Weight Easy

Introduction

We built Weight Easy to help people taking GLP-1 medications feel supported, informed, and in control of their health journey. Using Weight Easy means sharing some information with us — and in some cases with a small number of trusted service providers that help us run the app. We take that responsibility seriously.

This Privacy Policy explains what we collect, how we use it, who we share it with, your rights and choices, and how to contact us. We have also created a separate Health Data Privacy Policy (Part 2 of this document) with additional details about how we handle sensitive health information, as required by Washington’s My Health My Data Act, Nevada’s Consumer Health Data Privacy Law, and California’s CPRA.

Where This Policy Applies

Key Terms — Plain English

Google Sign-In Data

Weight Easy uses Google Sign-In as an authentication method. When you choose to sign in with Google, we receive the following data from Google:

• Your name (as set in your Google account)
• Your email address

Limited Use disclosure:Weight Easy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for serving advertisements, is not used for any purpose not disclosed in this policy, and is not transferred to third parties except as necessary to provide the Weight Easy service.

What We Collect and Why

Account Information

• Google Sign-In email address and name (when using Google Sign-In)
• Phone number or email (when using OTP sign-in)
• A platform-generated user ID associated with your account

Why? To let you log in, sync your data, and recover your account across devices.

Health Data (Optional)

If you choose to track your health in Weight Easy, we process the information you enter, including:

• GLP-1 medication name, dose, injection date, time, and site
• Side effects, symptoms, and wellness notes
• Body weight and weight trends
• Protein intake, calories, and water intake
• Exercise and activity logs
• AI coach conversations

Why? To provide Weight Easy's core features and help you track your progress throughout your GLP-1 journey.

Coach memory (AI coach)

The AI coach can remember information from your past chats and health logs — such as weight, meals, medication doses, side effects, water intake, and activity — so it can personalise its advice across conversations. To do this, Weight Easy stores observations and short summaries of your conversations and health logs for your account.

Where it is stored: coach memory is kept in our own self-hosted memory service (Hindsight) running on servers in India operated by our hosting provider (Contabo). It is not sent to a memory vendor. The AI models that generate the coach's replies process your conversation text and relevant recalled memories, including summaries of health logs, to generate a response. Coach memory does not add a new AI provider.

Your choice: coach memory is on by default. You can turn it off at any time using the Coach memory switch in Settings / Profile. Turning it off stops new memories being saved and stops existing memories being used in replies. It does not delete existing memories. We also show a one-time in-app notice to tell you about coach memory.

Deletion: if you delete your account, all coach memory is deleted along with the rest of your data, on the account-deletion timeline described in this policy.

Apple Health / Health Connect (Optional)

With your explicit permission, we can import data such as weight or nutrition from Apple Health (iOS) or Health Connect (Android). You can revoke this permission at any time in your device settings.

Why? To give you a more complete picture of your health without duplicate manual entry.

Usage Data and Session Recording

Product analytics can start when you open the app, before you sign in. On supported app versions, we send PostHog information about what you do in the app and the details you enter. Events can contain the medicine and dose you enter, your weight, side effects, food choices and meal details, and your name. We use this information to understand how app features work and improve the app. The Coach and Learn search interaction events describe actions such as sending a message or finding results. Session recordings can show the actual Coach and search text.

After sign-in, activity from the installation can be linked to your account's analytics profile. Your onboarding answers, and updates to your profile and preferences, can be saved as properties on that profile. Examples include your name, birth year or age, gender, height, weight and weight goal, BMI, medicine, side effects, diet, food preferences, and activity answers.

On supported app versions, session recording is on by default and can start at launch, before you sign in. When enabled, it is set to record every eligible session. Recordings show app screens and interactions as you use them. Visible text, ordinary input fields and images are unmasked. Recordings may include information you see or enter about medicines, doses, weight, symptoms, activity and meals, as well as Coach conversations and photos. They may also show health information imported from Apple Health or Health Connect when it is displayed in the app.

Secure password fields and the app's one-time verification code entry are masked. On iOS, the recording software also masks some fields that iOS marks as sensitive. Names and contact information can still appear elsewhere on screen. Session recordings exclude console logs and network request telemetry.

PostHog processes the recordings for us in the United States for troubleshooting and product improvement. PostHog stores recordings for 30 days. After sign-in, recordings may be linked to your account through a pseudonymous identifier.

To stop future recordings and product analytics, open Profile and turn off Help improve WeightEasy. This setting applies on your device. Previously uploaded recordings follow the retention period above.

Apple Ads Install Attribution

When the iOS app launches, it can send an attribution token to Apple through AdServices to find out whether an Apple Ads campaign led to the install. PostHog receives the result, including whether Apple matched the install to an ad and any campaign, ad group, keyword, ad, country or region, download, click or impression details Apple provides. We use these details to measure which campaigns lead to installs and subscriptions.

Attribution can be recorded before you sign in and can later appear on the same PostHog profile as your app activity and onboarding answers. The RevenueCat iOS SDK also collects an Apple attribution token and sends it to RevenueCat. With the Apple Ads integration enabled, RevenueCat can request the attribution result from Apple and associate it with subscription activity, including trials and revenue. Your health entries and Coach messages are sent to PostHog as described above.

Device and Technical Information

We and our service providers may automatically collect limited technical information to keep the app reliable, secure, and working correctly:

• Device type and operating system version
• App version and basic diagnostics
• Crash reports and performance logs
• Network metadata processed by service providers for security, abuse prevention, and routing

Payment and Subscription Information

If you buy a Weight Easy subscription, payment is handled by Apple (App Store) or Google (Google Play). We never receive or store your card or bank details. We use RevenueCat, Inc. to manage subscriptions. Apple or Google, through RevenueCat, share with us:

• the product you bought (monthly or yearly) and whether you are in a free trial;
• purchase, renewal, cancellation and expiry dates and status;
• the store, country and currency of the purchase, and the price paid;
• a store transaction identifier, linked to your pseudonymous Weight Easy user ID.

We use this to give you access to paid features, restore purchases, handle billing questions, and measure how many people subscribe. We do not send any health data to RevenueCat, Apple or Google for billing. We keep subscription records for as long as your account exists, and longer only where tax or accounting law requires it.

Analytics Services

We use analytics tools to understand how the app is used and how people discover Weight Easy. PostHog can process structured events, analytics profile properties, and screen recordings. A health entry or text you type may appear in an event and in a recording of the screen.

Where and How We Store Your Data

We restrict access to data stored on servers in India operated by Contabo to authorised personnel.

How Long We Keep Your Data

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Export your data in a portable format
• Correct inaccurate or incomplete data
• Delete your data and account
• Restrict or object to certain uses of your data
• Withdraw consent at any time
• Turn off coach memory using the Coach memory switch in Settings / Profile
• Appeal a denied privacy request

You can manage most of these rights directly in Settings within the Weight Easy app. You can also submit a formal request by emailing care@weighteasy.app. We will respond within 45 days as required by applicable law.

If we deny a request, you can appeal by replying to our response email. If you remain unsatisfied, you may contact your state Attorney General or applicable data protection authority.

State-Specific Privacy Rights

Washington — My Health My Data Act (MHMDA)

If you are a Washington resident, you have the right to confirm whether we collect your consumer health data, access it, withdraw consent for its collection or sharing, and request its deletion. To exercise these rights, contact care@weighteasy.app. We will respond within 45 days. You will not face retaliation for exercising any of these rights.

California — CCPA / CPRA

If you are a California resident, you have the right to know what personal information we collect about you, to opt out of its sale or sharing, to request its deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights. Weight Easy does not sell or share personal information for targeted advertising.

Nevada — Consumer Health Data Privacy Law

If you are a Nevada resident, you have the right to opt out of the sale of your personal information and to request deletion of your consumer health data. Weight Easy does not sell personal information.

Legal Bases for Processing (EEA / UK Users)

If you are in the European Economic Area, the United Kingdom, or another region requiring a legal basis for processing, we process your information under the following bases:

Who We Share Data With

We share data only with trusted vendors who help us operate Weight Easy. All providers are permitted to use data only to provide services to us — not for their own independent commercial purposes.

Support Communications

If you contact us through Weight Easy support channels, by email, or through the app, we will use the information you provide to respond and resolve your issue. If your support request includes health-related details, we treat that information as sensitive and use it only to help you. We do not use support communications for marketing purposes.

Legal Requirements

We may disclose information if required by law, subpoena, court order, or similar legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or security of Weight Easy, our users, or the public.

Corporate Transactions

If Tapfinity Technologies Private Limited or the Weight Easy product is involved in a merger, acquisition, financing, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by applicable law, and any successor entity will be bound by the commitments in this policy.

Security

We use servers in India operated by our hosting provider (Contabo) and implement access controls, authentication requirements, and regular security reviews. No method of transmission or storage is 100% secure, but we continuously work to improve our protections and respond promptly to any identified vulnerabilities.

Children's Privacy

Weight Easy is not intended for anyone under the age of 18. GLP-1 medications are prescribed to adults, and Weight Easy is designed exclusively for adult users. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. Contact care@weighteasy.app if you have concerns.

International Data Transfers

Tapfinity Technologies Private Limited is incorporated in India. Your data may be stored or processed on servers in India operated by our hosting provider (Contabo) or in other locations where our service providers operate. Where required by applicable law — such as under GDPR — we use appropriate safeguards including Standard Contractual Clauses (SCCs) approved by regulators to protect your data during international transfers. RevenueCat processes subscription records and PostHog processes session recordings in the United States under the safeguards described in this section.

Cookies

Our website uses cookies and similar technologies, including Google Analytics, to understand site traffic and improve the site. You can control cookies through your browser settings. Some analytics providers may collect information about your online activities across different websites when you visit our site.

Exporting or Deleting Your Data

You can delete your account and all associated data at any time using any of the methods below. Deletion is permanent and irreversible. We process all deletion requests within 30 days as required by GDPR Article 17 (Right to Erasure).

When your account is deleted, we permanently remove: your profile, weight logs, injection records, dose history, side effect logs, education progress, notification settings, device tokens, and your account credentials. Anonymised, non-identifiable aggregate statistics may be retained for product analytics.

Changes to This Policy

We may update this policy from time to time as our practices or applicable laws change. We will post the latest version at weighteasy.app/privacy-policy with an updated 'Last Updated' date. For material changes, we will provide additional notice via in-app notification or email where applicable.

Contact Us

What Counts as Health Data in Weight Easy

Health data includes any information you enter or import related to your physical health, including:

• GLP-1 medication name, dose, injection date, time, and site
• Side effects, symptoms, and wellness notes
• Body weight and weight trends over time
• Protein intake, calorie intake, and water intake
• Exercise and activity logs
• AI coach conversations that contain health-related content
• Any other health or wellness information you choose to store in the app

How We Store Health Data

We store your primary health records in the application database. PostHog can also hold health information, identifying information such as your name, and Apple Ads attribution on the analytics profile described in this policy.

All health data on servers in India operated by our hosting provider (Contabo) is restricted to authorised personnel under access controls.

Sources of Health Data

We collect health data from:

• You directly — when you manually enter information in the app
• Apple Health — if you enable the Apple Health import (iOS only)
• Health Connect — if you enable the Health Connect import (Android only)
• Your AI coach conversations — treated as health-sensitive in their entirety

Why We Use Health Data

We use health data solely for the following purposes:

• To provide Weight Easy's core tracking, education, and AI coaching features
• To personalise your experience and support your progress on your GLP-1 journey
• To improve app reliability, security, and performance
• To comply with legal obligations

Usage Data and Health Data

PostHog events and profile properties may include medicine, dose, weight, side effects, food choices, and other health information you enter. Unmasked session recordings can show health information, Coach conversations and photos as they appear on your screen. We use recordings for troubleshooting and product improvement.

You can turn off future recordings and product analytics in Profile. To request access, deletion, or another privacy action, contact us using the details below.

How We Share Health Data

We share health data only in the following strictly limited circumstances:

We do not share health data with third-party advertisers, marketing platforms, or data brokers under any circumstances.

Third-Party Collection on the Website

When you use our website, analytics providers such as Google Analytics may collect information about your online activities. We do not allow third parties to collect health data from you on the website. Weight Easy's website is a marketing site and is not designed to collect or process health information.

Your Rights Over Your Health Data

To submit a formal request: care@weighteasy.app — subject line 'Health Data Request'. We will respond within 45 days. You will not face any retaliation or service degradation for exercising these rights.

Washington Residents — My Health My Data Act

Nevada Residents — Consumer Health Data Privacy Law

If you are a Nevada resident, you have the right to opt out of the sale of your consumer health data and to request its deletion. Weight Easy does not sell consumer health data. To exercise your rights, contact care@weighteasy.app.

California Residents — CPRA

If you are a California resident, your sensitive personal information — which includes health data — receives additional protections under the CPRA. You have the right to limit the use of your sensitive personal information to only what is necessary to provide the services you requested. Weight Easy uses health data only to operate and improve the app as described in this policy. Analytics profiles can contain health information. Our policy prohibits using health information to target ads.

Data Retention for Health Data

PostHog retains session recordings that may show health information for 30 days.

We retain your health records only for as long as you maintain your Weight Easy account or until you request deletion. When you delete your account, we delete or permanently anonymise your health data within 30 days, except where we are required to retain it by law. Anonymous aggregated data derived from your health entries — from which you cannot be identified — may be retained indefinitely for product improvement purposes.

Changes to This Health Data Privacy Policy

We may update this policy as our practices or applicable laws change. We will post the updated version at weighteasy.app/privacy-policy and notify you via in-app notification for material changes. Continued use of Weight Easy after the effective date of changes constitutes acceptance of the updated policy.

Contact for Health Data Questions