Privacy Policy
Apex Development Studio LLC ("we," "our," or "us") develops and operates Journey Tracker and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your health and personal information when you use the Journey Tracker iOS application and associated website (journeytracker.app).
In plain terms: what you record in Journey Tracker stays on your iPhone and in your own iCloud account. Apex Development Studio LLC has no server that stores it and no account for you, and cannot see your weights, doses, symptoms, lab results, photos, routes, or notes.
About the word "collect": some privacy laws, such as Washington's My Health My Data Act, count anything an app does with your data, including keeping it on your own phone, as "collecting" it. This policy uses the word the same way, so it lists everything the app handles. It does not mean the data comes to us. Section 5 lists everything that leaves your device.
| What | Where it is | Who can see it |
|---|---|---|
| Everything you log, and what the app reads from Apple Health, Health Records, location and motion | On your device, and in your private iCloud if iCloud is on | You. Apple keeps the iCloud copy in your account; we have no access to it. |
| Usage analytics (section 5.4) | PostHog, our analytics processor | Us, tied to a random ID for your installation. Never the values you enter. In Journey Tracker 1.9.0 and earlier, some events name an action, such as that a dose was logged. You can turn analytics off. |
| Directions for a route you plan (section 5.1) | Sent to Apple Maps to draw the route | Apple, as a standard map service. The routes you record are not sent. |
Subscription status (RevenueCat, section 5.2) involves no health data. The Idea Leaderboard (section 2.5) keeps only your votes and suggestions, under an ID used only by this app.
Please read this policy carefully. By using Journey Tracker, you agree to the practices described here.
1. Who We Are
Journey Tracker is an iOS application developed and operated by Apex Development Studio LLC. It is designed to help individuals undergoing GLP-1 therapy (including medications such as semaglutide, tirzepatide, and similar agents) track their health progress, medication history, laboratory results, and related health markers.
Apex Development Studio LLC operates Journey Tracker as a consumer health application. We are not a healthcare provider, health plan, or healthcare clearinghouse.
2. Information We Collect
2.1 Information You Provide Directly
When you use Journey Tracker, you may enter the following health information, or import it from CSV or XLSX files (such as a Renpho export):
- Body measurements: Weight, body fat percentage, muscle mass, BMI, and related metrics
- Medication information: GLP-1 medication name, dose, injection dates, and injection site rotation
- Side effect logs: Symptoms experienced during therapy, severity, and associated notes
- Laboratory results: Blood test values including HbA1c, lipid panel, metabolic markers, thyroid markers, and other health markers you choose to enter
- Blood pressure: Readings you enter
- Hydration, protein, and fasting: Drinks, protein intake, and fasting windows you log
- Progress photos: Photos you take or import to see your progress. Location metadata is removed when a photo is saved.
- Health goals: Target weight and hydration goals
- Notes: Free-text notes you add to any health entry
- Profile details (optional): Your first name, height, date of birth, and sex, kept on your device. Height, date of birth, and sex are used to calculate BMI and personalize body-fat ranges.
2.2 Information Collected Through Apple Health (HealthKit)
With your explicit permission, Journey Tracker may read from and write to Apple HealthKit. The specific data types accessed are listed during the permission request and may include:
- Body weight and body composition metrics (body fat percentage, lean body mass, and BMI)
- Blood glucose readings
- Blood pressure measurements
- Dietary water intake and dietary protein
- Step counts, workouts, walking and running distance, walking speed, and active energy burned
- Date of birth (read once to fill in your profile)
- Laboratory results only, if you connect Apple Health Records — ten common lab tests plus blood pressure, read-only. No other health record types are read.
With your permission, Journey Tracker may also write the water, protein, and blood pressure readings you enter, and the activities you record with Strides (including distance, active energy, and route), to Apple Health.
You control HealthKit access entirely. You can review and revoke any HealthKit permission at any time through iOS Settings → Privacy & Security → Health → Journey Tracker.
2.3 Sign in with Apple (Versions Before 1.9.0)
Journey Tracker 1.9.0 and later don't use Sign in with Apple, and no account is needed. Earlier versions kept Apple's anonymous user identifier in your device's Keychain and, if you shared or entered one, your first name on your device. Journey Tracker never stored your email address. The one exception: in 1.8.0, deleting your account sent a one-time code from Apple to our revocation service, which passed it straight to Apple so Apple could end Journey Tracker's Sign in with Apple access. The service stores nothing.
2.4 Location & Activity Data (Strides)
Journey Tracker's Strides feature lets you record walking, running, and other physical activities. When you use Strides, the app collects — only while you are actively recording an activity:
- Precise GPS location: used to map your route while you record. Journey Tracker uses the "While Using the App" location permission only — it never requests "Always" access, and location is never collected in the background outside an active recording. While a recording is in progress (including with the screen off), the iOS location indicator remains visible the entire time. When you open a Stride or the route planner, the app also uses your current location and heading, without saving them, to center the map.
- Recorded route data: the route path, distance, and duration of each recorded activity
- Step counts: from your device's motion sensors (Motion & Fitness permission), counted while you record an activity
- Activity photos (optional): photos you choose to attach to a recorded activity, with the location where each was taken
- Planned and saved routes: routes you create with the route planner by dropping points on a map
Like all of your health data, route and activity data stays on your device and in your private iCloud. It is never transmitted to any server operated by us or by any non-Apple third party. See Section 4 for storage details and Section 6 for how to revoke Location and Motion access.
2.5 Idea Leaderboard (Optional)
If you vote, suggest an idea or report one, Journey Tracker stores it in Apple's iCloud under an ID used only by this app. We see that ID, never your name, email or Apple Account. Other people never see who voted or who suggested an idea. Suggestions stay private until we review them, and one we don't add is erased 30 days later. To remove your votes and suggestions, tap “Delete my votes and suggestions” on the leaderboard. The email it opens includes that ID so we can find them.
2.6 Information We Do NOT Collect
Journey Tracker does not collect:
- Your full name
- Your physical address
- Your location outside of an actively recorded Stride (see Section 2.4 — location is collected only while you record an activity, and never in the background)
- Your Social Security Number or government-issued identifiers
- Your health insurance information
- Your prescribing physician's information
- Payment card information (payments are processed by Apple App Store)
3. How We Use Your Information
3.1 To Provide the Application
Your health data is used solely to operate the features of Journey Tracker — displaying your health trends, generating charts, tracking your GLP-1 progress, and providing the features you use.
3.2 Strides, Routes, and Fitness Trends
Location, motion, and activity data collected during Strides (Section 2.4) is used to:
- Map and measure the walks, runs, and other activities you record — showing your route, distance, duration, and step count
- Let you plan routes and follow them on a future activity
- Show your fitness trends over time alongside your other health data
This data is used for no other purpose.
3.3 We Do Not Sell Your Data
We do not sell, rent, or trade your personal or health information to any third party for any purpose, including advertising.
3.4 We Do Not Use Your Data for Advertising
Journey Tracker does not display advertisements and does not use your health data for advertising or marketing purposes of any kind.
4. How We Store Your Information
4.1 On Your Device
All of your health data is stored on your iPhone or iPad using Apple's Core Data framework and is encrypted at rest by iOS Data Protection (AES-256).
4.2 iCloud Backup
If you have iCloud enabled, your Journey Tracker data may be backed up to your personal iCloud account through Apple's CloudKit framework. This data is:
- Stored in your personal iCloud account, not any server controlled by us
- Subject to Apple's privacy policy and security practices
- Accessible only to you through your Apple ID
- Not accessible to Journey Tracker developers under any circumstances
You can disable iCloud backup for Journey Tracker at any time through iOS Settings → [Your Name] → iCloud → Apps Using iCloud.
4.3 Route and Activity Data (Strides)
Your recorded routes, planned routes, and activity data are stored the same way as the rest of your health data: on your device and, if iCloud is enabled, in your private iCloud database. No server operated by us — and no non-Apple third party — ever receives your location or route data.
Map display and walking directions in the route planner are provided by Apple Maps. When you view a map or request walking directions, those requests are processed by Apple as a standard platform service under Apple's privacy policy (apple.com/privacy).
5. Information Sharing
5.1 Apple
We use Apple's platform services (HealthKit, CloudKit, StoreKit, and Apple Maps for map display and walking directions) to operate Journey Tracker. Your use of these services is subject to Apple's Privacy Policy (apple.com/privacy).
5.2 RevenueCat (Subscription Management)
Subscription management is handled by RevenueCat. RevenueCat receives your purchase and subscription status, an anonymous app user ID (shown in the app as your Support ID), and Apple's ad attribution token, which shows whether an install came from an Apple Search Ads ad and does not include your advertising identifier. RevenueCat receives no health data and no location data of any kind. RevenueCat's privacy policy is available at revenuecat.com/privacy.
5.3 Fernand (Contact Forms & Support)
The contact, support, and waitlist forms on our site — and our live chat support widget — are processed by Fernand SAS, a third-party customer support platform organized under the laws of France. When you submit a form or use the chat widget, your name, email address, and message content are transmitted to and stored by Fernand in order to deliver your message to us and allow us to respond. Fernand does not use this data for advertising and does not sell it. For details, see Fernand's Privacy Policy.
5.4 PostHog (Product Analytics)
We use PostHog, Inc. ("PostHog," US Cloud region) to understand which features of the app are used and how well it performs, so we can improve it. PostHog receives feature-usage events — for example, that a weight entry was logged or a fast was started — and daily performance and stability summaries from Apple's MetricKit, such as launch time, hang and crash counts, and memory use (never crash logs or call stacks). Both include basic technical context such as device type, operating system version, and app version. PostHog never receives the values you enter — no weights, doses, medications, lab results, symptoms, photos, locations, or notes.
Events are associated with a randomly generated identifier unique to your app installation. It is never your name, email address, or Apple ID. We have configured PostHog to discard IP addresses rather than store them, and we have disabled IP-based location lookup, so no location is derived or retained.
PostHog processes this data solely on our behalf and is contractually required to protect it to the same standard described in this policy. Analytics events are kept under PostHog's data retention policy for our plan (currently one year). Share Usage Analytics is on by default. You can turn analytics off at any time under Settings → Privacy & Security → "Share Usage Analytics," and deleting the app ends its random identifier. Because that identifier isn't shown in the app and isn't linked to you, we can't pick out one person's usage events on request. Subscription events tied to your Support ID can be deleted: email it to support@journeytracker.app. PostHog's privacy policy: posthog.com/privacy.
5.5 No Other Third-Party Sharing
We do not share your health or personal information with any other third parties. Your location and route data is never sold, never shared, and never used for advertising.
Journey Tracker 1.9.0 and earlier also include the AppsFlyer SDK, which sends basic technical details (never health data) to AppsFlyer when the app opens. We stopped using AppsFlyer on October 6, 2026 and asked it to delete our data. Versions after 1.9.0 don't include it.
6. Your Rights and Choices
6.1 Access Your Data
You can view all of your health data within the Journey Tracker app at any time. You can export your data as spreadsheet files, or save a full backup file (optionally protected with a password), from Settings → Export Data, and restore a backup from Settings → Import Data. The file is created on your device and goes only where you choose to save or share it.
6.2 Delete Your Data
You can delete all of your Journey Tracker data by:
- Deleting individual entries within the app
- Using Settings → Privacy & Security → Delete Account & All Data within the app (removes all on-device data)
- Deleting the app (removes all on-device data)
- Managing your iCloud storage to remove Journey Tracker backups via iOS Settings
- Data Journey Tracker wrote to Apple Health (water, protein, blood pressure, and Strides workouts) stays in Apple Health; delete it in the Health app
- Idea Leaderboard votes and suggestions: tap “Delete my votes and suggestions” on the leaderboard (see Section 2.5)
Third-party data: Apex Development Studio LLC does not store your health data on servers it controls. The only records we keep are the Idea Leaderboard votes, suggestions and reports described in Section 2.5, identified only by the app-specific ID. RevenueCat and PostHog hold only the limited records described in Section 5.
6.3 Location and Motion Permissions
You control Strides-related permissions entirely:
- Location: revoke Journey Tracker's location access at any time through iOS Settings → Privacy & Security → Location Services → Journey Tracker. Journey Tracker only ever requests "While Using the App" access.
- Motion & Fitness: revoke step-counting access at any time through iOS Settings → Privacy & Security → Motion & Fitness → Journey Tracker.
- Deleting a Stride: deleting a recorded activity in the app removes its route, distance, duration, steps, and any attached photos.
6.4 HealthKit Permissions
You can review and revoke any HealthKit permission at any time through iOS Settings → Privacy & Security → Health → Journey Tracker.
6.5 California Residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Delete your personal information
- Correct inaccurate personal information
- Opt out of the sale of your personal information (we do not sell personal information)
- Limit use of sensitive personal information to purposes explicitly disclosed in this policy
- Non-discrimination for exercising your privacy rights
Sensitive Personal Information: Journey Tracker collects the following categories of sensitive personal information as defined by the California Privacy Rights Act (CPRA): health data (body weight, body composition, blood glucose, blood pressure, medication information, laboratory results, symptom logs, physical activity data, and dietary intake) and precise geolocation (collected only while you actively record a Stride). This data is used solely for the purposes disclosed in this policy and is never sold or shared for advertising. You have the right to limit the use of your sensitive personal information to the purposes described in this policy.
To exercise these rights, contact us at support@journeytracker.app. We will respond within 45 days. If an extension is necessary, we will respond within 90 days total and notify you of the extension.
6.6 Virginia, Colorado, and Other State Residents
Residents of Virginia (CDPA), Colorado (CPA), and other states with consumer privacy laws have similar rights to access, delete, and correct their personal information. Contact us at support@journeytracker.app to exercise these rights.
7. Children's Privacy
Journey Tracker is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.
Journey Tracker does not collect or store user data on our servers. All health data is stored locally on the user's device and, if iCloud is enabled, in the user's personal iCloud account — neither of which we control or can access. Because we have no server-side records, we are unable to identify or delete data belonging to any specific user, including minors.
If you believe a child under 18 has used Journey Tracker, please contact us at support@journeytracker.app and we will respond promptly. To remove all associated data, we recommend: (1) deleting the Journey Tracker app from the device, and (2) removing any iCloud data via iOS Settings → [Your Name] → iCloud → Manage Storage → Journey Tracker.
8. Data Security
We implement technical and organizational measures to protect your health information, including:
- On-device encryption: All health data is encrypted using AES-256 encryption
- App lock: Face ID, Touch ID, or passcode, on by default
- Secure transmission: Data the app sends over the internet is encrypted in transit (HTTPS)
- No developer server access: We do not operate servers that store your health data
- Debug code exclusion: Developer and debug features are excluded from the production app
No security system is perfect. If we become aware of a security breach that affects your health information, we will notify you as required by applicable law.
9. Breach Notification
In the event of a security breach involving your health information, we will notify affected users in accordance with the FTC Health Breach Notification Rule (16 C.F.R. Part 318) and applicable state law, including Washington's My Health My Data Act where applicable.
Notification procedures:
- For breaches affecting fewer than 500 individuals: notification to affected users within 60 calendar days of discovery, via in-app notification and/or email
- For breaches affecting 500 or more individuals: notification to the FTC and affected users within 60 calendar days of discovery, plus notification to prominent media outlets serving the affected area
Notification content will include: a description of the breach, the types of health data involved, steps you can take to protect yourself, and contact information for further inquiries.
If you believe your health data has been compromised, contact us immediately at support@journeytracker.app.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app and update the "Last Updated" date at the top of this policy. Your continued use of Journey Tracker after such notification constitutes your acceptance of the updated policy. For material changes that affect how we process your health data, we will seek your renewed consent where required by law.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your health information, please contact us:
Company: Apex Development Studio LLC
Email: support@journeytracker.app
Website: journeytracker.app
Mailing Address: Available upon request — email support@journeytracker.app
For data deletion requests or to exercise your privacy rights, please email support@journeytracker.app with the subject line "Privacy Rights Request."