Evenweek Privacy Policy

Effective date: October 14, 2026

Evenweek is an iPhone app that helps you log and organize your GLP-1 treatment. It is made by Quelris, a sole proprietorship operated by Yoohwan Kim ("Quelris", "we", "us"). This policy explains what the app stores, what leaves your iPhone, who receives it, and the choices you have.

If you live in Washington, Nevada or Connecticut, also see our Consumer Health Data Privacy Policy. Your use of the app is also covered by our Terms of Use.

The short version

Your health information stays on your iPhone. Doses, weight, side effects, check-ins, notes, prescriptions, nutrition, appointments and reports are stored only in the app on your device. We don't have servers that receive it, and we can't see it.
No account. No cloud sync. No ads. You don't sign up, and the app doesn't use iCloud for your health information.
We don't sell your data, and we don't track you across other apps or websites. There are no advertising or attribution tools in the app.
Two things can leave your iPhone: anonymous usage stats (only if you turn "Usage stats" on; it starts off) and subscription purchase records (handled by Apple and our subscription service, RevenueCat).
You're in control. You can turn usage stats on or off, export your data, and delete everything from Settings at any time.

1. Information stored only on your iPhone

When you agree to "Health data" during setup, the app stores the information you enter on your iPhone:

Treatment details: medication, dose, schedule, device type, start and end dates, planned prescription changes and reasons for stopping.
Dose logs: time, dose, whether it was taken, late or skipped, injection site, and notes.
Body measurements: weight (entered by you or read from Apple Health) and, if you enter it, body composition.
Check-ins: appetite, food noise, side effects and how strong they were, and notes.
Nutrition: protein and water.
Supply and refills: pens or packs on hand, where you buy your medication, price, order and receipt dates, and coverage dates.
Appointments: dates, questions and visit notes.
Reports you create (PDF files) and summaries the app calculates from your logs.
Settings and setup answers: units, goal weight, treatment stage, how you pay for your medication, topics you want help with, reminder and display preferences, and a record of your consent choices.

We never receive this information. It is not sent to us, to analytics, or to our subscription service.

Your iPhone protects app data with its built-in encryption when the device is locked with a passcode. You can also turn on Face ID lock in Settings: the app then asks for Face ID, Touch ID or your device passcode, and hides its content in the app switcher. Face ID is handled by iOS; the app never receives your face data or passcode.

2. Apple Health

If you allow it, the app reads your weight, dietary protein and dietary water from Apple Health to show your trends. It does not write anything to Apple Health. You can change this at any time in the iOS Settings app (Health › Data Access & Devices › Evenweek).

Data from Apple Health:

stays on your iPhone and is never sent to us or to any third party;
is never used for advertising, marketing or data mining;
is never stored in iCloud.

The only related thing the app may record in usage stats (if you turned them on) is whether access was granted and whether weight history was found, never any values.

3. Usage stats (optional)

During setup you'll see a separate Usage stats switch. It is off by default. Nothing is sent unless you turn it on, either during setup or later in Settings › Privacy, and you can turn it off again at any time. When it's off, the analytics tool isn't started and nothing is sent.

When it's on, the app sends short usage events to TelemetryDeck, an analytics service that processes them for us. We use them to understand which steps of setup people finish, whether features get used, and how subscriptions convert, so we can improve the app.

What is sent:

Event names from a fixed list: setup step reached (step number only), Apple Health connected, Apple Health permission result, dose logged, check-in logged, a week with complete logs, dose-step card viewed, weight range set, prescription change added, report created, subscription screen shown, plan chosen, purchase completed, purchase restored, and which kind of reminder was opened.
Information the analytics tool adds to every event: app version and build; device model, screen size and orientation; iOS version; language, locale, region and time zone settings; light or dark mode; accessibility settings (such as larger text or reduced motion); the day, week, month and hour the event was sent; and whether the app came from the App Store or TestFlight. The app turns off the analytics tool's automatic session statistics, so it doesn't send first-use dates, session counts or session lengths.
A random identifier: the analytics tool turns your device's app-vendor identifier into a one-way hashed value on your iPhone, mixed with a fixed value specific to Evenweek, and TelemetryDeck hashes it again on its servers. This lets us count returning users without knowing who you are. It is not your name, email, Apple ID or advertising identifier.

What is never sent: any health values, medication names, doses, side effects, notes, prescription change types, Apple Health data, or anything you type.

Like any internet service, TelemetryDeck receives your IP address when an event is sent. TelemetryDeck keeps event data under its own retention policy (https://telemetrydeck.com/privacy); the data it receives is not linked to you.

4. Subscriptions and purchases

Evenweek requires a subscription. Payments are made through your Apple ID and handled by Apple; we never see your payment card or Apple ID details. Apple's privacy policy applies to that payment.

To manage your subscription and restore purchases, the app uses RevenueCat, a subscription service that processes data for us. RevenueCat receives:

an anonymous app user ID created on your device (not linked to your name or email);
your App Store purchase and subscription records (product, dates, renewal status);
technical information: app version, iOS version, device model, language settings, App Store country, and your device's app-vendor identifier (sent with each request to RevenueCat);
your IP address, as part of any internet connection.

We don't send RevenueCat any health information or any profile details. RevenueCat is used whether or not usage stats are on, because the subscription can't work without it.

You can export a CSV file, create a PDF report, or create an encrypted backup file. These are created on your iPhone and go only where you send them with the iOS share sheet (for example, Files, AirDrop or Mail).

CSV files and PDF reports are not encrypted. Anyone who gets a copy can read it. Once you share a file, the app can't delete or control that copy.
Backup files are encrypted with a passphrase you choose (AES-256-GCM, with a key derived from your passphrase using PBKDF2-SHA256 and 600,000 iterations). We can't recover your backup if you forget the passphrase.

6. Contacting support

If you email us from the app, your email app opens with our address and your app version in the subject. We receive your email address and whatever you write, and use it only to answer you. Please don't include health details you don't want to share. We keep support emails for as long as we need them to answer you, and no longer than 2 years after your last message, using Zoho Mail.

7. Reminders

Reminders are scheduled on your iPhone using iOS notifications; no reminder server is involved. By default, reminders on the lock screen don't show health details. You can change this in the app's notification settings.

8. Who receives information

TelemetryDeck receives usage events, device and app details, a hashed identifier and your IP address, to provide analytics on our behalf. This happens only after you turn Usage stats on, and only while it stays on.
RevenueCat, Inc. receives an anonymous app user ID, purchase records, device and app details, your vendor identifier and your IP address, to manage subscriptions and purchase restore on our behalf. This happens when you view plans, subscribe or restore.
Apple receives your payment and App Store purchase, to process your subscription. This happens when you subscribe.
People or apps you choose receive files you export or share. This happens only when you share.

We require TelemetryDeck and RevenueCat by contract to use the data only to provide their service to us and to protect it at least as well as this policy describes.

We don't sell personal information, don't share it for targeted advertising, and don't use data brokers. We may release information if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

9. Your choices and rights

Turn usage stats on or off: Settings › Privacy › Usage stats. It's off until you turn it on. When you turn it off, sending stops right away.
Withdraw consent to store health data / Delete all data: Settings › Privacy, or Settings › Delete all data. After you confirm, the app erases everything it stored on this iPhone (your logs, settings, reports and consent records, plus the analytics tool's own data and any unsent usage events on the device), stops usage stats, cancels reminders and returns to the start. This can't be undone, so create a backup first if you want a copy. Deleting the app also removes its data from your iPhone. Our subscription service keeps a small amount of data on the device so you can restore your purchase.
What deletion doesn't cover: data in Apple Health (manage it in the Health app), files you already shared, your App Store purchase history (held by Apple), and records already received by TelemetryDeck or RevenueCat. Because those records aren't tied to your name or email, we usually can't find them from a request alone. Contact us at evenweek@quelris.dev and we'll do what we can with the information you give us, and ask our service providers to delete it.
See your data: everything the app stores is visible in the app and can be exported as CSV.
State privacy rights: depending on where you live (for example Washington, Nevada, Connecticut or California), you may have rights to access, delete or correct personal information, to withdraw consent, and to appeal our decision. Email evenweek@quelris.dev. We respond within 45 days. We won't treat you differently for using these rights. Washington, Nevada and Connecticut residents: see our Consumer Health Data Privacy Policy.

10. Children

Evenweek is for adults 18 and older. It isn't directed to anyone under 18, and we don't knowingly collect information from anyone under 18. If you believe someone under 18 is using the app, contact us at evenweek@quelris.dev.

11. Where data is processed

We're based in the Republic of Korea; our address is in the Contact section below. Our service providers may process data in the United States, the European Union or other countries.

12. Security and breaches

The app keeps health information on your device, uses iOS data protection, offers Face ID lock, and encrypts backup files. No method is perfect. If a breach affecting your information occurs, we'll notify you and regulators as the law requires.

13. Changes

If we change this policy, we'll update the effective date. For meaningful changes, the app shows a short summary and asks for your agreement again the next time you open it.

14. Contact

Quelris, a sole proprietorship operated by Yoohwan Kim, Seoul, Republic of Korea

Business registration number (Republic of Korea): 258-02-03672

Email: evenweek@quelris.dev