Consumer Health Data Privacy Policy
In plain terms: what you record in Journey Tracker stays on your iPhone and in your own iCloud account. Apex Development Studio LLC has no server that stores it and no account for you, and cannot see your weights, doses, symptoms, lab results, photos, routes, or notes.
About the word "collect": Washington's My Health My Data Act (RCW 19.373) counts anything an app does with health data, including keeping it on your own phone, as "collecting" it. That is why this policy exists and lists everything the app keeps. It does not mean the data comes to us. Where this page says the app keeps, reads or records something, the law calls that collecting.
This policy supplements our general Privacy Policy.
| What | Where it is | Who can see it |
|---|---|---|
| Everything you log, and what the app reads from Apple Health, Health Records, location and motion | On your device, and in your private iCloud if iCloud is on | You. Apple keeps the iCloud copy in your account; we have no access to it. |
| Usage analytics (section 4.4) | PostHog, our analytics processor | Us, tied to a random ID for your installation. Never the values you enter. In Journey Tracker 1.9.0 and earlier, some events name an action, such as that a dose was logged. You can turn analytics off. |
| Directions for a route you plan (section 4.1) | Sent to Apple Maps to draw the route | Apple, as a standard map service. The routes you record are not sent. |
Subscription status (RevenueCat) involves no health data; section 4.2 describes it.
1. Purpose and Scope
This Consumer Health Data Privacy Policy is provided pursuant to Washington's My Health My Data Act (RCW 19.373). It applies to all consumer health data collected, used, shared, or stored by Journey Tracker, an iOS application developed and operated by Apex Development Studio LLC ("we," "our," or "us").
This policy applies to any consumer who uses Journey Tracker, with particular rights afforded to residents of Washington state under the My Health My Data Act. The rights and transparency commitments described in this policy extend to all users regardless of location.
Journey Tracker is a consumer health application designed to help individuals undergoing GLP-1 therapy track their health progress, medication history, laboratory results, and related health markers. Apex Development Studio LLC is not a healthcare provider, health plan, or healthcare clearinghouse. Journey Tracker is not a medical device and does not provide medical advice.
2. Consumer Health Data the App Keeps
Journey Tracker keeps the following categories of consumer health data on your device, and in your iCloud account if iCloud is on, each for the purpose described. Section 4 lists everything that ever leaves your device.
2.1 Body Measurements
Kept on your device: Weight, body fat percentage, lean and muscle mass, body water, visceral fat, and BMI.
Purpose: Health trend tracking, chart generation, and progress visualization against your personal goals.
2.2 Medication Information
Kept on your device: GLP-1 medication name, dose, injection dates, and injection site.
Purpose: Dose history and a timeline of dose changes.
2.3 Side Effect and Symptom Logs
Kept on your device: Symptoms, severity ratings, and associated notes.
Purpose: Showing your symptom history over time.
2.4 Laboratory Results
Kept on your device: HbA1c, lipid panel values, metabolic markers, thyroid markers, other health markers you choose to enter, and blood pressure readings.
Purpose: Health marker tracking over time.
2.5 Health Goals
Kept on your device: Target weight and hydration goals.
Purpose: Progress measurement against user-defined goals.
2.6 Health Data from Apple HealthKit
Read from Apple Health (with your explicit permission): Body weight and body composition (body fat, lean mass, BMI), blood glucose, blood pressure, dietary water, dietary protein, date of birth, step counts, workouts, walking and running distance, walking speed, and active energy.
Purpose: Automated health data sync for trend tracking within the app.
2.7 Notes
Kept on your device: Free-text notes you attach to health entries.
Purpose: Personal record-keeping associated with your health data.
2.8 Location and Physical Activity Data (Strides)
Recorded and kept on your device (only while you actively record an activity, with your explicit permission): Precise GPS location tied to your fitness activity, walking/running activity and recorded routes, step counts from device motion sensors, distance, duration, active energy, optional activity photos and where each was taken, and planned/saved routes you create with the route planner.
Purpose: Mapping and measuring the physical activities you choose to record, route planning, and fitness trend tracking.
Precise location tied to fitness activity is consumer health data under the My Health My Data Act. Location is recorded only during an active recording using the iOS "While Using the App" permission — never in the background outside a recording, and never with "Always" access.
2.9 Dietary Intake and Fasting
Kept on your device: Water intake (logged by drink type), protein intake, and fasting windows.
Purpose: Hydration, nutrition, and fasting tracking against your personal goals.
2.10 Progress Photos
Kept on your device: Photos you take or import to see your progress. Location metadata is removed when a photo is saved.
Purpose: Visual progress tracking and comparisons you create.
2.11 Profile Details
Kept on your device (optional): Height, date of birth, and sex.
Purpose: Calculating BMI and personalizing body-fat ranges.
3. Sources of Consumer Health Data
The health data in Journey Tracker comes from these sources, all read and stored on your device:
- Direct user input: Manual entry of health measurements, medication information, side effects, lab results, goals, and notes within the app
- OCR scanning: On-device optical character recognition (Apple Vision framework) used to extract lab values from photos, PDFs, or camera captures of lab reports
- Device GPS and motion sensors: Precise location and step counts recorded only while you actively record a Stride, with your explicit permission through Apple's native Location and Motion & Fitness authorization dialogs
- Apple HealthKit: Automated sync of body weight, body composition, blood glucose, blood pressure, dietary water, dietary protein, steps, workouts, and active energy data — read only with your explicit permission through Apple's native HealthKit authorization dialog
- Apple Health Records: Lab results only (ten common lab tests plus blood pressure) from your connected health systems — read only with your explicit permission through Apple's native Health Records authorization
- File import: CSV or XLSX files you choose to import from other apps or devices (such as Renpho), read on your device
4. Third Parties and Affiliates Receiving Consumer Health Data
The following is the exhaustive list of all third parties that receive, or may receive, consumer health data from Journey Tracker, along with each party's role and the categories of data shared:
4.1 Apple Inc.
- HealthKit: Local on-device data sync between Journey Tracker and Apple Health. Health data remains on your device and in your personal iCloud account.
- CloudKit: Encrypted iCloud backup of your Journey Tracker data to your personal iCloud account. This data is stored in your account, not on any server controlled by Apex Development Studio LLC.
- Sign in with Apple (versions before 1.9.0 only): Authentication only. Apple provided an opaque user identifier — no health data was shared with Apple through this service. Journey Tracker 1.9.0 and later don't use it.
- StoreKit: Subscription management only. No health data is transmitted to Apple through StoreKit.
- Apple Maps (MapKit): Map display and walking-direction requests for the Strides route planner are processed by Apple as a standard platform service. Your recorded routes and activity data are not shared with Apple Maps — only the map tiles and direction requests needed to display maps and plan routes.
Apple's Privacy Policy: apple.com/privacy
4.2 RevenueCat, Inc.
RevenueCat receives your purchase and subscription status, an anonymous app user ID (your Support ID), and Apple's ad attribution token. No consumer health data of any kind is transmitted to RevenueCat.
RevenueCat's Privacy Policy: revenuecat.com/privacy
4.3 Fernand SAS
Fernand processes contact and support form submissions — and live chat messages — on the Journey Tracker website (journeytracker.app). Fernand receives your name, email address, and message content only. No consumer health data is transmitted to Fernand.
Fernand's Privacy Policy: getfernand.com/privacy
4.4 PostHog, Inc.
PostHog provides product analytics for the app. PostHog receives feature-usage events, daily performance and stability summaries from Apple's MetricKit (such as launch time and hang and crash counts), and basic device and app version information, tied to a random identifier unique to your app installation. Some feature-usage events name an action you took in the app — for example, that a dose, a weight entry, water, a fast or a walk was logged, or that the Labs screen was opened — and reminder events name the kind of reminder. It never receives the values you enter — no weights, doses, medication names, lab results, symptoms, photos, locations, or notes. IP addresses are discarded rather than stored, and IP-based location lookup is disabled, so no location or route data is derived or retained. PostHog acts solely as our processor and may not use this data for its own purposes. Analytics is on by default and can be turned off under Settings → Privacy & Security → "Share Usage Analytics."
PostHog's Privacy Policy: posthog.com/privacy
Journey Tracker 1.9.0 and earlier also include the AppsFlyer SDK, which sends basic technical details (never health data) to AppsFlyer when the app opens. We stopped using AppsFlyer on October 6, 2026 and asked it to delete our data. Versions after 1.9.0 don't include it.
4.5 Affiliates
No affiliates receive consumer health data. Apex Development Studio LLC has no affiliates, subsidiaries, or parent companies. We are an independent limited liability company.
To reaffirm: apart from the feature-usage events described in 4.4, which can name an action but never contain what you entered, no third party outside Apple's platform services receives your consumer health data — including your location, routes, and activity data. No server operated by Apex Development Studio LLC or any non-Apple third party ever receives your location or the health values you record.
5. How to Exercise Your Rights Under MHMDA
Washington state residents and all Journey Tracker users have the following rights with respect to their consumer health data:
5.1 Right to Know
You have the right to know what consumer health data is collected about you (in the law's sense, which includes data kept only on your device) and how it is used. This policy fulfills that right by describing every category of data the app keeps, its purpose, and every third party that receives any of it.
5.2 Right to Access
You can access all of your consumer health data at any time directly within the Journey Tracker app. All data you have entered or synced is available to you through the app's dashboard, charts, and detail views.
5.3 Right to Delete
You have the right to request deletion of your consumer health data. Here is how to delete your data from each location where it may exist:
- On-device data: Open Journey Tracker, navigate to Settings → Health Information → Delete All Data, and choose Delete from This Device. This removes the app's records, photos and settings from that device. The copy in your iCloud account stays until you delete it there (next item).
- iCloud data: Go to iOS Settings → [Your Name] → iCloud → Manage Storage → Journey Tracker → Delete Data. This removes all Journey Tracker data from your iCloud account.
- Apex server-side: Apex Development Studio LLC stores no consumer health data on any server it controls. No server-side deletion is required.
- Usage analytics: these events are tied only to a random identifier for your app installation. The app does not show it and we cannot connect it to you, so we cannot pick out one person's events on request. Turning off "Share Usage Analytics" stops them, and deleting the app ends that identifier.
5.4 Right to Withdraw Consent
You have the right to withdraw consent to the collection or sharing of your consumer health data at any time:
- Apple Health: Revoke Journey Tracker's HealthKit access at any time through iOS Settings → Privacy & Security → Health → Journey Tracker. The app immediately stops reading from Apple Health.
- Location: Revoke Journey Tracker's location access at any time through iOS Settings → Privacy & Security → Location Services → Journey Tracker. The app immediately stops recording your location.
- Motion & Fitness: Revoke Journey Tracker's step-counting access at any time through iOS Settings → Privacy & Security → Motion & Fitness → Journey Tracker.
- Usage analytics: Turn off Settings → Privacy & Security → "Share Usage Analytics" in the app. This immediately stops PostHog analytics.
Withdrawal of consent is always prospective. Revoking HealthKit access stops the app reading new data. It does not delete what the app already keeps on your device; section 5.3 explains how to delete it.
5.5 Private Right of Action
The My Health My Data Act provides a private right of action for violations of its provisions (RCW 19.373.090). If you believe your rights under MHMDA have been violated, you may bring a claim as provided under the statute.
5.6 Response Times and Appeals
We respond to a request to confirm, access, delete, or withdraw consent within 45 days of receiving it. If we need more time, we may extend this once by up to 45 more days; we will tell you within the first 45 days and explain why.
If we decline to act on your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will answer your appeal in writing within 45 days, explaining what we did or did not do and why. If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
6. Consent
Journey Tracker reads data from Apple Health, Apple Health Records, your location, and your device's motion sensors only with your affirmative consent, and everything you enter or the app reads stays on your device and in your iCloud account. Nothing is gathered passively or without your knowledge. Usage analytics (section 4.4) is on by default and never contains the values you enter; you can turn it off at any time (section 5.4).
6.1 HealthKit Data
Journey Tracker reads HealthKit data only after you grant permission through Apple's native HealthKit authorization dialog. This dialog clearly describes the specific data types Journey Tracker requests access to. Granting permission through this dialog is your consent for the app to read that data and keep it on your device (what the law calls collection) for the purposes described in this policy.
6.2 Location and Motion Data
Location and step data for Strides is recorded only after you grant permission through Apple's native Location and Motion & Fitness authorization dialogs, and only while you actively record an activity. Starting a recording is an affirmative act; no location or motion data is recorded passively or outside an active recording.
6.3 Consent Standards
All consent obtained by Journey Tracker is:
- Freely given — you are not required to consent to use the core features of the app
- Specific — each consent request identifies the exact data and purpose
- Informed — you are told what data the app keeps, why, and who, if anyone, receives it
- Opt-in — no health data from Apple Health, Apple Health Records, your location, or your motion sensors is read until you grant permission
- Voluntary — declining consent does not prevent you from using Journey Tracker's core features
- Unambiguous — consent requires an affirmative action (granting a permission or tapping a consent button)
These consent standards are designed to meet the requirements of RCW 19.373.030.
7. Contact
To exercise your rights under this policy or Washington's My Health My Data Act, or to ask questions about how your consumer health data is handled:
Email: support@journeytracker.app (subject line: "Health Data Privacy Request")
Website: journeytracker.app/support
Company: Apex Development Studio LLC
We will respond to all requests within the timeframes required by applicable law.