WeightEasy

Introduction

We built WeightEasy to help people taking GLP-1 medications feel supported, informed, and in control of their health journey. Using WeightEasy means sharing some information with us — and in some cases with a small number of trusted service providers that help us run the app. We take that responsibility seriously.

This Privacy Policy explains what we collect, how we use it, who we share it with, your rights and choices, and how to contact us. We have also created a separate Health Data Privacy Policy (Part 2 of this document) with additional details about how we handle sensitive health information, as required by Washington’s My Health My Data Act, Nevada’s Consumer Health Data Privacy Law, and California’s CPRA.

Where This Policy Applies

Key Terms — Plain English

Google Sign-In Data

WeightEasy uses Google Sign-In as an authentication method. When you choose to sign in with Google, we receive the following data from Google:

• Your name (as set in your Google account)
• Your email address

Limited Use disclosure:WeightEasy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for serving advertisements, is not used for any purpose not disclosed in this policy, and is not transferred to third parties except as necessary to provide the WeightEasy service.

What We Collect and Why

Account Information

• Google Sign-In email address and name (when using Google Sign-In)
• Phone number or email (when using OTP sign-in)
• A platform-generated user ID associated with your account

Why? To let you log in, sync your data, and recover your account across devices.

Health Data (Optional)

If you choose to track your health in WeightEasy, we process the information you enter, including:

• GLP-1 medication name, dose, injection date, time, and site
• Side effects, symptoms, and wellness notes
• Body weight and weight trends
• Protein intake, calories, and water intake
• Exercise and activity logs
• AI coach conversations

Why? To provide WeightEasy's core features and help you track your progress throughout your GLP-1 journey.

Apple Health / Health Connect (Optional)

With your explicit permission, we can import data such as weight or nutrition from Apple Health (iOS) or Health Connect (Android). You can revoke this permission at any time in your device settings.

Why? To give you a more complete picture of your health without duplicate manual entry.

Anonymous Usage Data

We collect anonymous usage data to understand how the app is used and to improve it. This data is designed to be non-identifiable. We specifically exclude all free-text fields — including notes, AI coach conversations, and any custom side effect names — because free text may contain identifying information.

We do not attempt to reidentify this data. You can opt out at any time in Privacy Settings within the app.

Device and Technical Information

We and our service providers may automatically collect limited technical information to keep the app reliable, secure, and working correctly:

• Device type and operating system version
• App version and basic diagnostics
• Crash reports and performance logs
• Network metadata processed by service providers for security, abuse prevention, and routing

Payment and Subscription Information

Subscriptions are handled by the Apple App Store (iOS) or Google Play Store (Android). We do not receive your full payment card details. We use Apple IAP, Google IAP and RevenueCat to manage subscription status and support WeightEasy Plus features.

Non-Health Analytics

We use analytics tools to understand how the app is used and how people discover WeightEasy. We take steps to minimise data sharing and do not intentionally send health entries — including injection logs, dosage, side effects, weight entries, or wellness notes — through analytics tools used for product or website measurement.

Where and How We Store Your Data

All data stored on AWS is protected using industry-standard encryption (AES-256 at rest, TLS 1.2+ in transit). Access is restricted to authorised personnel only.

How Long We Keep Your Data

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Export your data in a portable format
• Correct inaccurate or incomplete data
• Delete your data and account
• Restrict or object to certain uses of your data
• Withdraw consent at any time
• Appeal a denied privacy request

You can manage most of these rights directly in Settings within the WeightEasy app. You can also submit a formal request by emailing care@weighteasy.app. We will respond within 45 days as required by applicable law.

If we deny a request, you can appeal by replying to our response email. If you remain unsatisfied, you may contact your state Attorney General or applicable data protection authority.

State-Specific Privacy Rights

Washington — My Health My Data Act (MHMDA)

If you are a Washington resident, you have the right to confirm whether we collect your consumer health data, access it, withdraw consent for its collection or sharing, and request its deletion. To exercise these rights, contact care@weighteasy.app. We will respond within 45 days. You will not face retaliation for exercising any of these rights.

California — CCPA / CPRA

If you are a California resident, you have the right to know what personal information we collect about you, to opt out of its sale or sharing, to request its deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights. WeightEasy does not sell or share personal information for targeted advertising.

Nevada — Consumer Health Data Privacy Law

If you are a Nevada resident, you have the right to opt out of the sale of your personal information and to request deletion of your consumer health data. WeightEasy does not sell personal information.

Legal Bases for Processing (EEA / UK Users)

If you are in the European Economic Area, the United Kingdom, or another region requiring a legal basis for processing, we process your information under the following bases:

Who We Share Data With

We share data only with trusted vendors who help us operate WeightEasy. All providers are permitted to use data only to provide services to us — not for their own independent commercial purposes.

Support Communications

If you contact us through WeightEasy support channels, by email, or through the app, we will use the information you provide to respond and resolve your issue. If your support request includes health-related details, we treat that information as sensitive and use it only to help you. We do not use support communications for marketing purposes.

Legal Requirements

We may disclose information if required by law, subpoena, court order, or similar legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or security of WeightEasy, our users, or the public.

Corporate Transactions

If Tapfinity Technologies Private Limited or the WeightEasy product is involved in a merger, acquisition, financing, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by applicable law, and any successor entity will be bound by the commitments in this policy.

Security

We use Amazon Web Services with AES-256 encryption at rest and TLS 1.2+ encryption in transit. We implement access controls, authentication requirements, and regular security reviews. No method of transmission or storage is 100% secure, but we continuously work to improve our protections and respond promptly to any identified vulnerabilities.

Children's Privacy

WeightEasy is not intended for anyone under the age of 18. GLP-1 medications are prescribed to adults, and WeightEasy is designed exclusively for adult users. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. Contact care@weighteasy.app if you have concerns.

International Data Transfers

Tapfinity Technologies Private Limited is incorporated in India. Your data may be stored or processed in the United States (on AWS infrastructure) or other locations where our service providers operate. Where required by applicable law — such as under GDPR — we use appropriate safeguards including Standard Contractual Clauses (SCCs) approved by regulators to protect your data during international transfers.

Cookies

Our website uses cookies and similar technologies, including Google Analytics, to understand site traffic and improve the site. You can control cookies through your browser settings. Some analytics providers may collect information about your online activities across different websites when you visit our site.

Exporting or Deleting Your Data

You can delete your account and all associated data at any time using any of the methods below. Deletion is permanent and irreversible. We process all deletion requests within 30 days as required by GDPR Article 17 (Right to Erasure).

When your account is deleted, we permanently remove: your profile, weight logs, injection records, dose history, side effect logs, education progress, notification settings, device tokens, and your account credentials. Anonymised, non-identifiable aggregate statistics may be retained for product analytics.

Changes to This Policy

We may update this policy from time to time as our practices or applicable laws change. We will post the latest version at weighteasy.app/privacy-policy with an updated 'Last Updated' date. For material changes, we will provide additional notice via in-app notification or email where applicable.

Contact Us

What Counts as Health Data in WeightEasy

Health data includes any information you enter or import related to your physical health, including:

• GLP-1 medication name, dose, injection date, time, and site
• Side effects, symptoms, and wellness notes
• Body weight and weight trends over time
• Protein intake, calorie intake, and water intake
• Exercise and activity logs
• AI coach conversations that contain health-related content
• Any other health or wellness information you choose to store in the app

How We Store Health Data

We store health data securely and separately from basic contact and account information.

All health data on AWS is encrypted using AES-256 at rest and TLS 1.2+ in transit. Access is restricted to authorised personnel under strict access controls.

Sources of Health Data

We collect health data from:

• You directly — when you manually enter information in the app
• Apple Health — if you enable the Apple Health import (iOS only)
• Health Connect — if you enable the Health Connect import (Android only)
• Your AI coach conversations — treated as health-sensitive in their entirety

Why We Use Health Data

We use health data solely for the following purposes:

• To provide WeightEasy's core tracking, education, and AI coaching features
• To personalise your experience and support your progress on your GLP-1 journey
• To improve app reliability, security, and performance
• To comply with legal obligations

Anonymous Usage Data and Health Data

WeightEasy collects anonymous usage data to understand trends and improve the product. For health data specifically:

• We exclude all free-text fields — notes, AI coach conversations, and custom side effect names — from anonymous analytics because free text may contain identifying information
• We do not send injection logs, dosage records, side effect entries, weight entries, or wellness notes to any analytics platform
• Anonymous analytics data is used only in aggregated form — we look at patterns across users, never at individual records
• We do not attempt to reidentify anonymous data

You can opt out of anonymous analytics at any time in Privacy Settings in the app. If you opt out, we stop collecting it going forward.

How We Share Health Data

We share health data only in the following strictly limited circumstances:

We do not share health data with third-party advertisers, marketing platforms, or data brokers under any circumstances.

Third-Party Collection on the Website

When you use our website, analytics providers such as Google Analytics may collect information about your online activities. We do not allow third parties to collect health data from you on the website. WeightEasy's website is a marketing site and is not designed to collect or process health information.

Your Rights Over Your Health Data

To submit a formal request: care@weighteasy.app — subject line 'Health Data Request'. We will respond within 45 days. You will not face any retaliation or service degradation for exercising these rights.

Washington Residents — My Health My Data Act

Nevada Residents — Consumer Health Data Privacy Law

If you are a Nevada resident, you have the right to opt out of the sale of your consumer health data and to request its deletion. WeightEasy does not sell consumer health data. To exercise your rights, contact care@weighteasy.app.

California Residents — CPRA

If you are a California resident, your sensitive personal information — which includes health data — receives additional protections under the CPRA. You have the right to limit the use of your sensitive personal information to only what is necessary to provide the services you requested. WeightEasy uses health data only to operate the app and will never use it for advertising or profiling.

Data Retention for Health Data

We retain your health data only for as long as you maintain your WeightEasy account or until you request deletion. When you delete your account, we delete or permanently anonymise your health data within 30 days, except where we are required to retain it by law. Anonymous aggregated data derived from your health entries — from which you cannot be identified — may be retained indefinitely for product improvement purposes.

Changes to This Health Data Privacy Policy

We may update this policy as our practices or applicable laws change. We will post the updated version at weighteasy.app/privacy-policy and notify you via in-app notification for material changes. Continued use of WeightEasy after the effective date of changes constitutes acceptance of the updated policy.

Contact for Health Data Questions

Placeholders — Confirm All Before Publishing

The following items must be confirmed and updated before this document goes live on your website or app store: