Privacy Notice

1. Who we are

Signal GLP™ is operated by Signal GLP LLC (Maryland, USA), which acts as the data controller for personal data processed through the service. Contact: support@signalglp.com.

2. Personal data we collect and why

• Account data (name, email, login credentials, authentication identifiers) — to create and secure your account. Legal basis: performance of contract.
• Health and fitness data you provide or sync (weight, glucose readings, blood pressure, medications such as GLP-1 type and dose, meals, hydration, rides, rowing sessions) — to deliver dashboards, fuel plans, and sport specialized coaching. Legal basis: performance of contract and your explicit consent for health data.
• Content you submit (coach messages, photos of labels or meals, notes) — to generate estimates, summaries, and coaching. Legal basis: performance of contract.
• Integration data (tokens and activity from Strava, Concept2, Gluco2Go, and BP2Go, plus health readings you submit through screenshot scanning) — to sync or record your training and health signals. Legal basis: consent given when you connect an integration or submit a screenshot.
• Usage and technical data (device identifiers, IP address, log and telemetry data, error reports) — for security, fraud prevention, reliability, and product improvement. Legal basis: legitimate interests.
• Support communications — to answer your questions. Legal basis: legitimate interests.
• Marketing communications (if you opt in, e.g. waitlist signup) — legal basis: consent, withdrawable at any time.

We do not collect or store your payment card details. Web payment data is collected and processed by Stripe. Payment information for iOS in-app subscriptions is collected and processed by Apple.

3. Who we share data with

• Service providers / subprocessors — hosting, database, authentication, AI model providers, analytics, and error monitoring, acting on our instructions.
• Stripe, our payment processor for web purchases, for subscription management, payments, tax calculation, and invoicing.
• Apple, for payment processing and subscription management when you buy an iOS in-app subscription.
• Integrations you connect, only to the extent needed to sync the data you authorize.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell your personal data.

4. International transfers

We operate from the United States, and our providers may process data in the US and other countries. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account and health data for as long as your account is active and for a limited period afterwards to handle disputes, legal, and tax obligations. Data is then deleted or anonymised. You can request deletion of your account and data at any time.

6. Your rights

Depending on where you live, you have rights to access, correct, delete, restrict, or port your data, to object to certain processing, to withdraw consent, and to opt out of marketing. UK/EEA residents may also complain to their supervisory authority. We respond within one month. Email support@signalglp.com to exercise a right.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls tied to your user account, and restricted administrative access. No system is perfectly secure, but we work to protect your data and notify you of material breaches as required by law.

8. Cookies and local storage

We use essential cookies and browser storage to keep you signed in and to remember preferences. We may use limited analytics to understand feature usage. We do not use advertising cookies. You can clear or block cookies in your browser settings, though the app may not function correctly without essential ones.

9. Children

Signal GLP™ is not intended for anyone under 18.

10. Changes

We may update this notice. Material changes will be communicated in the app or by email.