Privacy Policy
Last updated: November 2, 2026
This Privacy Policy explains how Scalero LTD ("we", "us"), Levi Eshkol 100, Tel Aviv, Israel, collects and uses personal data when you use heptsy.com and the Heptsy app (the "Service"). We are the data controller for the data described here. Because some of what you log is health information, we hold it to a higher standard: it is used only to show it back to you.
1. Data we collect
- Quiz answers: age range, gender, which GLP-1 you take, how long you've taken it, which days of your shot week feel hardest and which symptoms you notice, and your goals. We use them to set up your app and show your Shot Week Profile.
- Health logs (sensitive data): medication, doses and dates, injection sites, how you feel and how strongly, protein and water amounts, weight, goals and notes you write. We process this data only with your explicit consent, which you give by entering it, and only to provide the Service to you. It is never sold, never used for advertising, never shared with advertising partners and never shown to other users.
- Account data: email address and, if you add it, your first name.
- Usage data: when you log in and use features, your time zone (so "today" matches your day), device type and app version.
- Website data: IP address, browser type, pages visited, and cookie or pixel identifiers (see section 5).
- Payment data: payments are processed by Paddle.com as Merchant of Record. We do not receive or store your full card details. Paddle shares limited order information with us, such as your email, country, plan and transaction status.
2. How we use data
- To set up and provide the Service, including your patterns, recaps, XP and badges (performance of a contract; explicit consent for health logs).
- To manage your subscription and give customer support (contract).
- To send service emails such as login links and renewal reminders (contract), and marketing emails if you opted in (consent). Marketing emails never include your health logs.
- To measure and improve our website, app and advertising using website and funnel data, never health logs (legitimate interests, or consent where the law requires it).
- To meet legal obligations such as tax and accounting (legal obligation).
3. Sharing
We do not sell your personal data. We share it only with service providers who help us run the Service: Paddle (payments), hosting and database providers, our email provider (your email and, if you opted in to marketing, your Shot Week Profile name), and, for website and funnel data only, analytics and advertising partners such as Meta. Health logs stay in our database and are processed only by our hosting and database providers on our instructions.
4. International transfers
Data may be processed outside your country. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses.
5. Cookies and pixels
Our website uses essential cookies and, with your consent where required, analytics and advertising cookies and pixels (for example, the Meta Pixel) to measure ad performance on the marketing pages and quiz. We also send Meta limited event data from our servers (Conversions API), such as a lead or purchase, with your email address in hashed (one-way encrypted) form, your IP address and browser identifiers. We do not send quiz health answers or app logs to Meta. You can manage cookies in your browser settings.
6. Retention
We keep account and health logs while your account is active and for up to 24 months afterward, unless you delete them sooner or the law requires longer (for example, transaction records kept for tax purposes). You can download or delete all your logs at any time from Me in the app.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Withdrawing consent for health logs means deleting them, which you can do yourself in the app. To use any of these rights, email support@heptsy.com. You can also complain to your local data protection authority.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data.
9. Security
We use reasonable technical and organizational measures to protect your data, including encryption in transit and a database that only our server can read; browsers never query it directly.
10. Changes
We may update this policy and will post the new version here with a new "Last updated" date.
11. Contact
Scalero LTD, Levi Eshkol 100, Tel Aviv, Israel. Email: support@heptsy.com.