device unless you enable iCloud sync.

Changes to This Policy

We'll notify you of significant privacy policy changes through an in-app announcement. Continued use after changes means you accept the updated policy.

Contact

Questions about privacy? Email: hello@trygilly.com

Built with ❤️ by a fellow GLP-1 user who values your privacy.

— Jacqui, Gilly Developer

Our Privacy Commitment