Iris
Privacy

Privacy Policy

Iris is designed around local-first tracking and a narrow product boundary: dose records, symptoms, notes, weight, signals, reminders, widgets, Apple Health import, and visit preparation.

Overview

This Privacy Policy explains how Iris Tracker LLC handles information for the Iris Tracker website and iPhone app. Iris is personal tracking software for GLP-1 dose rhythm, symptoms, notes, weight, signals, reminders, widgets, Apple Health import, and visit preparation.

Iris is not a medical provider and is not designed for emergency monitoring, diagnosis, prescribing, treatment decisions, medication sourcing, or dosing advice.

Information you provide

Depending on how you use Iris, you may enter or provide:

  • Medication name, dose label, cadence, dose dates, and injection-site context.
  • Symptoms, side effects, notes, questions for a clinician, appointments, weight entries, and daily signals.
  • Optional preferences, onboarding choices, and app settings.
  • Contact information and message content if you email us.

Local-first app data

Iris is built as a local-first iPhone app. Core tracking records are designed to live on your device unless a feature clearly asks you to export, share, import, sync, or otherwise transmit data.

Iris does not require an account for core tracking. Current subscription entitlement and attribution handling is described below. If future versions add accounts, cloud sync, or other backend services that transmit additional information to Iris Tracker LLC or a service provider, this policy will be updated before those features are broadly launched.

Apple Health import

If you choose to use Apple Health import features, Iris may request permission to read the categories you select: weight, height, dietary calories, protein, fiber, water, steps, and exercise minutes. Iris only accesses Health data after you grant permission through Apple Health controls.

Apple Health import is optional. Iris does not save, update, write, or delete records in Apple Health. Imported records are copied into Iris on your device.

You can manage or revoke Apple Health permissions in iOS Settings or the Health app.

Widgets and notifications

If you enable widgets or notifications, Iris may store limited local reminder or next-dose display data on your device so iOS can show the widget or notification. Widgets and notifications are intended for convenience only and are not emergency alerts, medical monitoring, or dose instructions.

You can manage notifications in iOS Settings and in Iris settings. Widget content may be visible to anyone who can see your device screen, lock screen, or shared screenshots.

Exports and sharing

Iris may let you create exports such as visit summaries, spreadsheets, or backup files. Exported files may include the records you choose to export. Once you share or store an export outside Iris, that copy is controlled by the app, person, or service you send it to.

Iris+ subscriptions, RevenueCat, and Apple payments

Payments for Iris+ subscriptions are processed by Apple through App Store In-App Purchase. Iris Tracker LLC does not receive your full payment card number from Apple.

Iris uses RevenueCat to manage App Store subscription status and unlock Iris+ access. RevenueCat may receive subscription identifiers, purchase status, product identifiers, an anonymous app-specific RevenueCat user identifier, the offer assigned to the device, and a paywall-impression event for subscription entitlement management, purchase restoration, fraud prevention, support, offer measurement, and subscription analytics.

Iris may receive or access limited purchase and subscription history needed to unlock, restore, manage, and support Iris+ features, such as product identifiers, entitlement state, transaction status, renewal status, refund status, or cancellation status. Iris does not use purchase history for health tracking, medication tracking, advertising, or treatment-related decisions.

Iris does not use RevenueCat to access or store your local dose, symptom, weight, note, or visit-prep data.

If you turn on “Allow anonymous experience sharing” in Iris, Iris may also send limited custom product-usage attributes to RevenueCat, such as onboarding completion, paywall state, and subscription lifecycle milestones. This setting is off by default. Turning it off stops future optional sharing and asks RevenueCat to delete the optional Iris custom attributes previously stored for that anonymous user. Required App Store purchase records, assigned-offer processing, and paywall-impression measurement are not controlled by this optional setting.

Iris does not send RevenueCat your email address, phone number, advertising identifier, custom account ID, medication, dose, weight, symptoms, notes, reports, Visit Prep content, or Apple Health records.

When available, Iris sends Apple’s AdServices attribution token to RevenueCat so Apple Ads install attribution can be associated with subscription outcomes. This does not use the IDFA, and Iris does not request App Tracking Transparency permission for this standard Apple Ads attribution.

You can manage or cancel Apple subscriptions in your Apple Account settings. Refund requests are handled by Apple under Apple's policies.

RevenueCat retains subscription and entitlement records according to its service terms and legal obligations. You may contact Iris at support@iristracker.app to request assistance with data associated with Iris's RevenueCat project. Apple may retain transaction records independently, and some records may need to be managed through Apple or your Apple Account.

AppsFlyer attribution and advertising measurement

Iris uses the AppsFlyer Strict software development kit to measure app installations, app sessions, and whether a trial or paid subscription begins. AppsFlyer starts when Iris becomes active in the foreground. Iris reports the standard events af_start_trial and af_subscribe without event parameters.

Iris also uses six parameter-free product-interaction markers to measure where people stop during onboarding: onboarding started, two aggregate stage completions, onboarding paywall viewed, purchase started, and onboarding completed. These markers are on by default. You can stop future markers in Iris under Profile > Privacy Settings > Manage My Consents by turning off “Allow anonymous funnel analytics.” Turning this control off also discards any unsent funnel markers. It does not affect app-install or session measurement, trial or subscription attribution, purchases, restoration, or Iris+ access.

AppsFlyer may process an AppsFlyer-generated installation identifier, IP address and network connection information, user agent, device and app technical information such as device model, operating-system version, language, app version, installation and session timestamps, commercial-event names and timestamps, and advertising attribution or campaign information. Iris uses the AppsFlyer Strict SDK, which does not include IDFA or the AdSupport framework, and Iris disables collection of Apple's Identifier for Vendor, or IDFV. Iris does not currently request App Tracking Transparency permission.

Iris does not send AppsFlyer revenue amounts, product identifiers, health answers, medication names, dose information, weight, symptoms, Apple Health data, journal content, notes, reports, exports, Visit Prep content, or other health-record contents. The trial, subscription, and six onboarding-funnel events contain only the event name and no custom parameters.

Iris uses Apple's SKAdNetwork and AdAttributionKit through AppsFlyer for privacy-preserving advertising measurement. Iris's AppsFlyer configuration currently enables Aggregated Advanced Privacy and IP masking. Under that configuration, advertising partners may receive limited or aggregate campaign and conversion postbacks without user-level identifiers. Configured advertising partners may include Meta and TikTok. Iris does not forward the six onboarding-funnel markers to Meta or TikTok and does not include them in its SKAdNetwork conversion schema. Iris does not currently enable advanced matching, retargeting audiences, or AppsFlyer OneLink deferred-deep-link matching.

AppsFlyer processes this information for attribution, campaign measurement, fraud prevention, security, reporting, and service operation. AppsFlyer states that it retains end-user data for no more than 24 months and aggregate data for up to 25 months; advertising partners and other service providers may apply their own retention periods. You may contact Iris at support@iristracker.app to request help with access or deletion requests involving AppsFlyer. AppsFlyer provides customer-operated privacy-request tools, but completing a request may depend on the availability of a suitable technical identifier. Legal, security, fraud-prevention, or aggregate records may be retained where permitted or required.

Website data

The Iris website may record anonymous, aggregate events such as page visits, tool starts, tool completions, prints, and App Store link clicks. These events do not include the questions or other content entered into browser-based tools.

Iris uses this aggregate information to understand whether pages and tools are useful. The website does not use tracking cookies, advertising pixels, account login, persistent user identifiers, or third-party analytics scripts for this measurement.

Hosting providers, email providers, and security infrastructure may process basic technical information such as IP address, browser type, requested URL, timestamps, and delivery logs to operate and protect the site.

Analytics and diagnostics

Iris may receive aggregate performance, crash, download, subscription, and usage information from Apple developer tools such as App Store Connect, TestFlight, and Xcode Organizer. These Apple-provided reports help operate and debug the app.

Iris uses RevenueCat for subscription entitlement management, assigned-offer and paywall measurement, optional anonymous product-usage attributes, Apple Ads attribution, and subscription analytics. Iris uses AppsFlyer for installation, session, advertising-attribution, trial-start, subscription-start, and six parameter-free onboarding-funnel measurements. Iris does not currently include a separate third-party crash-reporting SDK. If Iris adds another remote analytics or diagnostics service, the app, this Privacy Policy, and the App Store privacy disclosures will be updated before that data collection is broadly launched. Iris will not send medication names, dose amounts, symptom text, notes, weight values, provider names, reports, Visit Prep content, exports, or Apple Health records to AppsFlyer or use those records for advertising or subscription analytics.

How information is used

We use information to:

  • Provide app features you choose to use.
  • Help you organize your own tracking and visit-prep records.
  • Respond to support or early-access requests.
  • Unlock, restore, manage, analyze, and support Iris+ subscriptions purchased through Apple and managed with RevenueCat.
  • Measure installations, sessions, trial starts, subscription starts, and advertising campaign performance through AppsFlyer and Apple's privacy-preserving attribution systems.
  • Maintain, debug, secure, and improve Iris.
  • Comply with legal obligations and enforce our Terms.

What Iris does not do

  • Iris does not sell personal information.
  • Iris does not use health-adjacent tracking records for advertising.
  • Iris does not send health-record contents to AppsFlyer or configured advertising partners.
  • Iris does not use your tracking records for medication recommendations.
  • Iris does not use purchase history for health tracking, medication tracking, advertising, or treatment-related decisions.
  • Iris does not provide prescribing, sourcing, dosing, or emergency guidance.
  • Iris does not require website visitors to create an account.

Access, deletion, and control

Core Iris records are stored locally on your device. You can edit or delete records in the app where controls are available, delete exported files wherever you stored them, or delete the app from your device to remove locally stored app data from that device.

“Allow anonymous funnel analytics” is on by default. Turning it off in Profile > Privacy Settings > Manage My Consents stops future AppsFlyer onboarding-funnel markers and discards any markers waiting to be sent. RevenueCat's separate “Allow anonymous experience sharing” control remains off by default and controls only optional RevenueCat product-usage attributes.

If you contact Iris Tracker LLC by email, you can request access to or deletion of support communications we maintain, subject to legal, security, and operational limits. You may also ask Iris to coordinate a privacy request involving AppsFlyer or RevenueCat data associated with Iris. Some information, such as Apple transaction records, may need to be managed through Apple or your Apple Account settings. Service providers may retain legal, security, fraud-prevention, or aggregate records where permitted or required.

Consumer health data notice

Some state privacy laws define consumer health data broadly. For purposes of this notice, consumer health data that Iris may collect on your device includes medication and dose records, symptoms and side effects, weight and nutrition entries, activity and wellness signals, journal or Visit Prep content, and the Apple Health categories you choose to import. Sources are information you enter, information you choose to import from Apple Health, and app settings or actions you choose.

Iris processes this information on your device to provide the tracking, reminder, trend, report, export, and visit-preparation features you request. Iris Tracker LLC does not receive these core records through AppsFlyer or RevenueCat. Iris does not sell consumer health data, use it for advertising, or share it with Meta, TikTok, AppsFlyer, or RevenueCat.

Iris shares consumer health data only when you direct the app to create, store, or send an export or use another iOS sharing feature. The recipient, storage provider, email provider, clinician, or other person you select then processes that copy under their own practices. Limited local reminder or next-dose information may also appear in iOS widgets or notifications that you enable.

Iris does not permit a third party to collect consumer health data over time across unrelated websites or online services through the app. AppsFlyer processes the technical attribution information described above, but Iris does not send it consumer health data or health-record contents.

You can review, correct, or delete local records using Iris controls, revoke Apple Health access in iOS, delete exports where you stored them, or delete the app to remove its local app data from that device. To request access, deletion, withdrawal of consent, or an appeal of a privacy-request decision involving information maintained by Iris Tracker LLC or its processors, email support@iristracker.app. We may need to verify the request and may retain information where permitted or required by law. Material changes to this notice will be shown by a new effective date and change-history entry before the changed processing begins where required.

International users

Iris Tracker LLC is based in the United States. If you use Iris from outside the United States, your information may be subject to U.S. laws and the laws of your location. Iris is designed as a local-first app, so core tracking records are intended to remain on your device unless you choose to export, share, import, sync, contact us, use Apple services, use RevenueCat-managed subscription features, or otherwise transmit information.

If privacy laws in your country or region give you rights to access, correct, delete, object, withdraw consent, or request information about processing, contact us at support@iristracker.app. We will respond consistent with applicable law and the current product design.

Security

We use reasonable administrative, technical, and organizational measures appropriate for the current product stage. No method of storage or transmission is perfectly secure. Keep exported files, device access, and backups under your control.

Children

Iris is intended for adults. It is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy as Iris changes. The updated version will show a new last-updated date.

  • August 20, 2026: Added the six parameter-free AppsFlyer onboarding-funnel markers, their default-on in-app opt-out, and the rule that they are excluded from Meta, TikTok, and the SKAdNetwork conversion schema.
  • August 19, 2026: Added AppsFlyer installation, session, advertising-attribution, trial-start, and subscription-start disclosures; clarified technical identifiers, aggregate partner postbacks, retention, and privacy requests.
  • July 31, 2026: Clarified RevenueCat subscription, assigned-offer, paywall, Apple Ads attribution, and optional anonymous experience-sharing disclosures.

Contact

Questions about this Privacy Policy can be sent to support@iristracker.app.