Privacy Policy
Effective October 15, 2026
The short version
- You don’t need an account. Without one, everything you log in Hushweek (your medicines, doses, injection sites, weight, measurements, side effects, check-ins, health markers, food, water, pens and packs, appointments, notes and progress photos) stays only on your phone, and we never receive it.
- If you choose to create an account (with Sign in with Apple, Sign in with Google or a code sent to your email; there are no passwords), Hushweek keeps a cloud backup of your log, so it comes back when you sign in on another phone. Only your account can read it. Progress photos are never in it.
- No ads, no analytics and no tracking. Your health data is never sold, never used for advertising or marketing, never used to train AI, and never shared beyond the services listed below. The app never writes it to iCloud.
- Scanning a food barcode sends only that barcode number to Open Food Facts, a free food database, to look the product up. Nothing about you or your log goes with it.
- Searching the full food database (Pro) sends only the words you type to our server, which looks them up in USDA FoodData Central.
- Crash reports carry no health data, and you can switch them off. Purchases are confirmed with an anonymous ID, or with your account ID while you’re signed in.
- An export, a backup file, a share card or a doctor report leaves your phone only when you choose to share it.
- You can delete your account and its cloud backup at any time, in the app under You › Account › Delete account.
Who we are
Hushweek (“the app”, “we”, “us”) is made by an independent developer, who is responsible for the personal data described in this policy. Contact us at support@hushweek.com.
What we collect
Using the app without an account
Hushweek is built to work entirely on your phone, and without an account it does. What you enter and log is saved in the app’s own storage on your device.
| What you log | Where it is kept |
|---|---|
| Your medicines, doses, schedules and label country | On your phone only |
| Doses taken and injection sites | On your phone only |
| Weight, body measurements, height and goals | On your phone only |
| Side effects, bowel movements and daily check-ins | On your phone only |
| Health markers you log, like blood sugar, A1C and blood pressure | On your phone only |
| Weight read from Apple Health, if you turn it on | On your phone only |
| Food, protein, fiber, calories and water | On your phone only |
| Pens, packs and bottles: doses left, expiry month, lot number, days out of the fridge and what you paid; a savings card’s renewal day | On your phone only |
| Appointments, your questions for them and what was said | On your phone only |
| Notes, and your name if you add it | On your phone only |
| Progress photos | On your phone only, in the app’s own folder |
We do not receive any of this, and without an account the app never sends it to us or to anyone else. Deleting the app, or using Start over in You › Your data, erases it from your phone.
Your phone’s own backup (iCloud Backup on iPhone, or Google’s backup on Android), if you have switched it on, may include the app’s data in the same way it includes other apps’ data. That backup is kept by Apple or Google under your account and their terms; the app itself never sends your data there.
If you create an account
An account is optional, and everything in Hushweek works without one. You can create one with Sign in with Apple, Sign in with Google, or a one-time code sent to your email; there are no passwords. Its main job is your cloud backup: a copy of your log, kept for you, that comes back when you sign in on a new phone. Before you sign in, the app tells you that your log will be backed up to your account.
| Data | Why |
|---|---|
| Email address. With Sign in with Apple, this may be a private relay address that Apple creates for you. | To sign you in, send your sign-in codes, recognize your account, and reply if you write to us. |
| Name, only if Apple or Google shares it when you sign in. | Kept with your sign-in record by Clerk, our account provider, and deleted with your account. We don’t use it for anything else. |
| Account ID, a random identifier, and for Sign in with Apple or Google, the identifier Apple or Google provides. | To link your cloud backup and your Pro purchase to your account. |
| Profile details from Google: with Sign in with Google, Google also shares a link to your profile picture. We don’t show or use it. | Kept with your sign-in record by Clerk and deleted with your account. |
| Sign-in records: when you signed in, and the device and internet address you signed in from. | To keep your account secure, for example to spot a sign-in that isn’t yours. Kept by Clerk. |
| Your cloud backup: everything in your log, the same as the backup file the app can save. That is your medicines, doses, injection sites, weight, measurements, side effects, check-ins, health markers, food, water, pens and packs, appointments, notes and settings, with the times it was first and last saved. Never your progress photos. | To keep a copy of your log safe, and to bring it back when you sign in on another phone. |
Your cloud backup is a single record in a database run for us by Neon, on servers in the United States. While you’re signed in, the app saves it a few seconds after each change, replacing the one before. The database itself checks every request against the account it comes from, so only someone signed in to your account can read or change it. When you sign in on another phone, the app brings your log back; if that phone already has a log of its own, it asks which one to keep and never decides for you.
Signing out stops the backup from that phone. Your log stays on the phone, and your backup stays in your account until you delete the account. An account never asks for a password, a phone number or anything else about you.
Photos and the camera
When you add a progress photo, Hushweek asks for the camera or your photo library only at that moment. The photo is copied into the app’s own folder on your phone and is never uploaded, with or without an account.
Reminders, the widget, the Live Activity and Apple Watch
Reminders are scheduled on your phone by the app; none passes through a server. Reminders, the home screen widget, the dose-day Live Activity and the Apple Watch app never name your medicine, so a locked screen shows nothing private. The widget reads the time of your next dose from storage on your phone that only the app and its widget share, and the watch gets what it shows straight from your iPhone.
Medicine labels
Links to your medicine’s label open the official source (DailyMed, the emc or the TGA) in your browser. That site’s own privacy policy applies to the visit.
What else leaves your phone
Crash reports
If the app crashes or hits an error, it can send a crash report to Rollbar, a service that collects error reports for us. A report says what went wrong and where in the app’s code, with the app version and your phone’s operating system. It never includes your medicine, doses, weights, food, notes, photos, name, email address, account or any other health data: medicine names, amounts, dates and email addresses are removed from error messages before a report leaves your phone. Reports are not linked to you or your account, and Rollbar is told not to store your IP address. You can switch crash reports off at any time in You › Privacy.
Barcode lookups
When you scan a food barcode, Hushweek sends that barcode number to Open Food Facts, a free, open food database run by a non-profit, to look up the product and its nutrition. It sends only the number: nothing about you, your medicine or your log, and no account or device identifier. Like any website, Open Food Facts receives the internet address the request comes from; its own privacy policy applies to that. Products you scan are then kept in the app on your phone, so you can find them again without another lookup. If you never scan a barcode, nothing is sent.
Online food search
With Pro you can search the full food database. The words you type go to our server, run on Cloudflare, which asks USDA FoodData Central and returns the foods. Nothing else goes with them: no account, no device identifier and nothing from your log. Results are kept for a day by the search words alone, so the same search is answered faster; nothing links a search to you. If you never search the full database, nothing is sent.
Purchases
Hushweek Pro is bought through the App Store or Google Play. Apple or Google processes your payment; we never see your payment details. To confirm and restore purchases we use RevenueCat, which receives an app user ID, your purchase receipts and basic device details such as the app version, the operating system and your store’s country. The app user ID is an anonymous ID created by the app or, while you’re signed in, your account ID, so that Pro follows you to another phone. RevenueCat never receives anything you log, or your email address.
App updates
Hushweek can receive small updates and fixes without a new store download, through Expo’s update service. When the app checks for one, Expo receives standard request details: your internet address, your phone’s platform, the app version and its update channel. Nothing about you or your log goes with it.
When you share an export, a backup, a card or a report
The CSV export, the backup file, share cards and the doctor report (PDF) are made on your phone. They leave it only when you share or save them, and go only where you send them. A backup file holds everything you logged except photos, so keep it somewhere you trust. Once shared, the copy is in your hands and the recipient’s.
When you restore a backup or bring in a history from Shotsy or a spreadsheet, the app reads the file you pick on your phone. Nothing is uploaded.
Apple Health
If you turn it on in You › Apple Health, Hushweek reads your weight from Apple Health and saves the weigh-ins you log there; with Pro it can also save the water and protein you log. This happens on your phone, between Hushweek and Apple Health. Weigh-ins read from Apple Health become part of your log: if you have an account they are in your cloud backup, like any weigh-in you type, and they go nowhere else. Nothing from Apple Health is shared with third parties, used for advertising or marketing, or written to iCloud by the app. You choose what Hushweek may read or write in the Health app, and can change it there at any time.
Siri and Shortcuts
If you use Siri, the Shortcuts app or the Action button with Hushweek, Apple handles what you say under its own terms. Asked when your next dose is, Hushweek answers with a day and a time, never the name of your medicine. Logging a dose or water this way opens the app, which saves the entry on your phone like any other.
When you contact us
If you email us, we receive your email address and whatever you include in your message, and use them only to reply and, if you ask us to, to find your account. Please don’t send health details we don’t need to help you.
How we use your data
Only to run Hushweek for you: to sign you in, keep and restore your cloud backup, confirm your purchase, deliver app updates, fix crashes, keep the service secure, answer your messages and meet legal obligations. Nothing else.
Where the GDPR, the UK GDPR or similar laws apply, we rely on these legal bases:
- Your explicit consent for your cloud backup. What you log is health data, a special category of personal data, so we keep it only with your explicit consent (GDPR Articles 6(1)(a) and 9(2)(a)). You give it when you create an account, after the app tells you that your log will be backed up to it. You can withdraw it at any time by deleting your account, which deletes the backup; withdrawing doesn’t affect what was done before.
- Our contract with you for your account, your purchase, and the features you ask for, such as food search and barcode lookups.
- Our legitimate interests in keeping the app and its service secure and working, fixing crashes (which you can switch off) and answering your messages.
- Legal obligations, such as keeping tax and accounting records.
In Australia, health information is sensitive information under the Privacy Act 1988. We collect it only with your consent, given when you create an account, and only for your cloud backup.
What we never do
- Sell, rent or trade your data.
- Use your data for advertising or marketing, or build a profile of you.
- Use analytics, advertising identifiers or tracking tools, or follow you across other apps and websites.
- Share your health data with any third party. If you create an account, your cloud backup is kept for you by Neon, our database provider, and goes nowhere else.
- Write your health data to iCloud.
- Look through, analyze or combine cloud backups, or use them for research or statistics.
- Use your data to train AI models.
Service providers
We use a small number of providers. Apart from Apple, Google and Open Food Facts, which act under their own privacy policies, they handle data only on our behalf, under contracts that limit its use to providing their service to us. Of them, only Neon ever receives what you log, and only if you create an account.
| Provider | What it does for us | What it receives |
|---|---|---|
| Clerk, Inc. (USA) | Accounts: sign-in with Apple, Google or an emailed code, and sending those codes | If you create an account: your email address, a name if Apple or Google shares one, your account ID, the identifier and profile details Apple or Google provide, and sign-in records. Never anything you log |
| Neon (USA) | The database that keeps your cloud backup, on servers in Virginia, USA | If you create an account: your account ID and your cloud backup |
| Cloudflare, Inc. (USA) | Hosts this website, forwards email sent to us, and runs our server for food search and account deletion | Standard request data when you visit https://hushweek.com, emails you send us, the words of a full food database search, and your account ID when you delete your account |
| RevenueCat, Inc. (USA) | Confirms and restores purchases | An app user ID (anonymous, or your account ID while you’re signed in), purchase receipts and basic device details |
| Rollbar, Inc. (USA) | Crash reports, when switched on | Error details, the app version and the operating system |
| Expo (650 Industries, Inc., USA) | Delivers app updates and fixes without a new store download | Your internet address, your phone’s platform, the app version and its update channel, in standard server logs |
| Apple and Google | App stores, payments, Sign in with Apple and Sign in with Google | Your purchase and your sign-in, under their own privacy policies |
| Google LLC (USA) | Our email inbox | Emails you send us |
| Open Food Facts (France) | Food barcode lookups | The barcode number you scan, and the internet address the request comes from |
Open Food Facts is based in France; the other providers are based in the United States, where your cloud backup is also kept. Where data protection law requires it, transfers to the United States rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK’s International Data Transfer Addendum.
How long data is kept
- Without an account, we keep no health data at all. Your log stays on your phone until you erase it.
- Your account and cloud backup are kept until you delete your account. Deleting it removes both at once. Leftover copies in our providers’ encrypted backups are overwritten within 30 days.
- Signing out keeps your account and backup, so they are there when you sign in again. Delete the account to remove them.
- Purchase records are kept by Apple, Google and RevenueCat for as long as needed to provide and restore your purchase and to meet tax and accounting rules. When you delete your account, RevenueCat deletes the record linked to it, except a transaction record that tax or accounting law requires, which never holds your email address or anything you log.
- Crash reports are kept by Rollbar for a limited period and then deleted automatically.
- Food searches are kept by our server for a day, by the search words alone.
- Emails are kept as long as needed to help you, and no longer than 24 months.
Your choices and rights
You can use Hushweek without an account, and you control the log on your phone directly: see it and export it in You › Your data, and erase it with Start over or by deleting the app.
If you have an account, you can sign out at any time, and delete the account and its cloud backup in the app (You › Account › Delete account) or by following the steps on our account deletion page. Deleting your account doesn’t erase the log on your phone; use Start over for that.
Depending on where you live (for example under the GDPR in the EU, the UK GDPR, Australia’s Privacy Act or US state laws such as California’s), you may have the right to access, correct, delete or move your personal data, to object to or restrict its use, and to withdraw your consent at any time. Your cloud backup holds the same log you see in the app, so you can see and correct it there, and the backup follows. For anything else, write to support@hushweek.com, from the address linked to your account if you have one, and we will reply within 30 days. We will not treat you differently for using your rights. You can also complain to your local data protection authority, such as the ICO in the UK or the OAIC in Australia.
California
If you live in California and have an account, we collect the categories of personal information described above: identifiers (your email address and account ID), commercial information (your purchase) and sensitive personal information (the health data in your cloud backup). We collect them from you, use them only for the purposes in this policy, and disclose them only to the service providers listed above. We do not sell or share personal information as the CCPA defines those words, and we use sensitive personal information only to provide the service you asked for. You can ask to know, correct or delete your personal information, yourself or through an authorized agent.
Consumer health data
Some US states, such as Washington under its My Health My Data Act, Nevada and Connecticut, give consumer health data extra protection. Without an account, Hushweek does not collect consumer health data: what you log stays on your phone. With an account, we collect the health data in your cloud backup, from you and with your consent, only to keep your backup and bring it back for you. Because Hushweek follows a medicine, we treat your account details with the same care. We never sell this data, and we share it with no third parties or affiliates: the providers above handle it only for us. You can confirm what we hold, get a copy, delete it or withdraw your consent at any time, as described above. If we turn down a request, you can appeal by replying to our answer; if you’re still not satisfied, you can contact your state’s attorney general.
Security
Your log on your phone is protected by your phone’s own security: its passcode, Face ID, Touch ID or fingerprint, and the encryption your phone applies to app storage. Keeping your phone locked keeps your log private, and the app lock can ask for Face ID, Touch ID or your passcode before Hushweek opens.
If you have an account, there is no password to steal: you sign in through Apple, Google or a one-time code, and your sign-in is kept in your phone’s secure storage. Your cloud backup travels encrypted and is stored encrypted, and the database lets each account reach only its own backup. The backup is not end-to-end encrypted, which is what lets it come back on a new phone with nothing more than signing in. We don’t look at what’s in a backup unless you ask us to help with yours. No storage or transmission is perfectly secure, but we work to protect your data and keep as little as we can in the first place.
Children
Hushweek is meant for adults. It is not directed to children, and we do not knowingly collect personal data from anyone under 13 (16 in the EU and the UK). If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it takes effect.
Contact
Questions or requests: support@hushweek.com.