Privacy Policy
Slim Shot is an app that helps people on GLP-1 medicines track their doses, pens and progress. This policy explains what data the app collects, why, who receives it, and how you can delete it. It applies to the Slim Shot app for Android (com.slimshot.app) and to slimshot.app.
In this policy, "we" and "us" means the Slim Shot team. Questions: privacy@slimshot.app.
In short: we use your data only to run the app for you. We never sell it, and there are no ads. AI Coach answers come from an AI model; the AI provider does not keep your messages or use them for training. You can delete your account and data in the app at any time.
1. What we collect
Your account
- Your email address and how you sign in (email and password, Google, or Apple).
- If you sign in with Google or Apple: the name you share, and your Google profile photo.
What you enter in the app
- Profile: gender, date of birth, height, start, current and goal weight, target date, and your reasons for starting.
- Medicines: name, form, dose, schedule and reminder time.
- Doses: date, dose, injection site and notes.
- Weight and body measurements, including smart-scale values if you add them.
- Water, side effects, mood and notes.
- Pens and packs: doses and clicks, price and currency.
This is health data. We treat it as sensitive and use it only to run the app for you.
AI Coach and meal scan (only if you use them)
- Your chat messages and the coach's answers.
- Short facts the coach remembers from your chats (at most 30). You can see and delete them in the app.
- Meal photos you scan. The photo is sent for analysis and is not stored. The result (for example protein and calories) is saved in your chat.
- If you flag an answer: the answer and your note.
Community (only if you post)
- Your posts, comments and likes, with your display name and Google profile photo if you have one.
- Reports you send, and the people you block.
Purchases
- Whether you have Premium, which plan, and its renewal state. Payments go through Google Play. We never see your card details.
App use and crashes
- Screens you open and app events, such as opening the paywall, starting a purchase, or logging a pill dose (some events include which medicine). We use this to improve the app.
- Crash reports, linked to your account ID, and device details such as model and OS version.
- Device identifiers. In the current app version, Google Analytics also collects the Android advertising ID. We do not use it for ads, and the next app update stops collecting it.
- Approximate location (such as your country or city), which Google Analytics works out from your IP address.
- An app integrity check (Google Play Integrity), which helps block fake apps from our servers.
Kept only on your phone
- Your reminder schedule, app settings and fingerprint/face lock setting.
- Doctor reports (PDF). They are made on your phone. They leave it only if you share them.
2. How we use it
- To run the app: reminders, dose and pen tracking, progress charts and reports.
- To sync your data between your devices and keep it backed up.
- To answer you in AI Coach and meal scan, when you ask.
- To give you Premium when you buy it.
- To keep the community safe: reports, hiding reported content, blocking.
- To find crashes and improve the app.
Our legal reasons: we use your health data and AI Coach data only with your consent. You can take it back by deleting the data or your account. We use your account and purchase data to give you the app you asked for. We use app-use data and crash reports to keep the app working and make it better (our legitimate interest).
We do not sell your data. We do not show ads. We do not use your health data for marketing.
3. AI Coach in detail
- AI Coach and meal scan work only after you agree on the consent screen and confirm you are 18 or older.
- When you ask something, we send it to Anthropic's Claude model through OpenRouter. With it, we send what the coach needs to answer well: your recent messages, the facts it remembers, your profile (gender, age, height, weights, goal), your medicine and schedule, and your recent weights and doses. For a meal scan, we send the photo.
- We set OpenRouter to send requests only to providers that keep no data and do not train on it.
- AI Coach is not a doctor. Its answers can be wrong. Never use it for emergencies or to decide a dose.
4. Who receives your data
We use these service providers to run the app. They may use the data only to provide their service to us:
- Google Firebase (Google LLC): sign-in, database and backup, server functions, app analytics, crash reports, notifications, app integrity checks and remote settings.
- OpenRouter and Anthropic: AI Coach and meal scan answers.
- RevenueCat: subscription status. It receives your account ID and your Google Play purchase records, not your health data.
- Google Play: payments and app reviews.
Other users can see what you post in the community, with your display name. They cannot see your health logs.
We may share data if the law requires it, or to protect the safety of users.
5. Where your data is stored
Your health logs and other app data are stored in Google Cloud data centres in Europe. Sign-in, app analytics and crash reports are handled by Google, and AI Coach requests by our AI providers, in the United States. This means your data may be processed outside your country. We use providers that protect it with contracts and security controls.
6. How long we keep it
- We keep your data while you have an account, so the app keeps working. You can delete single entries, AI chats and AI memories in the app at any time.
- When you delete your account, we delete your account, profile, health logs, AI chats and memories, posts, comments, likes and reports right away.
- Some records stay after you delete your account: purchase records at Google Play and RevenueCat (for billing and tax), app analytics and crash reports (kept by Google for a limited time), and server logs that hold no message content.
7. Your choices and rights
- See and edit your data in the app.
- Delete entries, AI chats and AI memories in the app.
- Delete your account and data: Profile → App Settings → Delete Account. See how to delete your account.
- Ask us for a copy of your data, or ask any question about it: email privacy@slimshot.app from the email on your account. We reply within 30 days.
- Turn notifications off in your phone settings.
If you are not happy with how we handle your data, you can complain to your local data protection authority. For example, in the UK, this is the Information Commissioner's Office (ico.org.uk).
8. Age
Slim Shot is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you think a child uses Slim Shot, email us and we will delete the account.
9. Security
Data is encrypted on the way to our servers (HTTPS) and stored encrypted by Google Cloud. Our database rules let each user reach only their own health data, and our AI server accepts requests only from the real app. You can also lock the app with your fingerprint or face. No system is perfectly secure, so please keep your sign-in safe.
10. Changes to this policy
If we change this policy, we update the date at the top. If a change is important, we will also tell you in the app.
11. Contact
Email privacy@slimshot.app.