Privacy Policy

Tracky by DOFA TECH YAZILIM HİZMETLERİ ANONİM ŞİRKETİ

Last Updated: 23.09.2026

Introduction

Tracky is operated by DOFA TECH YAZILIM HİZMETLERİ ANONİM ŞİRKETİ (“we”, “our”, or “us”), which is committed to protecting your privacy.

This Privacy Policy explains how DOFA TECH YAZILIM HİZMETLERİ ANONİM ŞİRKETİ handles information when you use the app.

Tracky is designed to keep your health data private: the health and tracking information you enter into the app (such as injection logs, weight entries, and side effects) remains stored locally on your device and is not transmitted to our servers, with two limited exceptions described in this policy — the summary answers you give during onboarding, and the optional AI Calorie Tracking feature you have to turn on yourself. Tracky also operates backend services that collect limited non-health data to provide features such as push notifications, subscription management, advertising measurement, and product improvement. This policy explains what information we collect, how we use it, and your choices.

Data Collection

2.1 User Accounts & Identifiers

Tracky does not require:

When you first use the app, a random anonymous identifier is generated on your device and linked to a subscription profile. This identifier does not contain your name, email, or any other contact information. It is used solely to associate your device with subscription features and to enable core app functionality.

2.2 Health & Tracking Data

All data you enter into the app, including but not limited to:

is stored locally on your device only.

We do not have access to this data.

We do not receive, store, or process this data on any server, except in the two cases described elsewhere in this policy:

Your ongoing logs — the individual injections, doses, weigh-ins, side effects, and notes you record day to day — are never sent to us.

2.3 Server-Side Data Collection

Tracky operates backend services that collect certain non-health data for the purposes described below. None of the data described in this section includes your health or tracking information (such as injection logs, weight entries, or side effects).

Device & Technical Information

When you use the app, the following technical data may be automatically collected and stored on our servers:

This data is used to provide and improve app functionality, enable push notifications, measure advertising effectiveness, and perform analytics.

User Identifiers

The following identifiers may be collected and stored:

These identifiers are used to associate your device with your subscription, measure advertising campaign performance, and enable analytics, in each case only as far as the choices described in Analytics, Advertising Measurement and Your Choices allow.

Push Notification Token

If you grant notification permission, a Firebase Cloud Messaging (FCM) token is stored on our server to deliver push notifications to your device. This token does not contain personal information and is used solely for sending notifications. You can revoke notification permission at any time in your device settings.

Onboarding Answers

When you finish onboarding — and again if you later switch on medication tracking — a summary of a few of the answers you gave is sent to our server:

The last two questions are only asked if you told us you are already using a GLP-1 medication, and both can be skipped. If you skip them, nothing is sent for them.

These answers are used for product improvement, to understand which groups of users the app serves, and for marketing purposes. They are a one-time summary of how you set the app up: your ongoing injection, dose, weight, and side-effect logs stay on your device and are not sent to us. This summary does not include your dosage amounts, your dosing schedule, your prescriber, or any other medical record.

Because the last two answers relate to a treatment you have started, we treat them with the same care as the rest of your health information: they are stored against your anonymous device identifier only, are never sold, and are not shared with advertising or analytics partners.

Data Storage

Health & tracking data (such as injection logs, weight entries, and side effects) is stored:

We do not operate any backend servers for storing your health or tracking data, with the exception of the onboarding answers described above and the optional AI Calorie Tracking feature described below.

If you delete the app, your health and tracking data is permanently removed from your device unless you have backed it up using your own device backup methods.

Non-health data (as described in the Server-Side Data Collection section above) is stored on secure servers operated by Amazon Web Services (AWS). This data is retained as long as needed for the purposes described in this policy.

Data Sharing

We do not:

Your health and tracking data (such as injection logs, weight entries, and side effects) is never shared with any third party.

Certain non-health technical data (such as device identifiers, IP address, and device information) may be shared with third-party services for advertising measurement and subscription management, as described in the sections below. Section Analytics, Advertising Measurement and Your Choices explains what the analytics and advertising measurement tools receive, what Adjust may pass on to advertising partners such as Meta, and how you can choose whether any of this happens.

In-App Purchases & Subscription Analytics

Tracky uses Adapty, a third-party service, to manage in-app purchases and subscriptions. When you interact with in-app purchases, Adapty may collect and process the following non-health data:

When subscription events occur (e.g., trial started, subscription renewed, cancellation), the following data is stored on our servers for internal analytics and product optimization:

Adapty does not receive any of your health or tracking data (such as injection logs, weight entries, or side effects).

Adapty reports purchases, trial starts and subscription renewals to Adjust and to Google Analytics for advertising measurement, subject to the choices described in Analytics, Advertising Measurement and Your Choices. Adapty collects your Identifier for Advertisers only where that section allows it.

For more information about how Adapty handles data, you can review Adapty's privacy policy.

Analytics, Advertising Measurement and Your Choices

The Tracky app includes software from the following partners, which we use to understand how the app is used and to measure the advertising campaigns that bring people to Tracky:

Tracky does not include the Meta SDK, the TikTok SDK or any other advertising network's software, and it does not show ads.

When these tools run they may receive device identifiers (such as the Identifier for Advertisers on iOS, the Advertising ID on Android, and the Identifier for Vendors), your IP address, device and app version information, the screens you open, and app events such as installing the app, opening it, starting and finishing onboarding (the name of each onboarding step, not your answers) and making a purchase. Purchases, trial starts and subscription renewals also reach Adjust and Google Analytics from our subscription provider, Adapty, and our servers report to Adjust when a free trial has started and has not been cancelled within the first hour. These tools do not receive your health or tracking data (such as injection logs, doses, weight entries, side effects or personal notes), your onboarding answers, or your food photos.

Sharing with advertising partners through Adjust

The app does not send anything to Meta, Google Ads, TikTok or Apple Search Ads itself. Instead, Adjust may report some of the app events described above (such as installing the app, opening it, finishing onboarding, or starting a trial, making a purchase or renewing a subscription) to those advertising partners — for Meta, through the Meta Conversions API — so that our ads can be measured. Together with each event Adjust may share your device's advertising identifier where it is available, your IP address, your device's user agent, device and app information, and your anonymous Tracky identifier, which Meta uses to recognise events from the same installation. The partners use this to match the event to their ads for measurement. Adjust does not receive your email address (Tracky never asks for one), your health or tracking data, or your food photos.

This sharing follows the same rules as the rest of this section: in the European Economic Area, the United Kingdom and Switzerland it only happens if you have allowed analytics and advertising measurement, and it stops as soon as you withdraw that choice.

Your consent

If you are in the European Economic Area, the United Kingdom or Switzerland (as set in your device's region settings), these tools only run with your consent (Article 6(1)(a) GDPR and the equivalent UK and Swiss rules). The app asks you once, before onboarding and before any of them starts, with an equal choice to allow or not allow, and none of them sends anything until you answer. Both choices give you the full app.

If you do not allow them:

Elsewhere, these tools run on the basis of our legitimate interest in understanding and promoting our services, subject to the controls described below.

We keep a record of the choices you make on the consent screen, in the in-app setting and in Apple's tracking prompt: what was shown, your answer, when, the version of the text you saw, your device's region, platform and app version. We keep it so that we can show that consent was given or refused, for as long as we keep the anonymous identifier it is linked to.

Changing your choice

For more information about how these partners handle data, you can review the privacy policies of Google, Adjust, Meta and TikTok.

Apple Search Ads Attribution

If you installed Tracky through an Apple Search Ads campaign, attribution data may be stored on our servers, including: campaign name, ad set, ad group, creative set, and a network-assigned user identifier. This information is used to measure the effectiveness of our advertising campaigns on the App Store and is not shared with other third parties.

Our website

When you open a download link on getglp.one, our website records the visit (IP address, user agent, operating system, time zone, language, screen size and the campaign in the link) so that we can tell which of our campaigns led to an install, by matching it to the same technical information when the app first opens. Our website does not use advertising cookies.

We may also use basic, privacy-respecting system-level diagnostics provided by Apple (such as anonymous crash reports), which do not contain personally identifiable health information and are controlled by your device settings.

Apple Health Integration (If Applicable)

If you choose to enable Apple Health integration:

You can revoke access at any time via iOS Health settings.

AI Calorie Tracking (Optional Feature)

If you choose to use the AI Calorie Tracking feature, Tracky processes food photos to estimate nutritional content. This feature requires explicit opt-in consent before first use.

Photo Processing

Data Stored

When you use the AI Calorie Tracking feature, the following data is stored on our servers:

To be clear: your health and medication data — including injection/dose logs, weight entries, BMI, side effects, and personal notes — is never stored on our servers. That data remains exclusively on your device at all times. Only the AI-generated food analysis results from the Calorie Tracking feature are stored server-side.

Third-Party AI Partners

Photos are processed by AI inference providers to perform food recognition and nutritional estimation. These providers receive only the food photo and a text prompt — no personal or health information is shared with them.

Your Rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing (including processing based on our legitimate interest), to receive it in a portable format, and to withdraw your consent at any time.

You can withdraw your consent to analytics and advertising measurement at any time inside the app (see Analytics, Advertising Measurement and Your Choices) and exercise your other rights by contacting us at the address in the Contact section. Because Tracky does not ask for your name or email, please include the User ID shown at the bottom of the app's Settings screen so we can find your data. Withdrawing consent does not affect processing that happened before you withdrew it.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your local data protection authority. If you are in Turkey, you may apply to us under Article 11 of the Personal Data Protection Law No. 6698 (KVKK) and, if your request is not resolved, to the Personal Data Protection Authority (KVKK).

Children's Privacy

Tracky is not intended for individuals under the age of 18.

We do not knowingly collect personal data from children.

Security

Your health and tracking data is stored locally on your device and remains under the security protections provided by your device's operating system.

Non-health data stored on our servers is protected using industry-standard security measures, including encrypted connections (HTTPS/TLS) for all data transmission and secure cloud infrastructure provided by Amazon Web Services (AWS).

Trademark Notice

Tracky is an independent application and is not affiliated with, endorsed by, or sponsored by any pharmaceutical company.

Medication names such as Mounjaro®, Ozempic®, Wegovy®, and Zepbound® are registered trademarks of their respective owners and are used for informational purposes only.

Medical Disclaimer

Tracky is a lifestyle and tracking tool for informational purposes only.

The app does not provide medical advice, diagnosis, treatment, or clinical recommendations.

Always consult a qualified healthcare provider before making medical decisions.

Tracky is not a medical device.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by revising the “Last Updated” date above.

Contact

If you have questions about this Privacy Policy, you may contact us at:

tracky@dofatech.com

DOFA TECH YAZILIM HİZMETLERİ ANONİM ŞİRKETİ