Privacy Policy: Sheva GLP (שבע GLP)

Last updated: 4 October 2026
What changed in this revision: usage data (only if you agreed) is now stored by PostHog in the United States instead of the European Union, in an analytics project shared with our other app (sections 6 and 12).

Controller (the party responsible for your data): Amir Angel, licensed dealer (Osek Murshe), Israel. Email: support@hustlemania.dev.

This policy explains what information the Sheva GLP app for iPhone and Android phones ("the App") keeps, where it is kept, what leaves your device and when, and your rights. The App has no user accounts, and we have no server that receives your entries. The policy was written for the iPhone; on Android, wherever it says "iPhone" it means your phone, Health Connect takes the place of Apple Health (section 3), and payments go through Google Play (section 5).

1. Summary

• Everything you log (shots, doses, weight, side effects, measurements, check-ins, costs, reminders, notes and photos) is stored on your iPhone only. It is not sent to us, and we have no access to it.
• The App does not sync your data to iCloud or any cloud service.
• Health Connect (on Android): weight only, read and write, and only if you allow it. The data stays on your phone, is never sent to us or anyone else, and is never used for advertising (section 3).
• Apple Health: body weight only, and only if you allow it. Data from Apple Health is never used for advertising or marketing, and we never share it. It goes into a doctor summary or share card only if you choose.
• Usage data is off by default. Only if you agree at the end of onboarding (or in Settings) does the App send general usage events to PostHog, on servers in the United States, with no health data at all, no drug name and no amounts.
• A backup file, a doctor summary (PDF) and a share card are created only when you ask, and leave the App only to wherever you send them.
• Payments are handled entirely by Apple (on iPhone) or Google Play (on Android). We don't sell data, don't use it for advertising and don't track you.

2. Information that stays on your device

Your iPhone's own backup. The App itself sends nothing to iCloud. However, if you turned on iCloud Backup or computer backups on your iPhone, iOS may include the App's data (including photos) in that backup, under your settings and Apple's terms.

Android backup. On Android, the App marks its database and photos so they are not included in Android's backup to your Google Account and are not moved in a transfer to a new phone. Other technical settings, which are not your entries, may be included in that backup, under your settings and Google's terms.

Photos and Face ID. You take a photo with the camera or import one from your photo library (iOS asks for your permission), and a copy is kept only in the App. For an imported photo, the App reads the capture date on the iPhone only and doesn't keep the rest of the photo's metadata. The Face ID lock is handled by iOS; the App never receives face data. On Android, the lock uses biometrics or your phone's screen lock and is handled by Android; the App never receives biometric data.

3. Apple Health and Health Connect

If you allow it, the App reads and writes body weight only in Apple Health. Reading: the App imports weights from Apple Health into the journal, and on the "התחלתם לפני האפליקציה?" (started before the App?) screen you can also import past weights from your treatment start. Writing: a weight you log in the App is also saved to Apple Health. All of this happens on your iPhone.

Data from Apple Health is never used for advertising, marketing or usage data, and we never share it with third parties. Weights read from Apple Health are not included in the backup file, and go into the doctor summary or share card only if you turn on "לכלול משקלים מ־Apple Health" (include Apple Health weights) on that screen. The switch is off by default every time the screen opens; when it is off, only weights you logged in the App are included. You can revoke access at any time in the App's Settings or in the Health app. Deleting a weight in the App, or deleting all data, does not delete it from Apple Health.

Health Connect (on Android)

On Android, instead of Apple Health, the App can use Health Connect if you allow it. The App requests only two permissions: read weight and write weight (the "Weight" data type in Health Connect). It does not request any other data type, does not read in the background and does not request access to older history.

• Reading (off until you turn on "קריאת משקל" (read weight) in Settings → Health Connect, or tap the link to read weight from Health Connect): weigh-ins saved in Health Connect, for example from a smart scale or another app, appear in the chart and the journal. Health Connect lets the App read weights from 30 days before you granted access onwards.
• Writing (off until you turn on "כתיבת משקל" (write weight)): a weight you log in the App is also saved to Health Connect, so your other health apps see it. Weights read from Health Connect are never written back to it.

Why and how the data is used. Only to show your weight in the App and to save what you logged to Health Connect. The data moves only between the App and Health Connect on your phone. It is never sent to us (we have no server), to analytics or to any third party, is never used for advertising or marketing, is never sold, and is never used to determine eligibility for credit, insurance or employment. Weights read from Health Connect are not included in the backup file, and go into the doctor summary or share card only if you turn on the switch that adds weights from the health app on that screen. The switch is off by default every time the screen opens. Weights that were read stay in the App's journal until you delete them or all data.

Your control. You can turn reading or writing off at any time in the App's Settings, and revoke the permissions in Health Connect's settings (in your phone's Settings or the Health Connect app, under "App permissions"). Turning reading off or revoking access doesn't delete weigh-ins already added to the journal; you can delete them in the App. Deleting a weight in the App, or deleting all data, does not delete it from Health Connect; you can delete it in Health Connect.

Limited Use. The App's use of information received from Health Connect adheres to the Health Connect permissions policy on Google Play, including its Limited Use requirements.

4. Information you choose to send

These three files are created only when you ask, and open in the iOS share sheet. The App never sends them by itself, and it deletes its temporary copy once the share sheet closes.

• Encrypted backup file (.ybak): includes all your entries, including measurements and check-ins, your profile (name, form of address, birth year, height and sex) and your research-average choice, except photos, weights read from Apple Health, Pro status and your usage-data choice. The file is encrypted (AES-256-GCM) with a passphrase you choose. We don't keep the passphrase and can't recover it; without it the file can't be opened.
• Doctor summary (PDF): includes the date range and sections you choose: doses, weight and side effects (on by default), and costs and notes (off by default), plus a name and health fund if filled in (the name is pre-filled from your profile, and changing it here also updates your profile), and birth year, height and sex if you filled in the medical profile. Water and protein are included if you logged them. Apple Health weights are included only if you turn on "include Apple Health weights". It never includes body measurements, check-ins or photos.
• Share card: an image with your weight change (you can hide it), the number of weeks, a curve with no values and month names, and an App Store link. Apple Health weights are in the curve only if you turn on "include Apple Health weights". No absolute weight, dose, drug name, measurements, check-ins or costs.

Once you send a file (for example on WhatsApp or by email), it has left the App and our control, and the terms of the service you used and of the recipient apply.

5. Purchases

Subscriptions are processed by Apple through the App Store under your Apple Account, under Apple's privacy policy (https://www.apple.com/legal/privacy/). The App only receives a confirmation from Apple (via StoreKit, on your iPhone) of which product is active, so it can unlock Pro. We use no third-party subscription service and never receive payment details. We receive aggregated sales reports from Apple that do not identify you.

On Android, subscriptions are processed by Google through Google Play, under your Google Account and Google's privacy policy (https://policies.google.com/privacy). The App only receives from Google Play (via Google Play Billing, on your phone) which subscriptions are active and which offers are available to you, such as whether you are eligible for the free trial, and acknowledges the purchase with Google Play so that it completes. In Google Play Console we can see the order details Google shows developers (for example the order ID, subscription, price and status), and we use them only to handle cancellations, refunds and your requests. Payment details never reach us.

6. Usage data (off by default)

Your choice. At the end of onboarding the App asks whether to share usage data, with two equal buttons ("כן, לשתף" / "לא, תודה"). Nothing is sent until you agree, and nothing is sent after "לא, תודה". You can change your choice at any time in Settings → "נתוני שימוש" (usage data). The App works exactly the same either way.

What is sent if you agreed:

• A random installation identifier the App creates on install and keeps on your iPhone (not your Apple or Google account, not an advertising identifier (the IDFA, or Android's advertising ID), and not linked to your name). You can see it in Settings → "מזהה התקנה" (install ID). It is sent only with usage data, i.e. only if you agreed.
• General usage events from a fixed list, for example: an entry was saved (no value; for water, protein and meal size also the type), onboarding finished, a screen was opened (the screen name, e.g. "home" or "graph"), the upgrade screen was shown, a purchase was made (yearly or monthly, with or without a trial), a backup, PDF or share card was created (not its content), a reminder was set, a photo was saved (not the photo), a badge was earned (only the badge id, e.g. "4 weeks of tracking"). Plus technical details the analytics tool attaches to every event (e.g. app version, device model, iOS or Android version and language), without the device name.

What is never sent: weight, dose, drug name, injection site, side effects, measurements, check-ins, amounts, notes, photos, Apple Health or Health Connect data, your name, form of address, birth year, height, sex, your research-average choice (with or without diabetes), contact details or location. There is no screen recording, no automatic tap capture, and no error reporting through PostHog.

IP address and location. The analytics servers necessarily see your IP address when data is sent. The App asks PostHog not to derive location from it, and our PostHog project is set to discard the IP address, so it is not stored with the usage data. There is no session replay.

Why. Only to understand how the App is used, where people get stuck and what to improve. Not for advertising, profiling, or combining with other sources.

Who receives it, and where. PostHog Inc. is a service provider that processes the usage data on our behalf under its own terms and privacy policy (https://posthog.com/privacy). The data is stored on PostHog's US Cloud (https://us.i.posthog.com), in the United States.

One analytics project for our apps. The usage data is kept in the same PostHog project as our other app, "שלט לטלוויזיה" (TV Remote), and every event from this App is tagged as coming from Sheva GLP. Each app creates its own random install ID. We don't send PostHog any identifier shared by the two apps, don't create user profiles, and don't link or combine usage data from the two apps.

Retention. Usage data is kept for a limited period needed for analysis, and then deleted.

Crashes. The App has no third-party crash-reporting tool. If you turned on "Share With App Developers" on your iPhone, Apple may share crash reports with us, under your iPhone settings. On Android, if you turned on sharing usage and diagnostics data with Google on your phone, Google may show us crash and error data in Google Play Console, under your settings.

7. Other technical connections

• App updates: a few seconds after launch the App checks for an update with EAS Update, a service of 650 Industries, Inc. ("Expo", u.expo.dev), and downloads it. This happens whether or not usage data sharing is on, because this is how the App receives fixes. Each check sends Expo your device's IP address, a random update ID the App creates the first time it checks (different from the install ID in section 6), and technical details (the platform, runtime version, update channel and the IDs of installed updates), and, if the App crashed within its first seconds, a short technical description of that error. None of your entries is sent. Expo processes this data as our service provider, only to deliver updates, under its privacy policy (https://expo.dev/privacy), and may process it in the United States.
• Apple: the App Store, StoreKit and Apple Health operate under Apple's privacy policy.
• Google: on Android, Google Play and Google Play Billing operate under Google's privacy policy. Health Connect is a part of Android that runs on your phone.

8. Notifications

Reminders are local notifications scheduled by your iPhone; they don't go through any server. By default they are discreet, with no drug name or word about a shot on the lock screen. There are no marketing notifications.

9. What we do NOT do

• No tracking across other companies' apps or websites (so the App does not show Apple's "Allow tracking" prompt).
• No advertising SDKs, no install-attribution tools, no data brokers.
• No sale or rental of data.
• No marketing messages.

10. Deleting your data

• Settings → "מחיקת כל הנתונים" (delete all data) deletes all entries, reminders and photos from your iPhone, and the usage-data question will be asked again. Deleting the App also deletes the data from your iPhone.
• Deletion is final. We have no copy and no way to recover your data.
• It does not cover files you exported or sent (backup, PDF, share card), weights in Apple Health or Health Connect, or your iPhone's iCloud or computer backup.
• Usage data: turn sharing off in Settings, and nothing more is sent from that moment. To delete data already sent, send us your install ID (section 11).

11. Legal basis and your rights

We act in accordance with the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13), and its regulations. What you log is health information, i.e. information of special sensitivity, which is why it is stored on your device only. You are under no legal obligation to provide any information: usage data is sent only with your consent, and you can withdraw it at any time.

Access, correction and deletion. You can see, correct and delete all your entries in the App itself. Usage data is not linked to a name, email or phone number, only to the install ID. To ask for access to it or its deletion, tap "מזהה התקנה" (install ID) in Settings, copy the ID and send it to support@hustlemania.dev, and we'll handle the data kept under that ID. If the App was deleted from your iPhone, the ID went with it and we can't locate the data; in any case it is deleted at the end of the retention period.

Privacy inquiries: support@hustlemania.dev. We'll reply within 3 business days, and handle access, correction or deletion requests within the periods set by law.

You may complain to the Israeli Privacy Protection Authority (https://www.gov.il/he/departments/the_privacy_protection_authority).

12. Data transfers outside Israel

Usage data (only if you agreed) is transferred to and stored in the United States by PostHog, which processes it under its own terms and privacy policy. Usage data is off by default, so this transfer happens only after you agree to share usage data, and you can stop it at any time in Settings. Update checks go to Expo (section 7), which may process them in the United States. Transfers of personal data from Israel abroad are subject to the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

13. Security

Data is kept in the App's private storage on your iPhone, protected by your passcode. You can lock photos with Face ID (on Android: biometrics or your phone's screen lock). The backup file is encrypted with your passphrase. Usage data is sent over encrypted connections (HTTPS), and access to the analytics dashboard is limited to the developer only.

14. Not medical advice

The App is a personal journal. It is not a medical device and does not replace medical advice.

15. Children

The App is not intended for anyone under 18.

16. Changes

If we change this policy we'll update the date above and post a notice in the App or on the website. For material changes (for example a new type of data leaving the device or a new recipient) we'll ask for consent where required.

17. Governing law

This policy is governed by the laws of the State of Israel, and the competent courts in Israel have jurisdiction. This does not limit any mandatory right you have to sue in your place of residence.

18. Contact

Amir Angel, licensed dealer (Osek Murshe) · support@hustlemania.dev

Apple, Apple Health and iCloud are trademarks of Apple Inc. Android, Google Play and Health Connect are trademarks of Google LLC. Wegovy, Ozempic and Saxenda are trademarks of Novo Nordisk A/S, and Mounjaro is a trademark of Eli Lilly and Company. Medication names appear in the App only to identify them. This App is an independent product and is not affiliated with, endorsed by or sponsored by Novo Nordisk or Eli Lilly.