Privacy Policy

TEMPLATE — For owner review. Consult legal counsel before publishing.

Information We Collect

We collect the information you provide: email, display name, height, weight, injection logs, daily health metrics (nausea, blood pressure, pulse), and compound settings. We also collect AI chat interactions to provide the Ask AI service.

How We Use Your Information

Your data is used solely to provide the LEVELLINE service: computing pharmacokinetic estimates, generating charts, powering Ask AI, and generating exports. We do not sell, share, or use your health data for advertising.

Sharing With a Coach

If you choose to use "Share with my coach," the person you invite gets a read-only view of your dashboard, injections, and daily logs (including notes). Sharing only happens when you create an invite and they accept it using the email you entered. You can stop sharing at any time in Settings, and their access ends immediately.

Connected Agents and API Keys

If you create a key under "Connected agents" in Settings, any AI assistant, app or script you give that key to can read your tracking data (levels, injections, weight, and daily logs including notes). Keys are read-only. Once your data reaches that tool, it is handled under that tool's own privacy terms, not ours. We store only a scrambled version of each key, and you can revoke a key at any time in Settings, which ends its access immediately.

Data Security

All data is stored with per-user isolation. Passwords are hashed using bcrypt. Sessions use secure httpOnly cookies with JWT tokens. All connections use HTTPS encryption.

Third-Party Services

We use Stripe for payment processing (they have their own privacy policy). We use an AI service provider for the Ask AI feature. We do not use third-party advertising or analytics trackers.

Data Export & Deletion

You can export all your data at any time (JSON, CSV, or XLSX). You can delete your account and all associated data through Settings. After cancellation, data is retained in read-only mode for 12+ months, then permanently deleted.

Contact

For privacy inquiries, contact the LEVELLINE team through the application.