Symptra Privacy Policy.

1. What stays on your device

All health and lifestyle data you log in Symptra is stored exclusively on your iPhone, in the app's local database (SQLite via Drift). This includes:

• Medication logs, injection schedule, and dose history
• Weight and body measurements (waist, hips, chest)
• Symptom logs: nausea, food noise, mood, and energy
• Food entries, hydration logs, protein tracking, meal check-ins
• Reminders configuration and personal preferences
• Any user-entered notes or text

None of this data is transmitted to Appix servers. Symptra does not run a cloud backend for user health data. If you uninstall Symptra, all locally stored data is removed by iOS along with the app sandbox.

2. Third-party services Symptra uses

2.1 RevenueCat: subscription management

Symptra uses RevenueCat to manage auto-renewing subscriptions purchased via Apple In-App Purchase. RevenueCat receives:

• An anonymous random User ID (UUID) generated by the SDK on first launch
• The App Store transaction receipt
• Device type, OS version, app version, approximate country (from App Store metadata)

RevenueCat does not receive any personally identifying information from Symptra. No email, name, phone, or health data. Its sole purpose is verifying active subscription status across reinstalls via "Restore Purchases." See RevenueCat's privacy policy.

2.2 Firebase Crashlytics and Analytics: app stability and product quality

Symptra uses Firebase Crashlytics for anonymized crash reports and Firebase Analytics for aggregate usage statistics. These services receive:

• Crash logs (stack traces, OS version, device model)
• Anonymous app interaction events (screens viewed, features used)
• Anonymous Identifier for Vendor (IDFV)

Firebase does not receive any health data, user-entered notes, or personally identifying information. Google Signals, audience export to Google Ads, and ad-personalization features are not enabled for Symptra. See Firebase's privacy policy.

2.3 Apple HealthKit: optional health data sync

If you grant permission, Symptra reads weight and body measurements from Apple Health, and writes back the values you log in the app. This is a direct device-to-device exchange. No Apple servers, no Appix servers are involved. You can revoke HealthKit access at any time via Settings → Health on your iPhone.

3. What Symptra does NOT do

• No advertising or ad tracking. No IDFA, no Google Advertising ID, no behavioral profiling, no third-party ad SDKs.
• No sale of personal data. We do not sell, rent, or share user data with third parties for marketing or advertising purposes.
• No cross-app tracking. Symptra does not implement App Tracking Transparency (ATT) because we do not track across apps or websites.
• No user accounts. No email collection, no password storage, no cloud profiles.
• No data brokers. We do not share data with data brokers under any circumstances.

4. International data transfers

Symptra uses services based in the United States (RevenueCat, Firebase). If you use the app from the European Economic Area (EEA), United Kingdom, or Switzerland, the limited anonymous identifiers and metadata described above may be transferred to and processed in the U.S. These transfers are made under appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission. No health data is transferred internationally. Health data remains on your device only.

5. Legal basis for processing (GDPR)

If you are located in the European Economic Area or United Kingdom, our legal basis for processing personal data is:

• Performance of contract (Article 6(1)(b)): for subscription management via RevenueCat when you purchase a subscription.
• Legitimate interests (Article 6(1)(f)): for anonymous crash reporting and aggregate usage analytics that help us improve the app. You may object to this processing.
• Consent (Article 6(1)(a)): for HealthKit data access. You must explicitly grant this via iOS permissions, and you may withdraw consent at any time via iOS Settings → Health.

6. Your rights (EEA / UK)

If you are located in the EEA or UK, you have the following rights:

• Access: request a copy of personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: request limited processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with your local data protection supervisory authority (for example, your country's data protection commissioner).

To exercise these rights, contact hello@appix.fun. We respond within 30 days.

7. California residents (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know: what personal information is collected, used, shared, or sold.
• Right to delete: request deletion of personal information.
• Right to correct inaccurate personal information.
• Right to opt-out of sale or sharing of personal information.
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising these rights.

We do not sell personal information. Symptra has never sold, and will not sell, personal information to third parties. We also do not share personal information for cross-context behavioral advertising.

Categories of personal information collected (CCPA framework)

• Identifiers: anonymous random UUID (RevenueCat), IDFV (Firebase).
• Commercial information: subscription transaction receipts (via Apple In-App Purchase).
• Internet or network activity: aggregate app interaction events (Firebase Analytics).
• Geolocation data: approximate country only, from App Store metadata.

Sources: directly from your device when you use the app.

Business purposes: subscription management, app stability monitoring, product improvement. Not used for advertising, profiling, or sold to third parties.

Categories of recipients: RevenueCat (subscription processor), Firebase / Google (analytics provider), Apple (HealthKit, In-App Purchase).

To exercise California rights, email hello@appix.fun. We may verify your identity before fulfilling requests.

8. Not a medical device

Symptra is a wellness and tracking app, not a medical device. It has not been evaluated or cleared by the U.S. Food and Drug Administration (FDA) or any equivalent regulatory body in any jurisdiction. Symptra is not intended to diagnose, treat, cure, or prevent any disease or medical condition. Always consult a licensed healthcare provider for medical advice regarding your GLP-1 medication and any health concerns.

9. Data retention and deletion

• Local data: stored on your device until you delete entries individually or uninstall the app. Uninstalling Symptra removes everything.
• RevenueCat subscription metadata: retained per RevenueCat's policy. You may request deletion of your anonymous identifier by emailing hello@appix.fun.
• Firebase Crashlytics data: retained per Firebase's policy (typically 60 to 90 days). Anonymized and aggregate.

10. Account deletion

Per App Store Review Guideline 5.1.1(v): Symptra creates no traditional user account. There is no in-app "Delete Account" option because there is no account to delete. Local user data is removed by uninstalling the app. Subscription cancellation is handled via the standard iOS mechanism (Settings → Apple ID → Subscriptions). Your anonymous RevenueCat record can be purged on request via hello@appix.fun.

11. Age requirement

Symptra is intended for adults 18 years and older. We do not knowingly collect personal data from users under 18. If we learn that we have collected data from a user under 18, we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page. Material changes will be communicated through the app (for example, a notice on first launch after the change). Your continued use of Symptra after changes constitutes acceptance of the updated policy.

13. Governing law

This Privacy Policy is governed by the laws applicable to Appix's place of business, without regard to conflict of laws principles. Any disputes shall be subject to the exclusive jurisdiction of competent courts in that location, unless mandatory consumer protection laws in your country of residence provide otherwise.

14. Contact

Data Controller: Appix
Email: hello@appix.fun

For Symptra-specific privacy questions or requests, please include "Symptra" in the subject line.

© 2026 Appix. Symptra is a product of Appix. Ozempic®, Wegovy®, Mounjaro®, Zepbound®, Saxenda®, Victoza®, Rybelsus®, Trulicity® are trademarks of their respective owners. Symptra is not affiliated with Novo Nordisk, Eli Lilly, or any pharmaceutical manufacturer.