Privacy Policy

This Privacy Policy applies to:

• The GLP Protein iOS and Android mobile applications
• Our website and any web pages that link to this policy
• Customer support, email communications, and in-app features

This policy does not apply to third-party websites, app stores, or services that we do not control (such as Apple, Google, payment processors, or AI providers), even if you access them through the Service.

We collect information in the following categories.

3.1 Information You Provide Directly

We do not intentionally collect government-issued IDs, full medical records, or prescribing information.

3.2 Information Collected Automatically

We do not use the Service to track you across unrelated third-party apps or websites for advertising purposes.

3.3 Information from Third Parties

We do not receive your full payment card number. Payment processing is handled by Apple or Google under their own privacy policies.

We use personal information to:

1. Provide the Service — authenticate you, sync data, calculate nutrition and lean-mass protection metrics, and display dashboards and history.
2. Analyze meals — process meal photos and notes using automated systems to estimate calories, protein, and related nutritional values.
3. Power the coach feature — generate supportive, educational responses using large language models, subject to safety filters.
4. Manage subscriptions — verify premium access, send subscription-related reminders (if enabled), and process entitlement updates.
5. Send communications — deliver account emails (e.g., password reset codes), service announcements, and optional push reminders.
6. Maintain security — detect abuse, enforce rate limits, prevent fraud, and protect accounts.
7. Improve the Service — analyze aggregated or de-identified usage patterns to fix bugs and develop features.
8. Comply with law — respond to lawful requests and enforce our Terms and Conditions.

We do not sell your personal information. We do not use your health-related data for third-party advertising.

When you upload a meal photo:

• The image is stored temporarily on our servers for analysis.
• Meal images are automatically deleted within approximately five (5) minutes after upload, unless a technical failure prevents deletion.
• Nutritional analysis results may be retained longer (typically up to sixty (60) minutes for pending analyses) so you can review and log meals.
• Once you log a meal, we retain the nutritional estimates and food item descriptions, not the original photo, unless you choose to save or re-upload an image.

This design limits how long sensitive visual data remains on our systems.

GLP Protein uses artificial intelligence and automated systems to:

• Estimate nutritional content from meal images
• Generate in-app coaching responses
• Score onboarding questionnaires and wellness metrics

When you use AI features, relevant portions of your input (e.g., meal descriptions, coach messages, and temporarily stored images) may be transmitted to third-party AI providers under contractual safeguards. We apply usage limits to prevent abuse and manage costs.

We share personal information only as described below.

7.1 Service Providers

We use trusted vendors who process data on our behalf, including providers for:

• Cloud hosting and database infrastructure
• AI and machine learning APIs
• Subscription management (RevenueCat)
• Email delivery (SendGrid)
• Push notifications (FCM / APNs)
• Error monitoring and analytics (if enabled)

These providers are authorized to use your information only as needed to perform services for us and are required to protect it.

7.2 Legal and Safety Disclosures

We may disclose information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms and Conditions or other agreements
• Protect the rights, property, or safety of GLP Protein, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

7.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

7.4 With Your Consent

We may share information for other purposes with your explicit consent.

We retain personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or de-identify your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business needs (e.g., resolving disputes).

9.1 Account and Profile

You may update profile fields and notification preferences in the app Settings. You may request account deletion by contacting support@orblogic.com .

9.2 Push Notifications

You can disable push notifications in your device settings or in-app notification preferences. Disabling notifications does not delete your account.

9.3 Marketing Communications

We do not send unsolicited marketing emails without consent. Transactional emails (e.g., password resets) are necessary to operate your account.

9.4 Regional Privacy Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information
• Restrict or object to certain processing
• Data portability — receive a copy of your data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

We will respond to verified requests within the timeframe required by applicable law.

You can request deletion of your account and the personal data associated with it at any time by emailing support@orblogic.com from the address linked to your account, with the subject line Delete my GLPProtein account. We aim to complete verified deletion requests within 30 days.

GLPProtein is intended for adults 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact support@orblogic.com and we will delete it promptly.

We may process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws different from your jurisdiction. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

We implement administrative, technical, and organizational measures designed to protect your information, including:

• Password hashing and secure authentication tokens
• Encrypted connections (HTTPS/TLS) for data in transit
• Access controls and least-privilege practices for production systems
• Automatic deletion of meal images after short retention periods
• Rate limiting and abuse monitoring

No method of transmission or storage is completely secure. You are responsible for keeping your password confidential and notifying us of unauthorized access.

The Service may link to third-party sites or services. We are not responsible for their privacy practices. Your use of Apple App Store or Google Play is governed by their respective policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the app, email, or a website notice. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

For privacy questions, requests, or complaints:

GLP Protein is a self-help wellness tool for informational and educational purposes. It is not a medical device and does not provide medical advice, diagnosis, or treatment.