Privacy Policy

TherapyLog is a health-tracking app for adults managing hormone therapy, peptides, and related protocols. We built it local-first, which means the large majority of your data never leaves your device. This policy explains exactly what stays local, what is sent off your device and when, and the choices you have.

Your health data stays on your device

Everything you log in TherapyLog — wellness metrics, injections, body measurements, bloodwork, symptoms, progress photos, protocols, your profile, cycle-tracking entries (period, ovulation and fertility data), and anything you bulk-import from Apple Health (blood pressure, heart rate, HRV, steps and sleep) — is stored locally on your device using your browser or device storage (IndexedDB and local storage). We do not have a copy of it, we cannot see it, and it is not backed up to our servers.

Because it is local, you are responsible for backing it up. The app provides an export feature so you can save your own backup file. If you delete the app or clear your device storage without a backup, that data is gone and we cannot recover it.

The AI research assistant

When you ask the AI assistant a question, your question and — if you are in Personalized mode — relevant context from your logged data (such as your current protocol and recent lab values) are sent to our processing partner, Anthropic, to generate a response. This is the only time your health data leaves your device, and it happens only when you actively send a message.

• Personalized mode (the default): your current protocol, recent lab values and recent logged symptoms are sent alongside your question so the answer can reference them. The first time this happens the app asks you, names Anthropic as the recipient, and lets you choose General instead.
• General mode: switch the assistant to General mode in AI → Settings → What is sent with your question and none of your logged data is sent — only your typed question. You can switch back and forth at any time.
• Web search: To ground answers in current research, the assistant may run web searches related to your question. Your identity and personal data are not part of those searches.
• Bring Your Own Key (BYOK): If you use your own Anthropic API key, your requests go to Anthropic under your own account and are governed by your agreement with them. Your key is stored only on your device.
• Lab scanner: If you photograph a lab report to auto-fill values, that image is sent for processing to extract the values, then the extracted values are stored locally on your device.

Anthropic processes these requests to return a response and does not use them to train its models when accessed through our interface. The assistant provides research and educational information only — it is not medical advice and not a substitute for your healthcare provider.

Payments

If you subscribe, payments are processed by Stripe. We do not see or store your full card details — Stripe handles that directly. Stripe collects the information needed to process your subscription, including your email address and payment method, under Stripe's privacy policy. We can see your subscription status and the email associated with your account so we can provide the service and contact you about important account or product matters.

Subscriptions are processed by Stripe under its own privacy policy. There is no App Store or Google Play billing — TherapyLog is not listed in either store.

Email and the newsletter

If you give us your email — by joining the launch list, signing up for updates, or subscribing — we store it with our email partner, Resend, so we can contact you. We use it to send you launch news, occasional product and bug-fix updates, and our newsletter. Every email has a one-click unsubscribe.

If you buy a plan. Payment is handled by Stripe; we never see your card details. Stripe holds your email, your purchase history, and a licence key we generate for you — that key is how the app knows which plan you have. The app sends the key to us when it checks your plan, and that check returns only your tier and renewal date. We do not keep a copy of your health data alongside it, because we never receive your health data at all.

Analytics. We use Vercel Web Analytics to count page views and a handful of product events (a signup submitted, a checkout started, a licence activated, a backup taken). It is aggregate and cookie-free, and it never includes anything you log — no doses, no lab values, no notes. If you arrive from an ad or an affiliate link, the link's tracking parameters — the campaign fields, an affiliate code, and the click id the ad platform appended (fbclid, gclid, rdt_cid) — are stored in your browser so the sale can be credited. Only the affiliate code is ever sent to us, at checkout; the click ids stay on your device and are cleared when you reset the app. None of it is joined to anything you log.

• We only email you about TherapyLog. We do not sell or rent your email to anyone.
• Every email includes an unsubscribe link, and you can opt out at any time.
• Subscriber emails collected at checkout (via Stripe) may also be used to send you important service and product updates.

What we don't do

• We do not sell your personal data.
• We do not use your health data for advertising.
• We do not store your health logs, labs, or photos on our servers.
• We do not share your information with third parties except the processors named here (Anthropic for the AI assistant, Stripe for payments, Resend for email, Vercel for hosting and cookie-free aggregate analytics, and Upstash for API rate limiting) strictly to provide the service.

Cycle tracking and reproductive data

TherapyLog includes cycle tracking — period, ovulation and fertile window, cervical mucus, and related symptoms. This is among the most sensitive data anyone can record, and it is treated exactly like the rest of your health data: stored only on your device. We never receive it, we cannot produce it in response to a subpoena because we do not have it, and it is never used for advertising. It is not included in what the AI assistant sends in Personalized mode.

What we hold, and what we'd have to tell you about

The only personal data on our servers is your email address, your subscription record, and your licence key. Because we hold so little, there is very little to lose — but if unsecured identifiable health information we hold were ever acquired or disclosed without authorization, we would notify affected people, and the FTC (and where required, the media), as the FTC Health Breach Notification Rule requires. Notification would go to the email address on your account.

Technical data touches our infrastructure in the ordinary course: your IP address is used transiently by Upstash to rate-limit the licence and AI endpoints so one person cannot exhaust the service for everyone, and by Vercel to serve the site. It is not stored alongside anything you log and is not used to build a profile.

Your choices and rights

• Your health data: It lives on your device. You can view, export, or delete it at any time from within the app.
• Email: Unsubscribe from any email, or contact us to be removed from our lists.
• Subscription: Cancel anytime through the Stripe billing portal, or email hello@therapylog.app and we'll cancel it for you.
• Requests: To ask about the limited data we hold (your email and subscription record), or to have it deleted, email us at the address below.

Children

TherapyLog is intended for adults only and is not directed to anyone under 18. We do not knowingly collect information from minors.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you.

Contact

Questions about this policy or your data? Email hello@therapylog.app.