Privacy Policy

Muhammed Karayazi
Antalya, Türkiye
pentrack@komsular.com

Everything you enter in PenTrack stays on your device. It is never sent to us and we have no access to it. Specifically:

• Injections with date, dose, injection site, side effects and notes
• Weight, height and goal weight
• Body measurements (waist, hips, chest)
• Onboarding answers: first name, medication, age range, gender, motivation
• Settings such as language, reminder times, pen supply and appointment date

This lives in a local database on your iPhone. Delete the app and it is gone. You can also erase everything yourself from Settings.

If you turn on syncing, PenTrack writes your weight and BMI to Apple Health and reads your most recent weight from it. This happens entirely on your device. You grant the permission in Apple Health and can revoke it there at any time — the app works fully without it.

Reminders for injections, weigh-ins, supply and doctor appointments are local notifications. They are scheduled and delivered on the device; nothing goes over the network. No notification is scheduled until you allow it.

For PenTrack Pro we use RevenueCat (RevenueCat, Inc., USA) to validate receipts and keep your Pro status valid across devices. It processes:

• a randomly generated, anonymous user ID (no name, no email address)
• your App Store receipt plus subscription status and period
• technical details such as app version, device type and App Store country

No health data is transmitted. RevenueCat does not learn which medication you take or what you weigh. Legal basis: Art. 6(1)(b) GDPR (performance of the subscription contract). RevenueCat’s privacy notice: revenuecat.com/privacy.

Payment itself is handled by Apple through your Apple ID. We receive no payment details.

• No analytics, advertising or tracking SDK — the app bundles none.
• No user account and no registration.
• No sharing or selling of data to third parties.
• No access to your location, contacts or photos.

You have the rights under Art. 15–21 GDPR: access, rectification, erasure, restriction, portability and objection. Since we store no personal data about you, access and erasure in practice concern only the anonymous subscription identifier held by RevenueCat. Write to pentrack@komsular.com. You may also lodge a complaint with a data protection authority.

The site is hosted by Vercel Inc. The server processes technically necessary access data such as IP address, timestamp and requested page. We set no cookies and embed no analytics.