Privacy Policy

Last updated: September 21, 2026 · v2.0

In brief

• No accounts. André has no registration or login: you open it and it is ready to go.
• Your health data lives on your phone. Doses, weight, symptoms, progress photos and your treatment settings are stored only on the device. There is no proprietary server behind André.
• Nothing leaves unless you decide. Health data only leaves your device if you export it (PDF for your doctor, CSV with your records) or share it from your phone.
• Advertising and subscription. The free version displays ads through Google AdMob. If you subscribe (managed by RevenueCat), ads are removed. These services receive certain technical data (see section 4).

1. Data controller

André (hereinafter "we" or "André").
Contact email: contacto@andre-app.com
Website: andre-app.com

André does not currently have a designated Data Protection Officer (DPO). You may direct any privacy inquiry to the email address above.

2. What data the app records

André records the data you enter manually:

• Selected medication (Mounjaro, Ozempic, Wegovy, Saxenda or "Other") and current doses.
• Date and site of each injection.
• Weight and body measurements.
• Symptoms and their severity.
• Optional text notes.
• Progress photos (stored only within the app — they are not saved to your camera roll or any cloud service).
• Reminder settings.

All of this data is stored exclusively in your device's local storage. André does not transmit, copy or sync this data with any external server.

3. Health data and legal basis (GDPR)

Doses, symptoms, injection sites and weight constitute health-related data (a special category of personal data under Article 9 of the GDPR).

The legal basis for processing this data is your explicit consent (Article 9(2)(a) of the GDPR), which you grant by voluntarily entering the information in the app. You may withdraw that consent at any time by deleting your data from the app (see section 7).

Since the data never leaves your device, André does not act as a data controller of your health data in the traditional sense: you retain exclusive control. Nevertheless, we assume responsibility for the app's design to ensure that local storage remains secure.

4. Advertising and subscription: data shared with third parties

André uses a freemium model: the free version includes advertising; the subscription removes ads. This involves sharing certain data with third parties:

4.1 Google AdMob (advertising)

If you use the free version, André displays ads through Google AdMob. AdMob may collect:

• Device advertising identifier (IDFA on iOS, GAID on Android).
• Ad interaction data (impressions, clicks).
• Technical device information (model, operating system, language, time zone).
• IP address (used for approximate ad geolocation).

André never shares your health data (doses, weight, symptoms, injection sites) with AdMob or any other advertising service. Ads are generic; they are not personalized with your treatment information.

The legal basis for advertising is your consent (Article 6(1)(a) of the GDPR), which is requested through the App Tracking Transparency dialog (ATT on iOS) or the in-app consent prompt (Android). You may withdraw your consent at any time from your device settings or by subscribing.

Google processes this data in accordance with its advertising policy. AdMob is a product of Google LLC (USA), which operates under Standard Contractual Clauses approved by the European Commission for transfers outside the EEA.

4.2 RevenueCat (subscriptions)

If you subscribe to remove ads, payment management is handled through RevenueCat. RevenueCat receives:

• An anonymous user identifier generated by the app (not linked to a name or email, since André has no accounts).
• Subscription type, start date, status (active, canceled, expired).
• Store transaction identifier (App Store or Google Play).
• Store country and currency.

RevenueCat does not receive health data. The legal basis is performance of a contract (Article 6(1)(b) of the GDPR): we need to verify your subscription in order to disable ads. RevenueCat, Inc. (USA) operates under Standard Contractual Clauses for transfers outside the EEA. More information in their privacy policy.

4.3 What we do NOT do

• We do not share health data with third parties. Doses, weight, symptoms, injection sites and photos are never sent to AdMob, RevenueCat or any other service.
• There is no proprietary analytics (no Google Analytics, no Firebase Analytics, or similar).
• There are no user accounts or authentication.
• We do not create health profiles or make automated decisions based on your data (Article 22 of the GDPR).

5. Website (andre-app.com)

This website is static and does not use first-party cookies or analytics. However:

• Google Fonts: we load the Manrope typeface from fonts.googleapis.com. When doing so, your browser sends your IP address to Google to download the font files. Google processes this information in accordance with its privacy policy. The legal basis is legitimate interest (Article 6(1)(f) of the GDPR) for the correct presentation of the website.
• Hosting: the server hosting the website may log IP addresses in its access logs as part of normal operation.

6. Future changes

If André integrates additional third-party services in the future (analytics, cloud sync, etc.), this page will be updated before they are activated, detailing what data is shared, with whom and under what legal basis. The app will inform you of the change and request your consent where required.

7. Your rights (GDPR Articles 15-22)

You have the right to:

• Access: view all your data directly in the app (it is already on your device).
• Rectification: edit or correct any record (doses, weight, symptoms) from within the app.
• Erasure ("right to be forgotten"): delete all your data from Profile → Privacy settings → Delete all data. This action is irreversible.
• Portability: export your data in PDF or CSV format from the app.
• Restriction and objection: since the data lives only on your device, you may stop using the app at any time.
• Withdraw consent: you may delete your data or uninstall the app whenever you wish.

To exercise these rights by other means or if you need assistance: contacto@andre-app.com.

If you believe your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency (aepd.es) or the data protection authority in your country.

8. Data retention

Your data is retained on your device for as long as the app is installed and you have not deleted it. André does not set retention periods because it does not access your data. If you uninstall the app without exporting your data, it is lost irreversibly.

9. International transfers

André does not transfer your health data outside your device. However, the third-party services integrated in the app (AdMob and RevenueCat) are operated by companies headquartered in the United States. Both operate under Standard Contractual Clauses (SCCs) approved by the European Commission as safeguards for data transfers outside the EEA.

Loading Google Fonts on the website involves a connection to Google servers, which may be located outside the EEA; Google has the safeguards described in its privacy policy.

10. Security

App data is stored in the device's protected internal storage (application sandbox), which other apps cannot access under normal conditions. Physical security of the device (PIN, biometrics, disk encryption) is your responsibility.

11. Minors

André is intended for adults (aged 18 and over) undergoing GLP-1 treatment prescribed by a healthcare professional. We do not knowingly collect data from individuals under 16 years of age. If we discover that a minor has provided data, we will take the necessary measures in accordance with applicable law.

12. Changes to this policy

We will publish any changes at this same URL (andre-app.com/en/privacy) with the updated revision date. Material changes will be notified via an in-app notice before they take effect.

13. Contact

For any inquiry regarding privacy or data protection:
contacto@andre-app.com