Privacy Policy – Marker

Last updated: September 28, 2025

This Privacy Policy explains how we handle personal data in connection with our iOS application and the website markerhealth.app (the “Service”).

Controller: Clément Baudet Data Protection Contact: [email protected]

By using Marker, you agree to this Privacy Policy. We collect only what we need to support your GLP-1 journey, maintain the Service, and improve your experience. We never sell your personal data.

---

1) Data we collect

Health & Treatment Data GLP-1 medication administration details, treatment progress tracking, side effects and symptom monitoring, progress measurements and photos, nutritional information from meals and food intake. We process this health data only with your explicit consent.

Account & Subscription App user ID, email (if provided), purchase receipts and entitlement status via Apple In‑App Purchases and RevenueCat (RevenueCat user ID).

Device & Technical Data Product usage analytics, crash and performance diagnostics, device/OS/app version, and similar technical metadata for service reliability and improvement.

HealthKit Integration (Optional) When you choose to connect, we sync relevant health data including weight, nutrition, activity, and related metrics to enhance your treatment tracking.

Support Communications Messages you send us and metadata needed to provide assistance.

We do not collect precise GPS location, your contacts, government ID numbers, or data unrelated to your GLP-1 journey.

---

2) Why we process your data

With your consent: • Health data tracking and treatment insights • Analytics to improve your app experience • Optional HealthKit synchronization

To provide our service: • Account management and authentication • Subscription processing and entitlements • App functionality and core features • Customer support and communications

For business operations: • Security monitoring and fraud prevention • Crash reporting and performance optimization • Legal compliance and safety requirements

You can withdraw consent anytime in app settings. This won’t affect data we’ve already processed with your permission.

---

3) Data sharing

We never sell your data. We only share data with trusted service providers who help us run Marker:

• Apple: Handles App Store payments and HealthKit sync (if you choose)
• RevenueCat: Manages your subscription status
• PostHog: Provides analytics to improve the app (data is anonymized)
• Sentry: Helps us fix crashes and bugs (personal info is removed)
• Hetzner & PlanetScale: Host our servers and databases (data is encrypted)

These companies process data only as needed to provide their services and are bound by their own privacy policies.

---

4) Data retention & deletion

• Active account: Data retained while your account exists and for legitimate business purposes
• Account deletion: Immediate removal of active data; backup copies purged within 30 days
• Analytics data: Retained indefinitely to improve the service (anonymized)
• Support communications: Retained for 3 years for quality assurance

---

5) Security measures

• Encryption: All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Infrastructure: SOC 2 Type II certified data centers
• Monitoring: Continuous security monitoring and regular assessments
• Breach notification: We’ll notify you and authorities within 72 hours if required by law

---

6) Your privacy rights

Under GDPR, you have the right to:

• Access your personal data and processing details
• Rectify inaccurate or incomplete information
• Erase your data (subject to legal obligations)
• Restrict processing in certain circumstances
• Data portability in machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent for health data processing

Exercise your rights: [email protected] Supervisory authority (France): CNIL (cnil.fr)

---

7) Age requirements

You must be at least 18 years old to use Marker. We don’t knowingly collect data from minors.

---

8) International users

Marker is designed primarily for users in regions where GLP-1 medications are commonly prescribed. By using our Service, you acknowledge that your data may be processed in countries with different privacy laws than your own.

---

9) Future enhancements

We may introduce features like:

• Aggregated, de-identified research data licensing (with explicit opt-in consent)
• Enhanced health insights and pattern recognition
• Integration with additional health platforms

Any new data processing will be covered by this Policy or communicated through updates.

---

10) Policy updates

We’ll notify you of significant changes via the app and update the “Last updated” date. Continued use after changes constitutes acceptance of the updated terms.

---

Contact

Questions about this Policy or your data? Email [email protected]