Privacy Policy

Introduction

TRT Tracker (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using TRT Tracker, you agree to the collection and use of information in accordance with this policy. We are committed to HIPAA compliance and treating your health data with the highest level of security and confidentiality.

Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (age, weight, height)
• Health information (testosterone levels, injection schedules, symptoms, medications)
• Lab results and medical records you choose to upload
• Notes and observations about your treatment

Automatically Collected Information

When you use our app, we automatically collect:

• Device information (device type, operating system, unique device identifiers)
• Usage data (features used, time spent in app, interaction patterns)
• Log data (IP address, app crashes, system activity)
• Analytics data (app performance metrics, feature usage statistics)

Health Data

TRT Tracker processes sensitive health information including:

• Testosterone and hormone levels
• Injection dates, doses, and sites
• Symptom tracking (energy, mood, libido, etc.)
• Medication schedules and adherence
• Side effects and adverse reactions
• Blood work and laboratory results

Apple HealthKit Data

With your explicit permission, TRT Tracker reads the following data from Apple Health:

• Sleep duration (to suggest sleep hours in daily check-ins)
• Body weight (to suggest weight in daily check-ins)
• Blood pressure (to suggest systolic/diastolic in daily check-ins)
• Heart rate (planned for a future release)

HealthKit data is used only as suggestions for your daily check-ins. You can always edit or ignore suggested values. HealthKit data is never shared with third parties, used for advertising, or stored beyond what is necessary for the app to function. You can disable HealthKit imports at any time in Settings > Health Integration.

AI-Processed Data

TRT Tracker uses AI (powered by OpenAI) for two optional features: (1) parsing lab report photos to extract blood work markers, and (2) generating educational health insights from your self-reported data. When you use these features, relevant data is sent to OpenAI's API for processing. OpenAI does not retain your data for training purposes. AI features are rate-limited to prevent abuse (10 insight requests and 20 lab parses per day). AI-generated content is educational only and does not constitute medical advice.

How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Track your TRT protocol and progress
• Send medication and appointment reminders
• Generate insights and trends about your treatment
• Create reports for you to share with healthcare providers
• Improve our app and develop new features
• Provide customer support
• Send important updates about the app
• Detect and prevent technical issues

Data Sharing and Disclosure

We MAY share your information:

• With your consent: When you explicitly authorize us to share specific information
• With healthcare providers: When you choose to export or share reports
• For legal reasons: If required by law, subpoena, or court order
• To protect rights: When necessary to protect our rights, privacy, safety, or property
• Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

Data Storage

Your data is stored securely using Convex, a real-time cloud database. Data is encrypted in transit (TLS/SSL) and at rest. Authentication is handled through Convex Auth with support for email/password and Sign in with Apple.

Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for stored data
• Secure cloud storage with Convex
• Authentication via Convex Auth (email/password and Sign in with Apple)
• On-device biometric lock (Face ID / Touch ID) for additional privacy
• Rate-limited AI features to prevent abuse

Account Deletion

You can delete your account and all associated data at any time from within the app (Settings > Delete Account). Upon deletion, all your data — including shots, blood work, check-ins, symptoms, protocols, and reminders — is permanently removed from our servers. This action cannot be undone.

Your Rights and Controls

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-out: Disable optional data collection and communications
• Restriction: Limit how we process your information

Contact Us