1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our newsletter or download a guide, save medication schedules, respond to a survey, or contact us. This includes:

• Account information (email address, name)
• Medication schedule data (drug names, doses, timing)
• Weight and biometric data you choose to enter
• Journal entries and notes
• Usage data and preferences
• Survey and feedback responses: answers you voluntarily submit through in-app surveys. We ask that you do not include personal medical details, but information you choose to enter will be processed as part of your response.
• Website analytics and diagnostics: pages viewed, referring and current URLs, clicks and other interactions, browser and device information, approximate location derived from an IP address, performance data, errors, and sampled session replays. Calculator analytics events may include compound names and numeric configuration or result values, such as vial strength, water volume, dose, concentration, or calculated units.
• Account creation, newsletter signups, and guide signups: email address, the form or page you signed up from, the date and time of your consent, a one-way hash of your IP address, and your browser's user-agent string. This metadata is collected as proof of consent (with double opt-in for newsletter and guide signups) and is not used for advertising.

2. How We Use Your Information

We use your information to provide and improve the GLP3 Planner service, and for any other purposes we deem necessary or appropriate at our sole discretion. This includes:

• Operating, maintaining, and improving the Service
• Sending transactional email (account verification, password resets, contact replies)
• Sending educational and marketing email — including welcome emails, drip series, our weekly brief covering GLP-1 and peptide industry signal, and product updates — to account holders, kit subscribers, and guide subscribers. You can unsubscribe at any time using the link in every email; unsubscribing from marketing email does not affect transactional email tied to your account.
• Detecting and preventing abuse, bounces, and spam complaints

3. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure encrypted connections (HTTPS)
• Password protection with secure hashing
• Regular security updates and monitoring
• Limited access to personal data

4. Data Sharing and Service Providers

We reserve the right to use and share your information as we determine necessary for business operations, legal compliance, or other purposes at our discretion. This may include sharing data in aggregated or anonymized form.

Service providers we rely on:

• Amazon Web Services (AWS), Simple Email Service (SES): processes and delivers all transactional and newsletter email on our behalf, and reports back delivery, bounce, and complaint events so we can keep our sending list clean.
• Google Analytics: aggregated website usage analytics.
• PostHog: provides product analytics, error tracking, sampled session replay, and in-app surveys so we can understand how the Service is used, diagnose technical problems, collect feedback, and improve usability. PostHog processes analytics, replay, and survey-response data on our behalf as a service provider. More information is available in PostHog's privacy policy.
• Hosting and infrastructure providers used to operate the Service.
• OpenRouter (and the AI model providers it routes to, including DeepSeek and Anthropic): if you participate in the optional Dose Check-In Loop beta and reply to a dose-reminder email, the text of your reply is processed by an AI model via OpenRouter to extract structured data (symptoms, energy, appetite, weight, side-effect ratings, etc.) which we then save to your Plotter journal. Replies are also retained in our own audit log so we can debug and improve the parser. You can opt out of the Dose Check-In Loop at any time by replying "stop" to a dose-reminder email.

Search Engine Indexing: If you share your medication schedule publicly using our sharing feature, that shared page may be indexed by search engines such as Google. You can control this by toggling "Allow Search Engines" when sharing. If disabled, search engines are instructed not to index your shared schedule. Shared schedules display medication names, dosing amounts, and dates, but not your personal identity or account information.

5. Your Rights

You may request to:

• Access: View your account information
• Correction: Update your profile data
• Deletion: Request account deletion (subject to our discretion and data retention policies)
• Unsubscribe: Stop receiving marketing email at any time using the unsubscribe link at the bottom of every newsletter, the one-click List-Unsubscribe header supported by most email clients, or by emailing [email protected]. Transactional emails (account, security, and reply messages) are not affected by unsubscribe requests.

We reserve the right to deny any requests at our sole discretion. We may retain your data indefinitely for legal, business, or research purposes even after account deletion.

6. Cookies and Tracking

We use essential cookies to maintain your session and preferences. Google Analytics and PostHog use browser storage and similar technologies to understand how users interact with the Service, associate activity with a browser or session, and support the analytics purposes described above. You can limit this tracking through your browser's privacy settings or content-blocking tools, although doing so may not remove information already collected.

Session replay: We use PostHog to record a sample of browsing sessions. Replays can capture page navigation, clicks, mouse movement, page content, technical errors, and browser console messages. Standard input-field contents are masked by default before replay data is sent to PostHog. Values displayed elsewhere on a page, included in a URL, or deliberately included in an analytics event may still be processed. New session recordings are currently retained for 30 days.

Email tracking: Marketing and educational emails we send through Amazon SES may contain an invisible tracking pixel and rewritten links so we can measure opens and clicks at an aggregate level, identify broken links, and improve future content. If you would prefer not to be tracked this way, you can disable image loading in your email client, avoid clicking links in our emails, or unsubscribe.

7. Children's Privacy

GLP3 Planner is not intended for individuals under 18 years of age. By using the Service, you represent that you are at least 18 years old.

8. Data Retention

We retain your personal information for as long as we determine necessary for any business, legal, or research purpose. This may include retaining data after you delete your account or stop using the Service.

Email suppression list: When you unsubscribe, mark our email as spam, or your address hard-bounces, we add a one-way cryptographic hash of your email address to a permanent suppression list. We retain this hash indefinitely, even if you later request erasure of your other data, so that we can honor your opt-out and avoid ever contacting you again. The plain-text email address is removed; only the hash remains.

9. Changes to This Policy

We may update this privacy policy at any time without notice. Your continued use of the Service constitutes acceptance of any changes. It is your responsibility to review this policy periodically.

10. Limitation of Liability

We are not responsible for any damages resulting from unauthorized access to your personal information or any use or misuse of such information. You use the Service at your own risk.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]

Postal address:
Walscout LLC
30 N Gould St, Ste R
Sheridan, WY 82801
United States