Privacy Policy

Last updated: 27 October 2026

This Privacy Policy explains how Foldbay Technologies FZE LLC ("Foldbay", "we", "us", "our") collects, uses, stores and protects your information when you use the GLP-1 Companion mobile app and related services (the "App").

Foldbay Technologies FZE LLC is a company registered in the Ajman NuVentures Centre Free Zone, United Arab Emirates. We are the data controller for the personal data described here.

1. The short version

• You enter health information (doses, weight, food, lab values). We use it only to run the App for you.
• We never sell your data, never use it for advertising, and never use it to train AI models.
• Some features send content to our AI provider, Anthropic, to produce the result you asked for. Anthropic does not train on it.
• You can delete your account and data inside the App at any time.
• The App is a wellness and education tool, not medical advice.

2. Information we collect

a. Account information

• Username, email address and password. Passwords are stored only as a secure one-way hash; we cannot see them.
• Profile details you choose to give (for example age, sex, height, starting weight, goals).

b. Health information you enter

• Medication name, dose and injection dates.
• Weight and body measurements.
• Food entries and protein amounts.
• Lab and blood-marker values you enter or confirm from a report.
• How you feel, training, notes and other entries you make.

You provide all of this yourself. We do not connect to Apple Health, Google Health Connect or any other outside source, and we do not buy data about you.

c. Photos and documents you choose to scan

• When you photograph food or upload a lab report, the image is sent to Anthropic to read it and is not stored by us. Only the result you confirm (for example the protein amount or the lab values) is saved to your account.

d. Usage information

• Simple in-app events (for example which screens are opened and which features are used), the app version and your device platform (iOS or Android). These are linked to your account ID, contain no contact details, are collected by us directly, and are used only to keep the App working and improve it. We use no third-party analytics, advertising or tracking tools.

e. Payment information

• Subscriptions are bought through the Apple App Store or Google Play. We never receive your card details. We receive only your subscription status (for example active, renewing or expired), through our subscription service provider.

3. How we use your information

• To provide the features you use: tracking, charts, trends, food checks and personalised educational reads.
• To keep your account working, recover your password and answer support requests.
• To understand which features help people and to fix problems.
• To keep the service secure and prevent abuse (for example daily limits on AI features).
• To meet legal obligations.

We will never use your health or personal data for advertising, to decide employment, insurance or credit eligibility, or to train AI models, and we will never sell it.

4. Legal basis

• Your explicit consent for your health information, given when you create an account. You can withdraw it at any time by deleting your account; this does not affect processing already done.
• Providing the service you signed up for (performance of a contract) for your account information.
• Our legitimate interests in keeping the App secure and understanding how it is used, for the usage information in §2(d).
• Legal obligation where the law requires us to keep or disclose information.

We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), India's Digital Personal Data Protection Act, 2023, the EU and UK General Data Protection Regulation (GDPR) for users there, and the US state consumer health data laws described in §11.

5. Who we share data with

We share data only with service providers that process it on our instructions to run the App:

• Anthropic (USA): AI that reads food, photos and lab reports and writes your educational reads. Receives only the content needed for the feature you used.
• Hostinger (servers in India): hosts our servers and database, where all App data is stored.
• Cloudflare: secures and delivers connections to the App. Receives technical connection data such as your IP address.
• Resend: sends account emails such as password resets. Receives your email address.
• Apple, Google and our subscription service provider: subscription billing and status. Receive your subscription status and store purchase ID.

We may also disclose information when the law requires it, to protect people's safety or our legal rights, or to a buyer of our business, who must keep this Policy's protections. We do not sell or rent personal data, and we do not share it for advertising.

6. Where your data is stored and how it is protected

Your data is stored on servers in India, in a database used only for the App and kept separate from our other systems. We protect it with:

• encryption of all connections between the App and our servers (HTTPS/TLS);
• passwords stored only as hashes;
• access limited to the people who run the service, protected by key-based login;
• daily backups, kept for 14 days.

No system is perfectly secure. If a security breach affects your personal data, we will notify you and the relevant authorities as required by law, without undue delay.

7. How long we keep data

We keep your data while your account is open. When you delete your account, your data is removed from our live database immediately and disappears from backups within 14 days as they expire. We keep only what the law requires us to keep (for example records of payments, which the app stores already hold).

8. Your rights

Depending on where you live, you have the right to:

• access the data we hold about you;
• correct inaccurate data (you can edit most entries in the App);
• delete your data: Profile → Delete my account in the App, or email us;
• receive a copy of your data in a portable format, on request;
• withdraw consent, and object to or restrict certain processing;
• nominate someone to exercise your rights if you die or cannot act yourself (India).

Email [email protected] to use any of these rights. We reply within 30 days, and may need to confirm your identity first. You can also complain to your data protection authority, for example the UAE Data Office, the Data Protection Board of India, your EU supervisory authority or the UK Information Commissioner's Office.

9. AI features

AI-generated results (food checks, lab reads and personal reads) are educational and can be wrong. They do not make decisions about you that have legal or similar effects, and you can always ignore them. Under Anthropic's commercial terms, the content we send is not used to train their models.

10. International transfers

We operate from the UAE, our servers are in India and our AI provider is in the USA, so your data may be processed outside your country. Where the law requires it (for example for EU and UK users), we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.

11. Consumer health data (US residents)

This section applies to residents of US states with consumer health data laws, such as Washington (My Health My Data Act), Nevada and Connecticut.

• What we collect: the health information in §2(b) and §2(c), which you provide yourself.
• Why: only to provide the App's features to you, as described in §3.
• Who receives it: only the service providers in §5, which process it on our instructions. We do not sell consumer health data and do not share it with third parties for their own purposes.
• Your rights: to confirm whether we hold your consumer health data, to access it, to know which providers receive it, to withdraw consent and to have it deleted. Email [email protected]. If we refuse a request, you may appeal by replying to our answer, and we will respond within 45 days.
• We do not use geofencing or collect location data.

12. Children

The App is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you think a minor has given us data, contact us and we will delete it.

13. Not medical care

The App gives wellness and educational information only. It is not a medical device and does not diagnose, treat or replace your doctor. See the Terms of Service.

14. Contact

Foldbay Technologies FZE LLC Ajman NuVentures Centre Free Zone, Ajman, United Arab Emirates Email: [email protected]

15. Changes

If we change this Policy in a material way, we will tell you in the App or by email before the change takes effect and update the date above.