Privacy Policy
This Privacy Policy applies to the mobile applications published by GW Labs (“we,” “us,” “our”) — collectively, "our apps." We design our apps to be private by default. This policy explains what our apps do and do not do with your information. Where a specific app's behavior differs from what is described here, the disclosures shown on that app's App Store product page ("App Privacy" label) apply to that app. It also covers this website, gwlabs.app, and our services for organizations, as described in “This website and our services for organizations” below.
WishLock has its own privacy policy at /wishlock/privacy, because its free version shows ads.
MenoMap has its own privacy policy at /menomap/privacy, because it works with Apple Health data.
Throne Score has its own privacy policy at thronescore.app/privacy, because it offers accounts, shows ads and uses analytics.
The short version
- Content you create in our apps is stored only on your device unless an app explicitly states otherwise. We do not receive it and do not upload it to any account or cloud we control.
- Our apps generally have no user accounts and no login. You are not required to give us your name, email, or any identity to use them.
- Except for Throne Score and WishLock, which have their own policies, we don't use third-party analytics or advertising SDKs, and we never track you across other companies' apps or websites. One app, SleepLock, can send a small set of anonymous usage statistics through our purchase provider, RevenueCat — see the SleepLock section below, which also explains how to turn it off.
- Except where an app's section below says otherwise, the only information that leaves your device is what is needed to process and validate an optional purchase or subscription, as described below.
Information stored on your device
Content you create in our apps — such as entries, logs, history, preferences, and settings — is stored in local storage on your device. This data is not transmitted to us and is not backed up to any account we control. If you delete an app, its data is removed with it, subject to any device-level backups you control through Apple (such as iCloud Backup), which are governed by Apple's terms.
Face ID and Touch ID
Some of our apps, such as Heal: No Contact Recovery, offer an optional Face ID, Touch ID or passcode lock. The check is done by iOS on your device; our apps only learn whether it succeeded and never receive or store your face, fingerprint or passcode data.
Camera, photos, and on-device analysis
Some of our apps (for example, ScentVibe) let you take a photo or choose one from your photo library so the app can analyze it and generate recommendations. This analysis is performed entirely on your device using Apple's on-device frameworks (such as the Vision framework). Your photos and any analysis derived from them are processed locally and are never uploaded to us, to any cloud we control, or to any third-party AI service. Where an app keeps a history of your results, it may store a small compressed thumbnail locally on your device for that purpose. You can revoke camera or photo access at any time in the iOS Settings app, and you can remove all stored content by deleting the app.
Purchases and subscriptions
Some of our apps offer optional in-app purchases and auto-renewable subscriptions (for example, weekly, monthly, or yearly plans, and one-time purchases). To process, validate, and restore these purchases, we use:
Apple / App Store
Apple processes all payments and manages billing and renewals. We never see or receive your payment-card details. Subscriptions are charged to your Apple Account at confirmation of purchase and renew automatically unless auto-renew is turned off at least 24 hours before the end of the current period; you can manage or cancel anytime in your Apple Account settings. Apple's handling of your data is governed by Apple's privacy policy.
RevenueCat
Our subscription-management provider. To verify your purchase status across reinstalls and devices, RevenueCat receives a randomly generated, anonymous app-user identifier and purchase/transaction data (such as which product was bought and its status). This identifier is not your name, email, or Apple ID. It is used only to deliver the purchase functionality you requested.
We do not use this information for advertising, and we do not sell it. RevenueCat's processing of this data is governed by RevenueCat's privacy policy. Your use of paid features is also subject to our Terms of Use (EULA).
SleepLock: anonymous usage statistics
SleepLock (version 1.5 and later) can send a small set of anonymous usage statistics to help us improve the app and its upgrade screen:
- the date you finished onboarding
- the dates of your first and most recent logged nights
- how many nights you have logged, and your current streak (both counts)
- the date you last opened the app
- how many times the upgrade screen was shown, and which part of the app showed it
- whether a free-trial offer was shown
- the result of your most recent purchase attempt (for example completed, cancelled or failed)
- whether a rating prompt was shown
- whether notifications are allowed
We store these values with RevenueCat, our purchase provider. They are attached only to the random app ID that RevenueCat already uses to check purchases, and are never linked to your name, email address or Apple ID. They never include your bedtimes, wake times, sleep durations, energy ratings, routine contents, Apple Health data, or anything you type.
We don't sell this information and don't use it for advertising or to track you across other apps or websites. RevenueCat keeps it for as long as that random app ID exists.
Turning it off: open SleepLock, go to Settings, and switch off "Share anonymous usage stats". SleepLock stops sending statistics and deletes the values it already stored. Purchases keep working as before.
Trough: Apple Health and bloodwork
Trough has no account, no Trough server and no cloud sync. Everything you log in Trough stays in the app’s private storage on your device, and we never receive it:
- your protocol: compounds, doses, schedules and reminder times
- injections: dates, doses and injection sites
- daily check-ins, including optional body metrics and notes
- bloodwork: lab values you type in, your notes, and any photos of lab results you attach
- peptides, GLP-1s and adjuncts you log
Apple Health access is optional. You grant it in an iOS permission screen and can withdraw it at any time in the Settings app or the Health app. With access on, Trough:
- reads HRV, resting heart rate, steps, active energy, sleep and body weight, to pre-fill your check-in and show trends next to your own ratings
- writes only the body weight you record in a check-in
Health data stays on your device. It is never sent to us or to anyone else, and it is never used for advertising or marketing.
If you attach a photo of a lab result to a bloodwork entry, the photo is stored in the app on your device and is not uploaded.
Injection and check-in reminders are scheduled on your device. Trough does not use a push notification server.
Trough has no analytics and sends no usage statistics. The only information that leaves your device is what is described under “Purchases and subscriptions” above, and only if you check plans, buy or restore a Trough Pro subscription. RevenueCat never receives anything you log in Trough and never receives Apple Health data.
You can export your data as a CSV file or a PDF report, and share a progress card. These are created on your device and go only where you send them through the iOS share sheet.
CalmAnchor and Apple Health
CalmAnchor can connect to Apple Health, but only if you turn it on in CalmAnchor's Settings. It is off by default.
When it is on, CalmAnchor:
- saves each finished Panic SOS session to Apple Health as mindful minutes
- saves each mood check-in to Apple Health as a State of Mind entry
- reads your heart rate, only to show how it changed from the start to the end of a Panic SOS session
Heart rate is read on your device, shown on screen, and not stored by CalmAnchor. Nothing CalmAnchor reads from or writes to Apple Health is sent to us or to anyone else. We do not use Health data for advertising or marketing, and we do not sell it or share it with third parties.
CalmAnchor's Apple Watch app sends a finished breathing session to CalmAnchor on your own iPhone, so it counts toward your streak. It does not send it anywhere else.
You can turn the connection off at any time in CalmAnchor's Settings, or in the Health app under Sharing › Apps › CalmAnchor. Data already saved to Apple Health stays there until you delete it in the Health app.
Affiliate and outbound links
Some of our apps display recommendations that include links to third-party retailers or websites. Certain of these may be affiliate links, meaning GW Labs may earn a commission if you make a purchase after tapping them, at no additional cost to you. We do not share any personal information with these retailers; tapping a link simply opens the destination in your browser. Once you leave our app, the third party's own privacy policy and terms govern your activity on their site. Any record of which links you tap is stored locally on your device and is not transmitted to us.
Data we "collect" (App Store privacy disclosure)
For apps that offer purchases, the only data associated with you through the providers above is:
- Purchase History — used for App Functionality (managing your purchase or subscription).
- A device-generated identifier — used for App Functionality (validating your purchase). Not linked to your identity and not used to track you.
- Anonymous usage statistics (SleepLock only, optional) — a few counts, dates and yes/no values about how the app is used, used for Analytics. Tied to the same random purchase ID, never to your identity, and not used to track you. See the SleepLock section below.
Unless an individual app's App Store privacy label states otherwise, we do not collect your contact info, your in-app content, your location, your contacts, or your browsing/search history.
Children's privacy
Our apps are not directed to children under 13, and we do not knowingly collect personal information from children. Because our apps generally have no accounts and store content on-device, no personal information is gathered from any user, including minors.
Your choices and rights
Because your content lives on your device, you remain in control of it. You can:
- View, edit, or delete your content within the app
- Remove all app data by deleting the app
- Manage or cancel any subscription through your Apple Account subscription settings
Depending on where you live (for example, under the EU/UK GDPR or the California CCPA), you may have additional rights regarding personal data. Since we do not hold your in-app content on our servers, most such requests can be fulfilled directly on your device; for anything involving purchase records, contact us using the details below.
Health and wellness apps
Some of our apps provide self-help or wellness tools. Such apps are not medical devices and are not a substitute for professional diagnosis, treatment, or emergency care. If you are in crisis, contact the 988 Suicide & Crisis Lifeline (call or text 988 in the US), text HOME to 741741, or call 911 or your local emergency number.
This website and our services for organizations
This section covers gwlabs.app and the services we provide to organizations.
Forms. When you use our snapshot or contact form, we receive what you enter, such as your name, email, organization, website, role, phone number and message. We use it only to prepare your snapshot, reply to you and follow up about your request. Form submissions are stored by our website host, Netlify, and sent to us by email.
The “Ask GW Labs” assistant. The question you type and the page you are on are sent to an AI model provider, through our website host, to generate an answer. We don’t store chats, and the assistant doesn’t ask for personal information.
Analytics. We use Google Analytics to understand how visitors find and use this website: which pages are viewed, which buttons and links are clicked, and whether a form was sent. It never receives your name, email or anything you type into a form or the assistant; for our forms it records only which form was sent and the options you picked from its menus. Google Analytics uses cookies and collects details such as your device, browser, approximate location and the site that referred you.
Google signals. We use Google signals, a Google Analytics advertising feature. For visitors who are signed in to a Google account and have allowed ads personalization, it gives us aggregated, anonymous reports on age range, gender, interests and use across devices. We don’t use it to advertise to you, and ads personalization is switched off for our analytics. You can opt out with Google’s opt-out browser add-on, control how Google uses your data in My Ad Center, and read how Google uses information from sites that use its services.
Server logs. Like most websites, our host keeps standard technical logs, such as IP addresses and browser type, to deliver and protect the site.
Organizations we work with. Data a client shares with us is used only for that client’s reports, never in benchmarks or for anyone else, as described in our agreement.
We don’t sell personal information or use it for advertising. To see, correct or delete what you’ve sent us, email hello@gwlabs.app.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Effective date" above. Material changes will be reflected on this page.
Contact us
Questions about this policy or your privacy? Contact GW Labs at support@gwlabs.app