Privacy Policy

Table of Contents

1. What Information Do We Collect?
2. Health Data (Including Health Connect and HealthKit)
3. How Do We Process Your Information?
4. What Legal Bases Do We Rely On To Process Your Personal Information?
5. When And With Whom Do We Share Your Personal Information?
6. AI-Powered Features
7. How Long Do We Keep Your Information?
8. How Do We Keep Your Information Safe?
9. Do We Collect Information From Minors?
10. What Are Your Privacy Rights?
11. Controls For Do-Not-Track Features
12. Do United States Residents Have Specific Privacy Rights?
13. Do We Make Updates To This Notice?
14. How Can You Contact Us About This Notice?
15. How Can You Review, Update, Or Delete The Data We Collect From You?

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register for and use the app, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us. This includes:

• Account information. When you sign in with Google or Apple, we receive your name, email address, and profile photo, which we use to create and maintain your account.
• Health and wellness data. The information you record in the app to track your therapy — described in full in the Health Data section below.
• Profile details you choose to provide. Such as age, sex, height, and weight, if you use features like the metabolic (BMR/TDEE) calculators.
• Purchase information. If you subscribe to Pro, the purchase is handled by the Apple App Store or Google Play; we process your subscription status to unlock features, but we never see your payment card details.
• Usage and diagnostics data. We use Google Firebase Analytics and Crashlytics to collect app interaction events and crash reports so we can fix bugs and improve the app.

Sensitive Information. Because My TRT App is a health tracking app, the health and wellness data you record in it is sensitive personal information. We process it only with your consent and only to provide the Services, as described in the Health Data section. We do not sell it or use it for advertising.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. Health Data (Including Health Connect and HealthKit)

In Short: Tracking your health is the entire purpose of My TRT App. Your health data is stored primarily on your device, is synced or backed up only as described below, is never sold, is never used for advertising, and is only ever shared when you explicitly choose to share it.

Health data you record in the app

Depending on which features you use, the app collects and stores the following health-related information that you enter:

• Medication, injection, and dose logs, including schedules and injection sites
• Laboratory results and biomarker values (for example testosterone, estradiol, hematocrit, and other blood markers), including lab reports you scan or photograph
• Daily wellness check-ins (energy, mood, libido, sleep quality) and side effects
• Body weight and body measurements
• Supplement and peptide schedules and intake logs
• Food logs and nutrition information
• Wellness journal entries, journey notes, milestones, and progress photos you choose to add

Android Health Connect

On Android, the app can integrate with Health Connect. If — and only if — you grant permission, the app reads the following data types from Health Connect: weight (body mass), steps, heart rate, heart rate variability, sleep, and blood oxygen saturation (SpO₂). The app only ever reads from Health Connect; it does not write data back. This data is used as follows:

• Health Connect data is read only after you grant each permission through the Health Connect permission dialog. You can grant some permissions and not others.
• Weight records are imported into the app's local database on your device so the app can show your weight history and trends alongside your therapy data.
• Steps, heart rate, heart rate variability, sleep, and SpO₂ are read on demand to display a current biometrics snapshot on the My Journey screen. These values are shown to you in the app only — they are not stored in the app's database and are never uploaded to our servers.
• We do not use Health Connect data for advertising, marketing, credit-worthiness, or any purpose other than providing the app's features to you.
• We do not sell Health Connect data, and we do not share it with third parties.
• You can revoke the app's Health Connect access at any time in Health Connect settings or in the app's settings; the app will stop reading that data immediately.
• You can delete imported weight data by deleting individual entries, clearing the app's data, or deleting your account.

Apple HealthKit

On iOS, the app can integrate with Apple HealthKit in the same way: with your explicit permission, it reads health records such as weight, steps, heart rate, heart rate variability, sleep, and blood oxygen to display them in the app. HealthKit data is used only to provide the app's features to you, is never used for advertising or marketing, and is never sold or disclosed to third parties. You can revoke access at any time in the iOS Health app or Settings.

Where your health data is stored

• On your device. Your health data (doses, labs, check-ins, weight, and so on) is stored primarily in a local database on your device.
• In our cloud database. If you use journey features, certain data — side effects, journey notes, milestones, progress photos, achievements, and aggregate stats — is stored in our cloud database (Google Firebase / Firestore), linked to your account, so it can be restored and kept in sync.
• In your own cloud backup. On Android, you can optionally back up the app's database to the private app folder of your own Google Drive account. This backup belongs to you; we cannot access it. On iOS, your data may be included in your device's standard iCloud backup, controlled by you through iOS settings.
• With AI features, only with consent. If you use the Lab Scanner, AI Insights, or Mira chat, the specific lab data or messages involved are sent to Google Gemini AI for processing, as described in the AI-Powered Features section. You are asked for consent first.

3. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To provide and maintain our Services, including storing and displaying the health data you record
• To communicate with you about updates, security alerts, and support
• To enforce our terms, conditions, and policies
• To respond to legal requests and prevent harm
• To save or protect an individual's vital interest, such as to prevent harm

4. What Legal Bases Do We Rely On To Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. Health data, as special-category data, is processed on the basis of your explicit consent. You can withdraw your consent at any time.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

5. When And With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following third parties. We never sell your personal information, and health data is never shared for advertising or marketing.

We may need to share your personal information in the following situations:

• Service Providers. We use Google Firebase (authentication, cloud database, storage, analytics, crash reporting, and AI processing) to operate the Services. These providers process data on our behalf under their own privacy and security commitments.
• When You Choose To Share. Features like lab share cards create images of your data for you to share; nothing is shared unless you initiate it.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions. This never includes your health data.

6. AI-Powered Features

In Short: Certain features use Google Gemini AI via Firebase AI. You are asked for consent before any data is sent. Your name, email, and account info are never shared with AI services.

The following features in the My TRT App use AI to process your data:

7. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

9. Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at hello@mytrt.app

10. What Are Your Privacy Rights?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us. For health-platform integrations, you can also revoke access directly in Health Connect (Android) or the Health app (iOS) at any time.

If you have questions or comments about your privacy rights, you may email us at hello@mytrt.app

11. Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

12. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Sensitive personal information (your health data) is processed only with your consent and only to provide the Services you request. It is never sold, never shared for advertising, and never used to infer characteristics about you beyond the features you explicitly use.

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of receiving help through our customer support channels, participation in customer surveys or contests, and facilitation in the delivery of our Services and to respond to your inquiries.

We will use and retain the collected personal information as needed to provide the Services or for as long as the user has an account with us, and for a reasonable time thereafter as needed for the purposes described herein.

13. Do We Make Updates To This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at hello@mytrt.app or contact us by post at:

15. How Can You Review, Update, Or Delete The Data We Collect From You?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. You can delete your health data directly in the app (individual entries or Profile → Delete Account). To request to review, update, or delete your personal information, please reach out to us at hello@mytrt.app