PenDay

Privacy Policy

Last updated: 18 July 2026

PenDay is a private logbook and reminder for people on weekly GLP-1 injections, published by QoopLabs OÜ ("we", "us"). Privacy is the whole point of how PenDay is built: there is no account, no server, and your records stay on your device. This policy explains the little information that does leave your device, and why.

Information stored on your device

Everything you record in PenDay — medications and doses, injection logs and sites, daily check-ins and side effects, weight entries, dose changes, pen supply, and any notes — is stored in a database on your device only. We do not receive it, transmit it, or have any way to see it. Deleting the app deletes this data. If you move to a new device, PenDay can create an encrypted transfer file protected by a passphrase that only you choose; we cannot read that file or reset the passphrase.

Apple Health (HealthKit)

If you choose to connect Apple Health, PenDay reads your weight and step data on a read-only basis, solely to display your trend and step count inside the app. This health data is never transmitted off your device and is never included in exports, the doctor-visit PDF, diagnostic reports, or any network request. PenDay does not write to Apple Health.

Information that leaves your device

Only two categories of data leave your device, both handled by service providers, and neither is linked to your identity:

• Purchases (RevenueCat). When you start a subscription, trial, or restore a purchase, purchase information is processed by our payments partner RevenueCat to deliver and restore your PenDay Pro subscription. Because there is no account, RevenueCat identifies your installation only by a randomly generated, anonymous identifier that is not tied to your name, email, or any account. It is used only to provide the subscription you purchased.
• Diagnostics (Sentry). If the app crashes, a crash report is sent to Sentry so we can fix bugs. We attach no user identifier, and the report is scrubbed of anything resembling medication names, doses, or health values before it leaves your device.

Requests the app makes (no personal data)

To let you know when a newer version is available, PenDay fetches two documents by simple web request: a small version file hosted at qooplabs.com, and Apple's public App Store catalog. These requests send nothing about you — no identifiers, no logbook data, no health data — and are the same for everyone.

Payments

Subscriptions are sold and billed by Apple through your App Store account. We never receive or store your payment details; Apple handles all payment information under Apple's own privacy policy.

What we do not do

• No advertising and no ad networks.
• No third-party analytics.
• No tracking across other apps or websites — PenDay shows no App Tracking Transparency prompt because it does not track you.
• No selling or sharing of personal data.

Children

PenDay is intended for adults managing their own prescribed medication and is not directed to children.

Your rights

Because your logbook lives only on your device, you control it directly — you can view, edit, export, or delete any entry in the app, and remove all of it by deleting the app. For the limited data handled by our providers (RevenueCat and Sentry), you may contact us to exercise applicable rights of access or deletion under the GDPR, CCPA, and similar laws. The data controller is QoopLabs OÜ.

International processing

RevenueCat and Sentry may process the limited data described above on servers located outside your country, subject to their own safeguards and privacy policies.

Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the current version.