Privacy Policy

Effective Date: July 13, 2026
Last Updated: July 13, 2026

This Privacy Policy describes how Lyrebird Studio Teknoloji Ltd. Şirketi ("Lyrebird Studio", "we", "us", or "our") collects, uses, and protects your information when you use the GLP-1 Tracker mobile application (the "App") and its related website (the "Site", and together with the App, the "Service").

PLEASE READ THIS PRIVACY POLICY CAREFULLY. By accessing or using the Service, you agree to the terms described here. If you do not agree, please do not use the Service.

Because the App is designed to help you track health-related information, we have also included a supplemental Health Data Privacy Notice at the end of this policy with additional details about how we handle sensitive health information.

Key Points About Our Privacy Practices

If you decide not to read this entire Privacy Policy, we want you to walk away with a few key points about our privacy practices:

Important Note (Android): Simply uninstalling the App does not automatically delete your account or data stored in Firebase. Use "Delete My Account" in the App's Settings or contact us.

1. Information We Collect

a. Health Data You Provide (Optional)

If you choose to track your health in the App, we process the information you enter, such as:

You are never required to enter health data; features simply will not function without the data they rely on.

b. Apple Health / Health Connect Data (Optional, With Your Permission)

With your explicit permission, the App can read certain data from Apple Health (iOS) or Health Connect (Android), limited to: weight/body mass, hydration/water intake, and nutrition data (calories and protein).

c. Account Information

d. Purchase and Subscription Information

The App is monetized through optional subscriptions — not advertising. Subscriptions are processed by the Apple App Store or Google Play Store. We never receive your full payment card details. We use RevenueCat to manage subscription status (e.g., whether a subscription is active) so the App can unlock paid features and support troubleshooting.

e. Device and Technical Information

We (and our service providers) may automatically collect limited technical information, such as: device model and operating system version, app version, preferred language, crash reports and performance diagnostics (via Firebase Crashlytics), and IP address (processed temporarily for security, abuse prevention, and routing — never stored with your health data).

f. App Usage Information (Non-Health)

We may collect limited information about how you interact with non-health features of the App (e.g., screens viewed, onboarding completion, feature usage) through Firebase Analytics to improve the product. We take steps to ensure your health entries are never included in this analytics data, and free-text fields are always excluded.

g. Support Communications

If you contact us at support@lyrebirdstudio.net, we collect the information you choose to provide in order to respond and resolve your issue. If your support request includes health details, we treat that information as sensitive and use it only to help you.

2. How We Use Your Information

We use your information to:

We do NOT use your health data to:

Legal Bases (EEA/UK and Similar Regions)

Where applicable law requires a legal basis for processing, we rely on:

3. How We Share Your Information

We do not sell personal data, and we do not share it for targeted advertising. We share information only in the following limited circumstances:

Service Providers

We share data with vendors that help us operate the Service. They may use it only to provide services to us and are contractually prohibited from using it for their own purposes:

VendorPurpose
Apple iCloudiOS health data storage and sync (your private iCloud database)
Google FirebaseAndroid data storage and authentication
RevenueCatSubscription management
Firebase CrashlyticsCrash reporting and app reliability
Firebase AnalyticsNon-health product analytics

Aggregated or De-Identified Data

We may create aggregated or de-identified data that cannot reasonably be linked back to you (for example, overall usage statistics) and use it for product improvement. We do not attempt to re-identify this data. Free-text fields (notes, custom symptom names) are always excluded, because free text may contain identifying information.

Legal Requirements

We may disclose information if required by law or valid legal process (e.g., a subpoena), or where we believe disclosure is necessary to protect rights, safety, or security. Where legally permitted, we will notify you of such requests concerning your health data.

Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction. We will provide notice where required by law, and any successor will remain bound by commitments regarding your health data at least as protective as this policy.

4. Data Storage, Security, and Retention

Storage. On iOS, your health entries are stored on your device and synced to your private iCloud database associated with your Apple ID; Lyrebird Studio cannot access them. On Android, your data is stored securely in Google Firebase, tied to your account and a platform-generated user ID.

Security. We use administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit and, where supported by our providers, encryption at rest, along with access controls. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

Retention. We keep your data only as long as needed to provide the Service:

When you delete your Android account, we delete your personal data from our systems within 30 days, except where retention is required by law.

5. Your Rights and Choices

Depending on where you live, you may have the right to:

Most of these actions can be done directly in the App's Settings. You can also email us at support@lyrebirdstudio.net. We may need to verify your identity before fulfilling a request. If we deny a request, you may appeal by replying to our response; depending on where you live, you may also lodge a complaint with your local data protection authority or state Attorney General.

Notifications: You can turn off reminders and push notifications in the App or in your device settings.

Device permissions: You may revoke permissions (camera, photos, notifications, health data) at any time through your device settings.

6. Washington My Health My Data Act & Similar State Health Privacy Laws

For residents of Washington, Nevada, Connecticut, and other states with consumer health data laws: the health data described in this policy is "consumer health data." We collect and share it only as described here and only with your consent or as necessary to provide the services you request. We do not sell consumer health data, and we do not use it for targeted advertising. You have the right to access, delete, and withdraw consent for the collection of your consumer health data, and to appeal any denial, by contacting support@lyrebirdstudio.net.

7. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know, access, correct, and delete your personal information, to opt out of "sales" and "sharing" (we do neither), and to limit the use of sensitive personal information. Your health data qualifies as "sensitive personal information," and we use it only for purposes permitted without a right-to-limit obligation (providing the services you request, security, and quality assurance). We have not sold or shared personal information in the preceding 12 months. To exercise your rights, contact us at support@lyrebirdstudio.net. You will not receive discriminatory treatment for exercising your rights. You may designate an authorized agent, in which case we will require verification of identity and authorization.

8. Türkiye (KVKK)

Lyrebird Studio Teknoloji Ltd. Şirketi acts as data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Health data is special category personal data under KVKK Article 6 and is processed only with your explicit consent, which you provide within the App before health-tracking features are enabled and may withdraw at any time. Under KVKK Article 11, you may request information about whether and how your personal data is processed, request correction or deletion, object to certain processing, and claim compensation for unlawful processing. You may exercise these rights by contacting us at the address or email below.

9. International Data Transfers

Your data may be stored or processed in the United States (where Apple, Google, and RevenueCat operate their infrastructure) and accessed from Türkiye, where our team is located. Where required (for example, under GDPR, UK GDPR, or KVKK), we use appropriate safeguards such as Standard Contractual Clauses and explicit consent for transfers of special category data.

10. Children's Privacy

The Service is not directed at children under 13 (or the minimum age in your jurisdiction), and GLP-1 medications tracked in the App are intended for use under the supervision of a healthcare provider. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it. Parents with concerns may contact us at support@lyrebirdstudio.net.

11. Not Medical Advice; Not a HIPAA-Covered Service

The App is a personal tracking and educational tool only. It is not a medical device and does not provide medical advice, diagnosis, or treatment, and does not recommend dose changes. Always consult your healthcare provider about your medication, side effects, and health decisions. Never disregard professional medical advice because of something you tracked or read in the App.

We are not a healthcare provider or health plan, and the App is generally not subject to HIPAA. Instead, your data is protected as described in this Privacy Policy and applicable consumer privacy laws.

12. Cookies and Website Analytics

Our Site may use cookies and similar technologies (such as Google Analytics) to understand site traffic and improve the Site. The Site is not designed to collect health data — please do not submit health information through website forms unless necessary; if you do, we will treat it as sensitive and use it only to respond to you. You can control cookies through your browser settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the latest version in the App and on our Site and update the "Last Updated" date. If changes are material — especially changes affecting health data — we will provide additional notice (such as an in-app notice) and, where required by law, obtain your consent.

14. How to Contact Us

Please direct any questions or comments about this Policy or our privacy practices to support@lyrebirdstudio.net

You may also write to us via postal mail at:

Lyrebird Studio Teknoloji Ltd. Şirketi
Altunizade Mahallesi Kısıklı Caddesi No:35/A
Üsküdar / İstanbul, Türkiye
support@lyrebirdstudio.net


Supplemental Health Data Privacy Notice

Last Updated: July 13, 2026

This notice supplements our main Privacy Policy and explains in more detail how we handle sensitive health information in the GLP-1 Tracker App.

What Counts as Health Data

Health data includes information you enter or import about: GLP-1 medication doses and injection records (date, site, time, dosage); side effects, symptoms, and well-being notes; weight, body measurements, and progress photos; nutrition and hydration; and Apple Health / Health Connect data you choose to import (weight/body mass, hydration, and nutrition for calories and protein).

Our Health Data Commitments

Health Data Storage

How We Share Health Data

We share health data only in limited circumstances:

Your Rights Over Health Data

You may access, export, correct, and delete your health data, and withdraw consent at any time, directly in the App's Settings or by contacting support@lyrebirdstudio.net. If we deny a request, you may appeal by replying to our response; you may also contact your data protection authority or state Attorney General depending on where you live.


© 2026 Lyrebird Studio Teknoloji Ltd. Şirketi. All rights reserved.