Privacy policy

Last updated: 9 November 2026

This policy explains how the Panda app (“Panda: GLP-1 Tracker”) and the website pandabuddy.app handle your information. Panda is provided by Simple Dot Digital (“we”, “us”). We are the data controller for the information described here. Questions: hello@pandabuddy.app.

Summary

  • We collect only what Panda needs to work. Health information is collected only after you give explicit consent in the app.
  • We never sell your data, never use your health data for advertising and never share it with data brokers.
  • Your data is encrypted in transit and at rest, and each account can only ever read its own data.
  • Analytics in the app and on the website are off until you choose to turn them on.
  • You can export or delete all of your data at any time from the app.

Information we collect

Account

  • When you start, the app creates an account identifier for you so your logs and purchases are saved, even before you sign up. If you create an account we store your email address and a securely hashed password, or, with Sign in with Google, your name, email address and Google account identifier.

Profile and health information you enter

  • Your first name, gender, year of birth, height, starting and goal weight, units, time zone, goals and reminder settings.
  • Medicines and peptides you track, doses and dose changes, injection sites, side-effect and mood check-ins, weight and body measurements, meals and protein, water, steps and exercise, and supplies such as pens and needles.
  • Progress photos are stored only on your device. We never upload them.

Health Connect (Android) and Apple Health (iPhone)

  • Only if you turn on sync and grant permission, Panda reads weight, steps, active calories burned and hydration and writes the weight and water you log in Panda.
  • We use this data only to show your progress and keep your own logs in sync. You can turn sync off at any time in Settings → Health, or in Health Connect.

Subscriptions

  • Payments are handled by Google Play (and the App Store on iPhone). We never see your card details. We receive your subscription status and purchase history, linked to your account identifier, to unlock Panda Plus.

Notifications

  • Dose reminders are scheduled on your phone. For messages we send, such as a payment problem, we store a push identifier for your device. Notifications never contain medicine names, doses or symptoms.

Ask Panda and meal photos (optional)

  • If you use Ask Panda or the meal-photo estimate, your question or photo, together with the relevant logs, is sent to an AI service to generate the answer. We keep your Ask Panda conversation in your account so you can read it again.

App analytics (optional)

  • Only if you turn on “Anonymous analytics” (during sign-up or in Settings): which screens you open, onboarding progress, sign-in method and completed purchases, with an app installation identifier. We never include health information. Advertising identifiers and advertising features are switched off.

Support

  • If you contact us through the app or website we keep your name, email address, phone number (if given) and message. For spam protection we store a scrambled (hashed) version of your IP address, never the address itself.

Website

  • The website needs no account. Google Analytics, through Google Tag Manager, loads only if you accept it in the cookie banner. See our cookie policy.

How we use your information

  • To provide Panda: reminders, logs, charts, reports, sync between your devices, Ask Panda and the features you choose.
  • To manage your account and subscription, and to answer support requests.
  • To keep Panda secure and prevent fraud and abuse.
  • With your consent, to understand how the app and website are used so we can improve them.

We do not use your information for advertising, we do not sell it, and we do not use it for automated decisions that have legal or similarly significant effects on you. Panda does not give medical advice and never suggests, calculates or changes a dose.

Health Connect data

Panda’s use of information received from Health Connect follows the Health Connect Permissions policy, including the Limited Use requirements. Health Connect data is used only to provide and improve the features you see in Panda. It is never sold, never used for advertising, never used to build user profiles for third parties, never shared except as needed to provide those features (with your consent), and never read by people unless you ask us to look at it for support, or the law requires it.

Legal bases (UK and EU)

  • Contract: to provide the app and your subscription.
  • Explicit consent: for health information, Health Connect / Apple Health sync and optional analytics. You can withdraw consent at any time in the app.
  • Legitimate interests: to keep the service secure, prevent spam and answer you when you contact us.
  • Legal obligation: to keep purchase records where tax law requires it.

Who processes your data for us

These providers process data only on our instructions and under data processing terms:

  • Supabase: our database, sign-in and file storage, hosted in the EU (Frankfurt, Germany).
  • RevenueCat: subscription status and purchase history.
  • Google Firebase: push notifications and, only with your consent, app analytics.
  • Google Gemini API (and Anthropic as a backup): to generate Ask Panda answers and meal-photo estimates.
  • Google Play / Apple App Store: payments and subscription billing.
  • Vercel: website hosting. Google Analytics / Tag Manager: website analytics, only with your consent.

Some of these providers process data in the United States. Where data leaves the UK or EU we rely on adequacy decisions or standard contractual clauses (including the UK addendum).

Security

Data is encrypted in transit (HTTPS) and at rest. Our database enforces row-level security, so each account can only read and change its own records. Secret keys stay on our servers and never ship inside the app.

How long we keep data

  • Account and health data: while your account exists. When you delete your account, we delete it from our systems.
  • Support messages: as long as needed to help you, and no longer than 2 years.
  • Analytics data (if you allowed it): up to 14 months.
  • Purchase records held by Google Play, Apple and RevenueCat: as long as tax and accounting law requires.

Export or delete your data

  • Export: in the app, open Settings → Export or delete my data → Export all my data.
  • Delete your account: in the app, open Settings → Export or delete my data → Delete my account and data. This permanently deletes your account, logs and reports from our servers. Photos on your phone are removed when you delete the app.
  • Without the app: email hello@pandabuddy.app from the email address on your account with the subject “Delete my account”. We delete it within 30 days and confirm by email.
  • Deleting your account does not cancel your subscription. Cancel it in Google Play (or the App Store) so you aren’t charged again.

Your rights

Depending on where you live, including under UK GDPR, EU GDPR and US state privacy laws, you can ask to access, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time. Email hello@pandabuddy.app. We reply within one month. In the UK you can also complain to the Information Commissioner’s Office (ico.org.uk), or in the EU to your local data protection authority. US residents can also read our consumer health data privacy policy.

Children

Panda is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has used Panda, contact us and we will delete their data.

Changes to this policy

If we make important changes, we will tell you in the app or by email before they take effect. The date at the top shows the latest version.

Contact

Email hello@pandabuddy.app with “Privacy request” in the subject line, or use our contact page.