In short
- Your diary is stored on secure servers in London and only your account can read it.
- We use your health information only to run your diary, and only with your clear consent.
- We never sell your data, and we never share your health information with advertisers or for marketing.
- Progress and profile photos stay on your phone. We never upload them.
- You can download everything you've logged, or delete your account and all of it, at any time.
Who we are
Track GLP is made by Brightmore Group Ltd, a company registered in England and Wales (company number 17530117), at 8 Acres Brook Drive, Hollingworth, Hyde, SK14 8BF. We are the "controller" of your personal information, which means we decide how it's used and we're responsible for protecting it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Questions about privacy: email support@brightmoregroup.co.uk.
What we collect
Your account
Your email address, password (stored scrambled, so nobody can read it, including us), the first name you choose to show in the app, and the date you joined.
What you log in your diary
This is health information. It includes the medicine and dose you record, dose dates and where you injected, weigh-ins, height and goal, body measurements, side effects and how strong they were, daily check-ins and how you're feeling, water and protein, habits, lifestyle questions, your supplies and orders, and any notes you write.
Your choices and settings
Your preferences (such as units and reminders), and a record of what you agreed to and when: that you're 18 or over, our terms, this policy, your consent for us to hold your health information, and your choices about usage statistics, crash reports and tips emails.
Track Plus
Whether you have Track Plus, which plan, and when a free trial ends. Apple handles the payment itself: we never see your card or bank details.
Only if you switch them on
Usage statistics: which screens and features are used, so we can improve the app. Crash reports: technical details when something goes wrong, such as the app version and the error. Both are off unless you turn them on, and neither ever includes your health information.
When you contact us
If you email us, we have your email address and whatever you choose to tell us.
What stays on your phone
Progress photos, your profile photo and reminder schedules stay on your phone and are never sent to us. Your phone's own backup (such as iCloud) may include them, under Apple's terms.
How we use it, and why we're allowed to
| What we do | Our legal reason |
|---|---|
| Create and run your account, sign you in, keep your diary and show your progress | To provide the app you've asked for (contract) |
| Hold and use your health information for your diary, reminders, charts and reports | Your explicit consent, which you give when you sign up. You can withdraw it by deleting your account. |
| Turn Track Plus on or off after a purchase, and remind you before a free trial ends | Contract |
| Send account emails: sign-up codes, password resets, sign-in changes | Contract |
| Send a few tips and reminder emails (see below) | Our legitimate interest in helping you use the app, and the "soft opt-in" rules for existing customers. You can stop them any time. |
| Usage statistics and crash reports | Your consent, which you can change in Settings at any time |
| Keep the app secure, prevent misuse and keep records of what you agreed to | Our legitimate interests, and our legal obligations |
We don't make any decisions about you by automated means that have legal or similarly significant effects. The numbers in the app, such as your weekly average or BMI, are simple sums, explained in the app under Settings › How we work out your numbers.
Emails
We email you about your account. Unless you opted out when signing up, we also send a few short tips to help you get going, such as how to log your first dose or set reminders. Tips emails never include your health details. Every one has a link to stop them, and you can switch them off in Settings › Tips and reminders by email. Our email provider, Resend, sends them for us from the EU.
Who we share it with
We use a small number of trusted companies to run Track GLP. They act on our instructions, under contracts that require them to protect your information, and they can't use it for their own purposes.
| Company | What they do for us | What they handle |
|---|---|---|
| Supabase | Database, sign-in and server functions | Your account and diary, stored in London (UK) |
| RevenueCat | Keeps track of who has Track Plus | A random account ID and your purchase history. No health information. |
| Resend | Sends our emails | Your email address, first name and the email's content. No health information. |
| GitHub | Stores our weekly backups | An encrypted copy of the database that only we can unlock |
| Cloudflare | Runs this website | Standard technical details of visits, such as your IP address, kept briefly for security |
Apple sells Track Plus through the App Store, takes payment and handles refunds. Apple does this as its own controller, under its own privacy policy.
We may also share information if the law requires it, to protect someone's safety, or if Track GLP is ever sold to another company (who would have to keep this policy's promises). We never sell your information, and we never share your health information with advertisers or for marketing.
Where it's stored
Your diary is stored in the UK (London). Some of our providers are based in the United States or the EU and may access information from there, for example to support their service. Where that happens, we rely on the UK's adequacy regulations or on the UK's approved data transfer agreements to make sure your information has the same protection as in the UK.
How long we keep it
- Your account and diary: for as long as you have an account. When you delete your account, it's deleted straight away.
- Backups: encrypted weekly backups are kept for up to 90 days, then deleted automatically. So after you delete your account, a copy can remain in a backup for up to 90 days, where nobody uses it.
- Usage statistics and crash reports: deleted after 90 days.
- Emails to us: kept for up to 2 years after the conversation ends, unless we need them longer for a legal reason.
- Purchase records: deleting your account also deletes your record at RevenueCat. Apple keeps its own records of App Store purchases.
Keeping it safe
Your information is encrypted while it travels and while it's stored. Every table in our database is locked so that each account can only read its own entries, and only our server can change someone's plan. Sign-in needs an email code to confirm your account, and you can lock the app with Face ID or your passcode. Data on your phone uses iPhone file protection. Only Brightmore Group's director has access to our systems.
Your rights
You have the right to:
- get a copy of your information (in the app: Settings › Download my data),
- correct it (edit or delete any entry in the app, or ask us),
- delete it (Settings › Account › Delete my account),
- withdraw consent at any time, for example by switching off usage statistics or tips emails, or deleting your account,
- object to or ask us to limit how we use it, and
- move it to another service (the download is in a standard format).
To ask for any of these, email support@brightmoregroup.co.uk. We'll reply within one month. It's free.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Cookies and tracking
This website doesn't use cookies, analytics or advertising trackers, so there's nothing to accept or reject. Our hosting provider may keep standard server logs for security.
The app doesn't use advertising trackers and doesn't share data with ad networks. Usage statistics and crash reports are stored in our own database, only if you switch them on.
Age
Track GLP is for adults aged 18 and over. We don't knowingly collect information from anyone younger. If you think someone under 18 has an account, please tell us and we'll delete it.
Changes to this policy
If we make important changes, we'll tell you in the app or by email before they take effect, and ask for your agreement again where the law requires it. The date at the top shows when it last changed.
Contact us
Brightmore Group Ltd, 8 Acres Brook Drive, Hollingworth, Hyde, SK14 8BF
Email: support@brightmoregroup.co.uk