Loading
Last updated 2026-07-29
Your data lives in one database on the operator's own server. It is not sold, shared, or fed to advertisers. There is no analytics or tracking of any kind. What you send to the assistant is passed to a third-party AI provider so it can answer. You can export everything or delete your account yourself at any time.
Your account email, optional name, and a hashed password. Whatever you record in the app: protocols and the compounds in them, logged doses, health metrics, symptoms, injection sites, vial inventory, and your profile details and goals. Your conversations with the assistant, and the assistant's memory notes about you, which you can read and edit under Files. Plus bookkeeping: which invite code you used and a daily count of assistant messages.
Everything sits in a single SQLite database file on a small server in the operator's home, reached over an encrypted connection. Your password is hashed and never stored in readable form. The rest of the data, including your health entries, is not encrypted at rest: anyone with access to that machine could read it. Treat this instance as a personal-scale project, not a medical record system, and do not put anything here you would not want a person with server access to see.
Only one place outside the server: to answer you, the assistant sends your message, relevant profile and protocol context, and your memory notes to xAI (the Grok API), which processes them under its own terms. If you never use the assistant, nothing leaves the server. There are no other third parties, no analytics services, no ad networks, and no data sales or sharing.
One cookie holds your sign-in session. A second remembers your device's local date so the schedule matches your day. Neither is used for tracking and there are no third-party cookies.
The database is backed up daily on the server and kept for 14 days, plus weekly whole-machine snapshots kept for about three weeks. Deleting your account removes your rows from the live database immediately, but copies remain in those backups until they rotate out. Nobody goes looking through them, and they are not used for anything except restoring the instance after a failure.
From the Account page you can export everything as a JSON file and delete your account and all of its data. There is no approval step and no waiting period. Data is kept until you delete it or the instance shuts down.
Contact the person who sent you your invite. See also the Terms.