Privacy Policy

Your health data stays yours

Sempath GLP-1 ("Sempath", "we", "us") is a personal health tracker developed and operated by Waypath Studios (Irshaad Mohideen) and published on Google Play through the organisation account of Dhivaru Investment (SP-5437/2015), Republic of Maldives, for people managing a GLP-1 medication protocol. This policy explains what we collect, why, and the control you have over it. We do not sell your data, and we never will.

Who we are

Sempath GLP-1 is developed and operated by Waypath Studios (Irshaad Mohideen) and published on Google Play through the organisation account of Dhivaru Investment (SP-5437/2015), Republic of Maldives. Waypath Studios is based in the Maldives. For any privacy question or request, contact us at hello@waypathstudios.com.

What this app is — and is not

Sempath helps you record your own medication protocol, weight, and related health notes. It is a tracking tool, not a medical device, diagnostic, or a source of medical or nutritional advice, and it is not a replacement for consultations with your doctor. Sempath never recommends or adjusts medication or dosing. It is intended to be used alongside your healthcare provider, and all health decisions remain your sole responsibility.

Information we collect

You enter your data yourself; we do not gather it from outside sources. Depending on how you use the app, this may include:

• Health and body data — weight, goal weight, height, BMI, body-composition estimates, and progress entries you log.
• Medication protocol data — the drug name, dose, form, and schedule you define, plus dose logs and injection-site records you record.
• Lifestyle logs — meals, water, fasting, workouts (exercises, sets, reps and weight), active calories, and side effects you choose to record.
• Health Connect data (optional) — if you connect Health Connect, we read your weight, daily steps, active calories burned, total calories burned and basal metabolic rate to fill in your log automatically, and, only if you switch it on, write the weight you log in Sempath back to Health Connect. See "Health Connect" below.
• Blood-work data — lab marker values you enter or capture using the optional AI scan feature.
• Progress photos — images you add to track visible progress. These stay on your device (see "Progress photos" below).
• Profile and preferences — units, reminder settings, theme, language, and similar in-app choices.
• Account data — Sempath requires a free account. We store your email address and authentication credentials; if you sign in with Google, Google also shares the name on your Google account with us.
• Feedback — if you send feedback from within the app, the message you write and the app version, so we can act on it.
• AI usage counts — to enforce fair-use limits we record how many AI requests your account makes per day and per month (a number only — never the content of the request).
• App usage counts (you can turn these off) — while "Help improve Sempath" is on (it is on by default; Settings → Data & privacy), the app sends anonymous counts of which setup steps and features are reached, with a random install code, the app version and the app language. These counts contain no health data and no account identifier. From app version 1.2.7, the same switch also sends app events to Google Analytics for Firebase: Firebase's standard automatic events (first open, app sessions, time in the app, app updates) plus our own events — setup steps reached, setup finished, the subscription offer shown, and a free trial or subscription started. Firebase receives these events with a Firebase app-instance code, your device's advertising ID, the device model, the app version and an approximate country. It never receives your name, your email address or any health data (no doses, weights, meals, symptoms, blood work or photos).
• Subscription data — purchase and subscription status, handled by Google Play Billing and our billing provider. We never see or store your card details.

Where your data lives

The data you log is stored on your device and synced to your account on our backend provider (Supabase), so it is backed up and comes back if you change or lose your phone. An account is required for this. Progress photos are the exception: they stay on your device only (see "Progress photos" below).

Health Connect

Sempath can optionally connect to Android Health Connect. This is off by default and you enable it from Settings. When connected, Sempath reads your weight, step count, active calories burned, total calories burned and basal metabolic rate so your daily log and calorie estimates fill in without manual entry. Some apps, such as Samsung Health, record activity as total calories burned; Sempath subtracts your basal metabolic rate from that total to work out your active calories. Only if you enable "auto-write", Sempath also writes weight entries you log in Sempath to Health Connect. We use Health Connect data solely to display and calculate your own tracking inside the app. It is not used for advertising, is not sold, and is not shared with third parties. The only Health Connect data synced to your account is your weight and your daily active-calorie totals, so your history is backed up; step counts are not synced to our servers. You can disconnect at any time in Settings or in the Health Connect app, which stops all reading and writing. Our use of Health Connect data complies with Google's Health Connect permissions policy and the Limited Use requirements.

Progress photos

Progress photos are stored on your device only and are never uploaded to our servers or cloud. There is an optional "Save to gallery" setting, off by default, that also saves copies to your phone's photo gallery in a "Sempath GLP-1" album — if you enable it, be aware those copies may then be backed up by your device's own services (such as Google Photos or Samsung Cloud) according to your phone settings. Leaving the setting off keeps photos inside Sempath only.

AI features

Sempath offers optional AI features that you initiate: meal analysis (estimating nutrition from text or a photo of a meal) and blood-work scanning (reading marker values from a photo or PDF of a lab report). When you use one of these, the content you submit is sent through our secure server to a third-party AI provider (Anthropic) solely to return your result. It is processed to generate that result, is not used to train models, and is not used for advertising. If you don't use these features, nothing is sent. AI features require you to be signed in to an account: each request is linked to your account only so we can confirm your Premium subscription and apply the fair-use limits.

Community insights (opt-in)

Sempath includes an optional, contribution-based community feature. It is a two-way exchange: to view aggregated community results, you contribute your own anonymized data to the pool. If you opt out, nothing of yours is pooled and you do not see community results.

When enabled, your phone sends one anonymous summary that replaces itself each time it updates. It contains: age band, sex, the active ingredient of your medication, weeks on treatment, BMI and estimated body fat, weight change (including % of starting weight lost per treatment week), dose adherence, average daily intake and estimated deficit, and which side effects you have reported (no dates, notes or severity). We never pool your name, email, account identifiers, exact dates, free-text notes, or photos.

The summary is stored under a random identifier created on your phone; it is not linked to your account or email. Sending it requires being signed in, only to prevent abuse — your account identity is not stored with it. Results are shown only as group averages, and nothing is shown for a group until at least 20 people are in it, so no one can be singled out. Turning sharing off, erasing your data, or deleting your account removes your summary from the pool. Community figures are shown for context only and are not medical advice.

How we use your data

• To show you your logs, progress, analytics, and reports inside the app.
• To send the reminders you have switched on.
• To sync and back up your data to your account.
• To see, in anonymous totals, where people get stuck in setup and which features are used, so we can improve the app (only while "Help improve Sempath" is on).
• To measure whether our Google Ads bring people who actually use the app, so we spend less on ads that don't (Google Analytics for Firebase events, only while "Help improve Sempath" is on).
• To return results when you use the optional AI meal or blood-work features.
• To power the opt-in community insights feature.
• To respond to feedback you send us and fix problems.
• To manage your subscription and trial.
• To keep the app secure and working.

We do not use your health data for advertising, and we do not build advertising profiles about you. The Firebase events listed above are shared with Google Ads only to measure and improve our own ad campaigns; they contain no health data. You can reset or delete your advertising ID in your phone's Android settings (Settings → Privacy → Ads), and you can turn the events off with "Help improve Sempath".

Sharing your data

We do not sell your personal data. We share data only with service providers that make the app work, and only as needed:

• Supabase — secure cloud storage and authentication for your account.
• Google — if you choose "Continue with Google", Google confirms your identity and shares your name and email address with us.
• Anthropic — to process AI meal or blood-work requests you initiate.
• Google Analytics for Firebase and Google Ads — the app events described in "App usage counts" (first open, sessions, setup progress, offer shown, trial or subscription started), only while "Help improve Sempath" is on, to measure our ads. Google processes them under its own privacy policy.
• Google Play Billing and our billing provider (RevenueCat) — to process subscriptions. RevenueCat receives an anonymous account identifier and your purchase, renewal and cancellation events from Google Play, so your Premium access stays accurate.

We may also disclose information if required by law, or to protect the safety, rights, or security of our users and the service.

Your choices and controls

• Export — you can export your data (CSV, a data PDF, or a doctor report) at any time from Settings.
• Delete — you can erase your tracked data, and you can permanently delete your entire account and all cloud-stored data from within the app; you may also choose whether to keep or delete your local progress photos.
• Reminders and optional features — every reminder, the AI features, gallery saving, and community sharing can be turned off.
• App lock — you can set a PIN to protect access to the app on your device. The app locks again after a minute in the background.
• App usage counts — switch off "Help improve Sempath" in Settings → Data & privacy at any time.
• Account — an account is required so your data is backed up. You can delete it, with all its cloud data, at any time in Settings or at waypathstudios.com/delete-account.

Data retention

Data on your phone remains there until you delete it or uninstall the app. Your cloud data is kept until you delete it in the app or ask us to remove it. Account deletion removes your logs, profile, feedback, AI usage counts and login from our backend. Anonymous app-usage counts cannot be linked to you and are kept only as totals. Signing out removes your account data from the phone; progress photos, which never leave your device, stay on the phone unless you delete them.

Security

We use industry-standard measures to protect your data, including encryption in transit and at rest and per-user access controls on our backend. No method of storage or transmission is ever completely secure, but we work to protect your information and limit who can access it.

Children

Sempath is intended for adults managing their own health. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

International users

Waypath Studios is based in the Maldives, and our service providers may process data in other countries. By using Sempath you understand your data may be processed outside your country of residence under this policy.

Our website

Our website, waypathstudios.com, does not use cookies, analytics or tracking. Pages load fonts from Google Fonts, so Google receives your IP address when you visit, under Google's own privacy policy. If you email us, we use your message only to reply.

Changes to this policy

We may update this policy as the app evolves. When we do, we will revise the effective date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.