Your data

Your data, your call.

What GRLY keeps, why it keeps it, and how you stay in charge, in plain words. The privacy policy has the full detail.

Download on the App StoreJoin the Android waitlist
QR code for GRLY on the App Store Scan to download.

What we never do

  • We don’t sell your data.
  • No ad networks, and no ads aimed at you because of your health info.
  • Nothing follows you around other apps or sites. GRLY never asks to track you, because it doesn’t.
  • Your data never trains AI, and the service that reads your label photos doesn’t train on them either.

What GRLY keeps, and why

  • Your account: your name and email, so you can sign in.
  • What you choose to track: your supplements and schedules, what you’ve taken, your check-ins and your journal. It’s what GRLY runs on.
  • Label photos: when you scan a label, the photo goes to the service that reads it, and is deleted shortly after. That service may keep it for up to 30 days to catch abuse.
  • Never: your precise location, your contacts or your photo library.
  • When you sign up, GRLY asks for your OK on a screen of its own, with a box you tick yourself.
  • Change your mind anytime in Menu, then Settings, then Health data processing. GRLY can’t work without it, so turning it off deletes your account, and the app asks you first.
  • Your journal is encrypted, shown only to you, and never sent to AI. Dictate an entry and your phone turns your voice into text itself; no audio is sent.

Kept safe

  • Encrypted on its way between the app and our servers, and encrypted where it’s stored.
  • Each account sees only its own data.
  • Your sign-in stays in Apple’s Keychain on your device.

It’s yours to take, fix or delete

  • A copy: Menu, then Settings, then Request my data starts an email to us, or write to connect@grlyapp.co.
  • A fix: tell us what’s wrong at connect@grlyapp.co and we’ll correct it.
  • Delete it all: Menu, then Settings, then Delete account, whenever you like. It’s gone from our systems right away, and from our encrypted backups as they roll over, usually within a week.
  • Wherever you live, the privacy policy lists your rights and how to use them. If you live in Washington or Nevada, your state’s Washington or Nevada consumer health data policy has more.

On this website

  • No cookies, anywhere on the site.
  • We count visits without cookies, with our host Vercel’s statistics, to make the site better. They see the page, the site you came from, your browser and device, roughly where you are, which of our links you tap and how fast the page loaded, and nothing that says who you are.
  • Visits aren’t counted in the EU, Iceland, Liechtenstein, Norway or Switzerland, when your browser sends Global Privacy Control or Do Not Track, or on the support, legal and Android pages.
  • The only thing the site keeps in your browser is your choice to turn the counting off, if you make it.

Without JavaScript, nothing is counted at all.

Free on iPhone and iPadAndroid waitlistGet the appJoin