Your record is yours.

1. Who we are and what this covers

Fyxel (“Fyxel,” “we,” “us”) provides the Fyxel iOS application and the fyxelapp.com website (together, the “Services”). This policy explains what information we collect, why, who processes it on our behalf, and the rights and controls you have. It applies to the app, the website, our waitlist, and our support channels.

Fyxel is operated from the United States. By using the Services, you understand your information is processed in the U.S.

2. Information you provide

Account information: your email address, password (stored only as a secure hash by our authentication provider — we never see or store your plain password), and optional profile details such as name, height, starting weight, and goal weight.

Health tracking information you choose to log: medications and custom compounds, dose amounts and times, injection sites, schedules, side-effect ratings, weight and body measurements, nutrition entries (such as calories and protein), pain levels, and free-text notes. You decide what to log; every field is optional.

Fyxel Bot conversations: the messages you send to the in-app assistant, and the assistant's replies (including saved chat history tied to your account).

Waitlist and marketing: the email address you submit at fyxelapp.com.

Support communications: anything you send to our support email or social accounts.

3. Information collected automatically

App technical data: device model, operating system version, app version, language, and time zone — used to run the app correctly and to diagnose problems (for example, our schedule reminders and calendar rely on your device time zone).

Purchase status: whether your account has an active Fyxel Pro subscription. Payment itself is handled entirely by Apple — we never receive or store your card number, billing address, or Apple ID credentials.

Website server logs: standard technical logs (IP address, browser type, pages requested) generated by our hosting provider to serve and secure the site. We do not run advertising trackers, third-party analytics scripts, or social media pixels on fyxelapp.com.

4. What we use information for

To provide the Services: syncing your record across your devices, computing estimated medication-level charts from your logged doses, sending the reminders you configure, generating Fyxel Bot responses, and saving your chat history.

To operate the business: processing subscriptions through Apple, sending the one-time launch email and occasional product updates you signed up for (every email includes one-click unsubscribe), responding to support requests, and preventing fraud and abuse.

To improve the Services: understanding aggregate usage and fixing bugs. We do not use your health information for advertising, and we do not build advertising profiles.

We do not sell your personal information, and we do not share it with data brokers, advertisers, insurers, employers, or pharmaceutical companies.

5. Who processes data on our behalf

We use a small number of service providers (“processors”) under contracts that limit their use of your data to providing services to us:

• Supabase — our database, authentication, and backend infrastructure. Your account and health tracking records are stored here with row-level security so only your authenticated account can access your rows, encrypted in transit and at rest.

• Anthropic — processes Fyxel Bot messages to generate responses. Relevant parts of your logged record may be included so the assistant can answer questions about your own data. Under Anthropic's commercial API terms, these messages are not used to train their models.

• RevenueCat — validates subscription purchases and manages entitlements. Receives device identifiers and purchase history; never receives your health data.

• Apple — processes all payments and subscriptions under Apple's own terms and privacy policy.

• Resend — sends our transactional and launch emails (such as waitlist notifications).

• Vercel — hosts fyxelapp.com and generates standard server logs.

If we ever change providers, this policy will be updated. We do not permit any processor to sell your data or use it for their own advertising.

6. Health information — special note

Fyxel stores the health-related information you log so the app can display it back to you. We treat it as sensitive: it is never sold, never used for advertising, never shared with pharmaceutical companies, insurers, or data brokers, and never disclosed except as described in this policy (to the processors above, or if legally required).

Fyxel is a consumer wellness app, not a healthcare provider, and is not a “covered entity” or “business associate” under HIPAA. HIPAA applies to healthcare providers and insurers — not to personal tracking apps. That is exactly why we spell out our own protections in this policy.

If you connect Apple Health, data flows only with your explicit permission through Apple's HealthKit framework, and we access only the categories you approve (weight). We never use HealthKit data for advertising or share it with third parties, consistent with Apple's HealthKit rules.

7. Retention and deletion

Your records are retained while your account is active so the app can work.

Export: you can export your complete record as a CSV at any time (Settings → Manage My Data → Export My Data).

Deletion: you can permanently delete your account and all associated data at any time (Settings → Manage My Data → Delete Account). Deletion is immediate and irreversible in our production systems; residual copies in encrypted backups roll off on our provider's standard backup cycle.

Waitlist emails are deleted when you unsubscribe. Support emails are retained as long as needed to resolve your issue and for our records.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and credentialed. Database row-level security ensures one user cannot read another user's records.

No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.

9. Your rights and choices

Regardless of where you live, you can: access and export your data (in-app), correct it (edit any record in-app), delete it (in-app account deletion), and opt out of marketing email (unsubscribe link in every email).

California residents: under the CCPA/CPRA you have rights to know, delete, correct, and to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information other than to provide the Services. We will not discriminate against you for exercising your rights.

EU/UK/EEA residents: we process your data on the legal bases of contract (providing the Services you signed up for), legitimate interests (securing and improving the Services), and consent (marketing emails, Apple Health access). You additionally have rights to portability, restriction, and objection, and to lodge a complaint with your data protection authority.

To exercise any right you can't complete in-app, email us — we verify requests via the email on your account and respond within the timeframe required by applicable law.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it. The app's App Store age rating reflects its informational medical content, not an invitation for children to use it.

11. What we never do

• We never sell your personal information. • We never run third-party advertising in the app. • We never share your health information with advertisers, data brokers, insurers, employers, or pharmaceutical companies. • We never use Fyxel Bot conversations to train third-party AI models. • We never ask for your Apple ID password, card number, or government ID.

12. Changes to this policy

We may update this policy as the Services evolve. Material changes will be announced in the app or by email, and the “Last updated” date below always reflects the current version. Continued use after changes take effect constitutes acceptance.

13. Contact

Questions, requests, or complaints: support@fyxelapp.com. We read everything.