Privacy Policy

1. Information IsoPal Stores on Your Device

IsoPal is designed to be local-first. The app does not require an account, and your main treatment data is stored on your device. Depending on the features you use, IsoPal may store:

• Profile and treatment setup information, such as treatment start date, current dose, optional weight, dose target, treatment plan, reminder preferences, side-effect preferences, and consent acknowledgements.
• Daily treatment logs, such as whether you took a dose, dose amount, dose slot completion times, acne or skin condition ratings, mood ratings, dryness ratings, selected side effects, and log dates.
• Progress photos, thumbnails, photo tags or body-area labels, selected photo dates, and treatment-day metadata.
• Local settings, such as notification preferences, photo reminder intervals, premium access status, and app configuration values.
• Widget data, such as a compact local snapshot of the current treatment day, dose amount, and dose completion state so iOS widgets can display useful information.

This information is stored in the app's local storage on your device unless a specific feature described below uses a third-party service. Information that remains only on your device is not accessible to IsoPal's developer unless you choose to share it, such as in a support request.

2. Photos and Camera Access

IsoPal may ask for access to your camera or photo library so you can capture or choose progress and baseline photos.

• Camera access is used to take photos inside the app.
• Photo library access is used to choose photos you select.
• Progress photos are stored locally by the app and are not uploaded by IsoPal as currently implemented.
• Photo tags, dates, and treatment-day metadata are stored locally so you can review, filter, and compare your progress.

You can manage camera and photo permissions in iOS Settings.

3. Notifications and Widgets

IsoPal may ask for notification permission so it can send local reminders for doses, treatment start dates, and progress photos. Notification scheduling is handled locally through iOS. Notification preferences and reminder times are stored on your device. You can change notification permissions in iOS Settings or change reminder settings inside IsoPal where available.

IsoPal widgets use a small local snapshot shared between the app and widget extension. This snapshot is used only to display widget information on your device.

4. Limited App and Website Analytics

IsoPal uses PostHog to understand onboarding drop-off, paywall conversion, and website traffic. In the app, IsoPal disables automatic lifecycle, screen-view, interaction, rage-click, crash, survey, and session-replay collection. The app sends only limited events such as:

• onboarding started;
• onboarding step viewed, advanced, or back tapped;
• onboarding backgrounded or completed;
• paywall presented, viewed, or dismissed; and
• paywall purchase or restore completed or failed.

On isopal.app, PostHog sends page-view and page-leave events so IsoPal can understand which public pages are useful. Automatic interaction, rage-click, dead-click, exception, performance, heatmap, survey, person-profile, and session-replay collection are disabled on the website. Website events may include the page URL, referrer, campaign parameters, browser and device information, approximate network information, IP address, event timestamp, and an anonymous analytics identifier. The website respects supported browser Do Not Track settings.

These events may include basic event metadata such as onboarding step name and index, elapsed onboarding time, paywall presentation context, offer format, screen, and whether a completed purchase or restore provided premium access.

IsoPal does not intentionally send your progress photos, photo tags, daily dose values, side effects, mood ratings, skin ratings, weight, treatment plan details, or exact reminder times to PostHog.

PostHog may process technical information normally associated with analytics services, such as device/app information, approximate network information, IP address, event timestamps, and generated analytics identifiers. PostHog processes this information according to its own privacy and security practices.

5. No Advertising Tracking

IsoPal does not show third-party advertising and does not use your data to track you across apps or websites owned by other companies for targeted advertising or advertising measurement. IsoPal does not use the iOS advertising identifier as currently implemented.

6. Purchases and Subscriptions

IsoPal may offer paid features, subscriptions, or lifetime access. Purchases are processed by Apple through the App Store and managed in the app through RevenueCat. When you purchase, restore, or manage access, Apple and RevenueCat may process information such as:

• product identifiers;
• purchase status;
• receipts or transaction identifiers;
• entitlement status;
• subscription renewal, expiration, cancellation, or refund status; and
• technical information needed to validate access.

IsoPal uses this information to unlock paid features, restore purchases, and show subscription status. IsoPal does not receive your full payment card number from Apple.

Apple and RevenueCat process purchase-related information under their own privacy policies and terms. You can review Apple privacy information at https://www.apple.com/legal/privacy/ and RevenueCat privacy information at https://www.revenuecat.com/privacy. PostHog privacy information is available at https://posthog.com/privacy.

7. Information You Provide When Contacting Us

If you contact us for support, feedback, or legal/privacy requests, we may receive the information you choose to provide, such as your name, email address, message content, screenshots, device information, or diagnostic details.

Do not send sensitive medical information, photos, or treatment records in support messages unless you are comfortable sharing that information with us for support purposes.

8. How Information Is Used

IsoPal uses information to:

• provide treatment tracking, reminders, photo organization, progress comparison, statistics, and widgets;
• save and restore your local app state;
• validate paid access and restore purchases;
• understand onboarding performance, paywall conversion, and website traffic;
• respond to support or privacy requests;
• troubleshoot bugs and protect app reliability; and
• comply with legal obligations when applicable.

IsoPal is for personal tracking only and is not a medical device. It does not provide medical advice, diagnosis, or treatment recommendations.

9. How Information Is Shared

IsoPal does not sell your personal information. Information may be shared or processed in the following limited situations:

• With service providers that help operate app and website features, including PostHog for analytics and RevenueCat for purchase management.
• With Apple when you use App Store purchases, subscriptions, iOS permission systems, device backups if enabled, or other Apple platform services. Local reminders are scheduled on device.
• If required by law, legal process, or to protect rights, safety, security, or prevent fraud.
• If the app or related business is transferred, merged, sold, or reorganized, subject to appropriate protections for user information.

Your local treatment logs and progress photos are not uploaded by IsoPal as currently implemented.

10. Data Retention and Deletion

Local IsoPal data remains on your device until you delete it, delete the app, or use in-app deletion tools where available. You can delete local data from within IsoPal where supported, or by deleting the app from your device.

Deleting the app may permanently remove local logs, photos, settings, and widget data unless they were backed up by your device or operating system.

Analytics and purchase records held by third-party providers may be retained according to those providers' policies and legal obligations.

To request deletion or access for information we can identify, contact us using the contact details below.

11. Security

IsoPal uses local device storage and iOS platform security features to help protect your information. However, no method of storage or transmission is completely secure. You are responsible for protecting access to your device, device backups, Apple ID, and any screenshots or exported information you choose to share.

12. Your Choices

You can:

• choose what treatment information and photos to enter;
• skip optional photo features;
• deny or revoke camera, photo library, and notification permissions in iOS Settings;
• change or disable reminders where supported;
• delete local app data where supported;
• manage purchases and subscriptions through your Apple ID or App Store account;
• enable a supported browser's Do Not Track setting to opt out of website analytics; and
• contact us with privacy requests.

13. Children's Privacy

IsoPal is not intended for children under 13. If you are under the age required by your jurisdiction to use apps or health-related tracking tools without parental consent, use IsoPal only with permission from a parent or legal guardian. If you believe a child has provided information to us without appropriate consent, contact us and we will take reasonable steps to address it.

14. International Users

If you use IsoPal outside the country where we or our service providers operate, information processed by third-party services may be transferred to and processed in other countries. Those countries may have data protection laws different from your own.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and provide notice where required by law or platform rules.

16. Contact

For privacy questions or requests, contact:

support@isopal.app