← Back to Home

Privacy Policy

Last Updated: February 24, 2026

Note about Health Data: InjectionLog handles sensitive health information including medication names, dosages, and injection records. We treat this data with the highest level of care and never use it for advertising purposes.

1. Information We Collect

InjectionLog collects the following categories of data. All data collected is associated with your account unless otherwise noted.

Contact Information (linked to your identity)

  • Name — collected via Google or Apple Sign-In; stored with your injection records
  • Email address — used to authenticate your account and personalize your experience
  • Phone number — optionally provided when adding contacts (coaches, practitioners, partners)

Health & Fitness (linked to your identity)

  • Health data — medication/compound names (e.g., Semaglutide, BPC-157), dosages, injection sites, injection timestamps, vial information, reconstitution data, prescribed doses, frequencies, and any notes you add to your logs. This data is stored in your account and is never used for advertising.

Contacts (linked to your identity)

  • Contact records — names and contact details for coaches, practitioners, or partners you choose to share compounds with

User Content (linked to your identity)

  • Photos or videos — optional per-injection photos you take or select from your library, uploaded to secure cloud storage
  • Other user content — free-form notes attached to compounds or injection log entries

Identifiers (linked to your identity)

  • User ID — your Firebase account identifier, used to associate all app data with your account
  • Device ID — your device's advertising identifier, collected by our advertising partner (Google Mobile Ads) and used to serve ads. See the Tracking & Advertising section below.

Usage Data (not linked to your identity)

  • Product interaction — aggregated, anonymous data about how you use the app (e.g., screen visits, feature usage), collected via Firebase Analytics
  • Advertising data — information about ads served to you within the app, collected by Google Mobile Ads

Diagnostics (not linked to your identity)

  • Crash data — crash logs and stack traces collected by Firebase Crashlytics to help us fix bugs
  • Performance data — app launch times, hang rates, and other technical metrics

2. How We Use Your Information

Data Type Purpose
Name App Functionality, Product Personalization
Email Address App Functionality, Product Personalization
Phone Number App Functionality
Health Data App Functionality, Product Personalization (site rotation, draw reference, vial expiry)
Contacts App Functionality (compound sharing with coaches/practitioners)
Photos or Videos App Functionality
Other User Content App Functionality
User ID App Functionality, Analytics
Device ID Third-Party Advertising, Analytics
Product Interaction Analytics
Advertising Data Third-Party Advertising
Crash Data App Functionality (stability)
Performance Data App Functionality (stability)

3. Tracking & Advertising

InjectionLog displays ads served by Google Mobile Ads. Google may use your device's advertising identifier (IDFA on iOS) to serve targeted advertisements based on your activity across apps and websites owned by other companies. This constitutes "tracking" as defined by Apple's App Tracking Transparency framework.

On iOS, you will be asked for permission before your advertising identifier is used for ad tracking. You may change this permission at any time in Settings → Privacy & Security → Tracking.

Your health data is never used for advertising purposes. Ad targeting is based solely on your device identifier, not on any health or medical information you log in the app.

4. Third-Party Services

InjectionLog integrates the following third-party services, each with their own privacy practices:

5. Data Sharing

We do not sell your personal or health data to any third party. Data is shared only in the following circumstances:

  • With people you choose: When you share a compound with a coach, practitioner, or partner, they can view that compound and its associated data.
  • With service providers: Firebase and Google process data on our behalf as described above.
  • For advertising: Google Mobile Ads may receive your device identifier for ad serving as described in the Tracking & Advertising section.
  • Legal requirements: If required by law or to protect rights and safety.

6. Data Security

All data is encrypted in transit (TLS) and at rest. We use Firebase (Google Cloud infrastructure) for secure data storage. Access to your data requires authentication. We regularly review our security practices to protect your health information.

7. Data Retention

Your data is retained as long as your account is active. If you delete your account, all associated data (compounds, injection logs, photos, contacts) is permanently deleted from our systems. Anonymized, aggregated analytics data that cannot be linked back to you may be retained.

8. Your Rights

You have the right to:

  • Access all data associated with your account
  • Correct inaccurate data
  • Delete your account and all associated data
  • Opt out of ad tracking via iOS Settings → Privacy & Security → Tracking
  • Opt out of non-essential communications
  • Withdraw consent for data sharing with contacts you have previously added

9. Children's Privacy

InjectionLog is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy questions or data requests, contact us at: privacy@injectionlog.com