The short version: nothing leaves your phone.

• No account. There is no sign-up, no login, no email address and no password. We do not know who you are.
• Where your numbers live. Your weights, measurements, notes, dose and dates are stored by the browser on this device. Progress photos are stored on this device too. None of it is uploaded anywhere, because there is nowhere to upload it to — this app has no server behind it.
• No analytics, no tracking. No usage analytics, no crash reporting, no advertising, no tracking pixels, and no third-party code of any kind.
• No connections. The app makes no network requests while you use it. Even the handwriting and heading typefaces are bundled with it rather than fetched from a font service, so opening the app does not tell anyone that you opened it. The only request it ever makes is back to the address you installed it from, to see whether a newer version of the app itself exists.
• Backups are yours. Back up writes a file wherever you choose to put it. Once that file leaves the app it is in your hands — if you save it to a cloud drive, that service's terms apply to it, not ours.
• Deleting really deletes. Delete all removes every entry, photo and setting from this device for good. There is no copy elsewhere for anyone to hold on to, because there was never a copy elsewhere.
• Worth knowing. Because everything is on the device and nothing is behind a password, anyone who can unlock your phone can open this app and read it. If that matters to you, a device passcode is what protects this — we cannot add a lock that is stronger than the one on your phone.

This app is not intended for use by children.