Effective date: August 27, 2026 · Version 1.2
Summary: GLPill stores everything you enter on your device and syncs it through your own private iCloud, so your history follows you across devices and survives a reinstall. The app has no servers of its own, no user accounts, no analytics, no advertising, and no tracking. We never see, collect, transmit, share, or sell your data. The app is free, with no in-app purchases.
GLPill ("the app", "we", "us") is an iOS application published by Ayush Gupta (the "developer"). Contact: support@glpillapp.com. This policy describes how the app handles information when you use it on your Apple device.
This policy applies to the GLPill iOS app and to this website (glpillapp.com). It does not cover Apple's own services (the App Store, Apple ID, iCloud device backups, notifications), which are governed by Apple's Privacy Policy.
Important distinction: the sections below about "no collection" describe the iOS app, which stores your data on your device and in your own private iCloud — never on any server of ours. This website is different: like most websites, it uses Google Analytics to understand aggregate, anonymized visitor traffic (pages viewed, general location, device type), and if you choose to join the waitlist it stores the email address you submit so we can notify you at launch. See "About this website" below.
To do its job, GLPill saves the information you type into it in a private database on your device, and syncs that database through your own private iCloud (Apple's iCloud, tied to your Apple ID) so your history follows you across your devices and survives reinstalling the app:
| Category | Examples | Stored where | Sent to a GLPill server? |
|---|---|---|---|
| Medication details | Which GLP-1 pill you selected, your dose plan (titration steps) | Your device + your private iCloud | No |
| Dose history | Days and times you logged a pill | Your device + your private iCloud | No |
| Body measurements | Weight entries, goal weight | Your device + your private iCloud | No |
| Symptoms | Side-effect entries, severity, optional notes | Your device + your private iCloud | No |
| Nutrition counters | Daily protein and water totals | Your device + your private iCloud | No |
| App preferences | Units, reminder time, targets, a timer timestamp | Your device + your private iCloud | No |
There is no sign-up, no email, no phone number, no name, no location, no contacts access, no photo access, and no advertising identifier use anywhere in the app. The iCloud sync uses Apple's private CloudKit database, which only you can access with your Apple ID — GLPill has no ability to read it.
None. GLPill runs no backend servers of its own and has no capability to receive or read your data. Your health data lives on your device and in your personal iCloud, both within Apple's ecosystem and under your control; we never see it. The app contains no analytics SDKs, no crash-reporting SDKs, no advertising SDKs, and makes no network requests that send your personal information to us. Because iCloud sync uses Apple's private database (your data, your Apple ID, not accessible to the developer), our App Store privacy label remains "Data Not Collected".
GLPill is free to download and use. The app contains no in-app purchases, no subscriptions, and no advertising. There is no payment flow anywhere in the app, and we never receive payment details of any kind.
Daily pill reminders and the 30-minute meal timer are scheduled locally on your device using Apple's notification framework. They are optional (you can decline or revoke permission in iOS Settings) and no notification content is sent to us or anyone else.
The app can generate a doctor-visit summary (text) and a progress card (image) that you may choose to share via the iOS share sheet. Nothing is shared unless you explicitly do so, and you choose the recipient. The progress card deliberately omits your medication name by default. Once you share content, it is governed by the receiving app or service.
GLPill syncs your data through Apple's private CloudKit database — this is your personal iCloud, tied to your Apple ID, and GLPill has no access to it. This is what lets your dose history, weight trend and settings appear on your other devices and come back if you reinstall the app. It requires that you're signed into iCloud with iCloud Drive enabled; if you're not, the app simply works locally on that device. Separately, your app data may also be included in standard iCloud or encrypted computer backups if you have those enabled. In all cases the data stays within Apple's ecosystem and under your control — we never receive or read it.
On your device, your data is protected by iOS's built-in encryption, and GLPill opts its database into Apple's strongest file-protection class (Complete Protection), meaning the file is encrypted whenever your device is locked. In transit and at rest in iCloud, your data is protected by Apple's CloudKit security. Because GLPill has no accounts and no servers of its own, there is no password to steal from us and no GLPill server that could be breached.
Your data is kept for as long as you keep using the app. Because your history now syncs to your private iCloud (so you don't lose it by accident), deleting the app from one device alone does not erase it — that's by design, so reinstalling brings it back. To remove everything permanently: delete the app, then clear its iCloud data in Settings › [your name] › iCloud › Manage Account Storage (or Manage Storage) › GLPill › Delete Data, and remove any old device backups if you want historical copies gone. There is nothing for us to delete on any server of ours, because your data is never sent to one.
Laws such as the EU/UK GDPR and the California Consumer Privacy Act give you rights over personal data that companies collect about you — access, correction, deletion, portability, and opting out of sale or sharing. Because GLPill does not collect, receive, sell, share, or process your health data on any server of ours (it stays on your device and in your own iCloud), there is no data held by us to access, correct, delete, or port: you exercise all of these rights directly, on your own device and through your Apple/iCloud account settings. We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use your data for targeted advertising. If you believe we hold any personal data about you (for example, because you emailed us), you may contact us at the address below to request access or deletion of that correspondence.
GLPill is intended for adults using prescription GLP-1 medications and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from anyone, including children.
GLPill is a tracking tool. It is not a medical device, does not provide medical advice, and never suggests doses. Always follow your prescriber's instructions. Foundayo® is a trademark of Eli Lilly and Company. Rybelsus® is a trademark of Novo Nordisk A/S. GLPill is not affiliated with, endorsed by, or sponsored by either company.
This marketing website is separate from the app and, like most websites, uses a small amount of standard tooling:
The website is hosted on Vercel; hosting providers process standard server logs (such as IP address) to deliver the site, as all web hosts do.
If the app changes in a way that affects privacy, we will update this policy at this address, update the effective date and version above, and describe the change in the App Store release notes before it takes effect. The App Store privacy label will be updated accordingly. (Version 1.1 added private iCloud sync so your data survives reinstalls and follows you across devices; because it uses Apple's private database that we cannot access, the "Data Not Collected" label is unchanged.)
Questions or concerns about privacy: support@glpillapp.com. We aim to respond within 7 days.