GLP Strong Privacy Policy
This Privacy Policy explains how Syno Labs LLC ("Syno Labs", "we", "us") collects, uses, shares and protects personal information when you use the GLP Strong app for iPhone (the "App") and related services (together, the "Service").
Controller / operator: Syno Labs LLC, a Wyoming limited liability company, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA.
Contact: support@synostudios.com
Website: https://www.synostudios.com/glp-strong/privacy
GLP Strong is for adults aged 18 and over in the United States.
1. Summary
- GLP Strong helps you with a daily protein target, a strength plan and a log of your medication shots. This is health information, and we treat it as sensitive.
- Your health information stays on your device. The protein, strength, check-in and shot-tracker data you enter is stored in the App on your iPhone. We do not run an account system and we do not copy that data to our servers.
- We do not use analytics, advertising, attribution or crash-reporting SDKs in the App, and we do not sell your personal information or use it for advertising.
- The App does not send your health information to any third party, including in network requests, logs and crash reports.
- Two third parties handle limited data: RevenueCat (subscription status) and, only if you use paid photo logging, Google Firebase and an image-analysis provider (the photo itself, and nothing else).
- You can delete everything the App has stored from inside the App, and export your data, as described in section 8.
2. Information we collect
2.1 Information you give the App (stored on your device)
| Data | Details | Where it is kept |
|---|---|---|
| Profile and body details | Details you enter to work out your protein target and tailor your plan, such as your age, body weight and training experience | On your device |
| Medication and shot log | The date and time of each shot you log, and a dose value you type in yourself, plus any note you add. The App stores the dose exactly as you typed it and does not calculate with it. | On your device |
| Check-ins and safety answers | Your answers to readiness and safety questions, and the dates you pause or resume your sessions | On your device |
| Protein and food entries | Foods and amounts you log toward your daily protein target | On your device |
| Strength sessions | Workouts you do and complete, and the weights and repetitions you record | On your device |
| Reminder settings | Whether and when you want reminders | On your device |
| Support messages | Anything you email us | With us, as email |
2.2 Information the App reads or creates when you use it
| Data | Details |
|---|---|
| Apple Health (optional) | If you allow it, the App reads certain Health values from Apple Health. Access is read-only. The App does not write to Apple Health. Values you read in from Health stay on your device. |
| Notifications | Reminders are created on your device. By default the text is generic and does not mention a brand or a dose. You can opt in to more detail. |
| Purchase and subscription data | Whether you have an active subscription, the product, the renewal and trial status, your storefront (country) and an anonymous RevenueCat identifier. We never receive your card details; Apple handles payment. |
| Device and technical data | Device model, operating system and App version, language and region, and the IP address and standard logs that our providers create when the App connects to them |
| Photos for food logging (paid, optional) | If you turn on photo logging and take or choose a photo of a meal, the App removes the photo's metadata, reduces its size and re-encodes it on your device, and sends only that image for analysis. Photo logging has its own consent screen, and you can use the App without it. |
2.3 What we do NOT collect
- An account: the App has no sign-up and no email, phone number or name is required.
- Your health data on our servers: your profile, shot log, check-ins, food entries and sessions are not uploaded to us.
- Analytics, advertising, session-replay, attribution or crash-reporting data: the App contains none of these SDKs.
- Precise location, contacts or microphone access. The camera is used only if you choose photo logging.
- Spotlight or Siri indexing of your health content. The App does not add your health information to Spotlight, Siri suggestions or similar system features.
3. How we use information (and legal bases)
| Purpose | Data | Basis |
|---|---|---|
| Provide the App: calculate your protein target, build and track your plan, log your shots and send reminders you ask for | Data stored on your device | Contract; your consent for health data |
| Process subscriptions and unlock paid features | Purchase and subscription data | Contract; legal obligation (record keeping) |
| Analyse a meal photo you choose to send | The processed image | Your consent, given on the photo-logging screen |
| Protect the photo service from abuse and cost abuse | Technical data and short-lived request counters (kept for 24 hours at most) | Legitimate interest |
| Customer support | Your email and what you tell us | Contract / legitimate interest |
| Comply with law and enforce our Terms | As needed | Legal obligation / legitimate interest |
We do not use your information for advertising, we do not build advertising profiles, and we do not use automated decision-making that has legal or similarly significant effects on you. The App's guidance is informational, as explained in the Terms of Use.
4. Who can see your information
GLP Strong has no social features. Nobody else can see your profile, shot log, check-ins, food entries or sessions through the App. Anything stored on your device is protected by your device passcode and iOS data protection. The App hides its content in the app-switcher snapshot on sensitive screens. If you share your phone, or share data you export, others may see it.
5. Sharing and service providers
| Recipient | Role | Data | Location |
|---|---|---|---|
| RevenueCat, Inc. | Processor: subscription management | Anonymous app user ID, purchase receipts, entitlement status, device and region details, IP address. No health data. | USA |
| Apple Inc. | Independent controller for payments; provider of Apple Health and notifications on your device | Payment is handled by Apple. We do not receive your card details. | USA / global |
| Google LLC (Firebase App Check and Cloud Functions) | Processor: authenticates the App and runs the photo service. Used only for photo logging. | The processed meal image, App attestation data and short-lived request counters. No health data. | USA |
| Image-analysis provider | Processor: reads a meal image and returns an estimate of its protein content | The processed meal image only, with a fixed instruction. Not linked to your identity. | USA |
| Authorities / legal | When required by law, or to protect rights and safety | As required | — |
| Successor | In a merger, acquisition or asset sale, with notice to you | As needed | — |
We do not sell personal information and we do not "share" it as defined in the CCPA/CPRA for cross-context behavioral advertising. We send a meal image to the image-analysis provider only to analyse it. Our photo service does not keep the image after it returns the result, and request logging is turned off for it.
6. Health information and US state laws
The information you enter into GLP Strong about your body, medication and wellbeing is health information. Several US states (for example Washington, Nevada and Connecticut) and the FTC have rules for consumer health data. We collect it only on your device and with your action, we do not sell it, we do not share it for advertising, and we do not send it to third parties. You can access, export and delete it in the App at any time. GLP Strong is not a covered entity under HIPAA, and your information is not protected health information under HIPAA.
7. Retention
| Data | Retention |
|---|---|
| Data stored in the App on your device | Until you delete it, delete all data in the App, or delete the App. Backups you make through iCloud or your computer are controlled by you and Apple. |
| Photo-service request counters | 24 hours at most |
| Meal images sent for analysis | Not kept after the result is returned |
| Subscription records held by RevenueCat | For as long as needed for billing, tax, consumer-protection and dispute purposes, up to 5 years |
| Support emails | For as long as needed to answer you and keep our records |
8. Your rights and choices
- Delete all local data: the App has a "Delete all local data" option. It erases the App's database, settings, saved files and caches, temporary image files, and pending and delivered notifications. It cannot erase backups you or Apple have already made, or copies held by providers, such as subscription records at RevenueCat. Deleting the data or the App does not cancel an Apple subscription. Cancel it in Settings → your name → Subscriptions.
- Export your data: the App can create a CSV or JSON export that you control.
- Access, correct or delete what we hold: email support@synostudios.com with the subject "GLP Strong privacy request". Because we do not run accounts, we hold very little, and we may ask for details to find it. Depending on where you live, you may also have the right to appeal, and to complain to your state attorney general or other regulator.
- Apple Health: you can turn off access at any time in the Health app or in Settings → Privacy & Security → Health.
- Notifications and photo logging: you can turn either off at any time in the App or in iOS Settings.
- California and other US residents: you can ask us what we hold, ask us to delete it, and ask us not to sell or share it. We do not sell or share it, and we will not discriminate against you for asking.
9. Children
GLP Strong is for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has used the App, email us and we will help you remove the data.
10. Security
Your health data stays on your device and is protected by iOS data protection and your passcode. Connections to RevenueCat and to our photo service use encryption in transit (TLS). The photo service accepts only requests from the genuine App, verified by Firebase App Check and your Apple-signed purchase. No system is completely secure. If a breach affects you, we will notify you and regulators as the law requires.
11. Changes
We may update this policy. For material changes we will notify you in the App before they take effect and update the date above. If you continue to use the Service after the effective date, you accept the changes. If you do not agree, delete the App.
12. Contact
Syno Labs LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA · support@synostudios.com