Privacy policy

To run your private protocol record, we collect:

• Your email address (to create and secure your account).
• Your name (a display name shown in the app).
• Optionally, your date of birth (to confirm you are 18+).
• Your protocol details and the dose, weight, and symptom entries you log. This is health-related data you choose to record.
• Optionally, photos and notes you choose to attach to your record.
• Subscription information, including your Together account ID, App Store transaction and receipt information, products purchased, and entitlement status.

Every entry is something you enter yourself. We collect this data only to provide the app’s functionality. We do not use third-party advertising trackers, and the app does not track you across other companies’ apps or websites.

Your data is stored with Supabase, our database and authentication provider, encrypted at rest. Access is governed by row-level security so that only your authenticated account can read or write your records.

We use RevenueCat as our subscription processor. RevenueCat receives your Together account ID (a Supabase user ID, not your email), App Store transaction and receipt information, and subscription entitlement status so it can validate purchases, restore purchases, and tell the app whether to unlock Together Pro. We do not use RevenueCat for advertising or cross-app tracking.

Supabase and RevenueCat act as service providers for Together. We require them to protect personal data consistently with this policy and applicable law.

We use your data solely to provide the app’s functionality: showing your logs, plotting your trend, keeping your account secure, and validating purchases and subscription access. We do not sell your data, and we do not share it for advertising.

We keep your data for as long as your account exists, so your record is there when you open the app. The in-app deletion flow removes your Together account and database records. It also attempts to remove known private photo and scan files before closing the account. If that storage cleanup needs a retry, remaining files are removed within 30 days.

RevenueCat may retain transaction, receipt, and entitlement records after Together account deletion under its retention policy or when needed to comply with legal obligations, resolve disputes, or enforce agreements. You can contact us to request deletion of RevenueCat-linked data; some records may still be retained where legally required.

You can start permanent account deletion at any time from inside the app: go to Profile → Delete Account. The flow removes your Together account, protocols, logs, and notes, and begins the private-file cleanup described above. No email to us is required for that in-app deletion.

For deletion of RevenueCat-linked data, email us at the address below. Deleting your Together account does not cancel an active App Store subscription; subscriptions must be canceled in your Apple account subscription settings.

Together is intended for adults. The app is not directed at children, and we do not knowingly collect data from anyone under 18.

If we change how we handle your data, we’ll update this page and revise the date above. Material changes will be reflected here before they take effect.

Together is an observational record. We do not provide medical advice, diagnose, or prescribe. Your health decisions are between you and a qualified healthcare professional.

Questions about your privacy? Email admin@togetherpep.com.