Privacy Policy
Calibrum · TRT Tracker & Coach
Effective date: May 5, 2026
Summary
Calibrum is an educational companion for adult men on testosterone replacement therapy. We follow a strict on-device architecture:
- Your health data stays on your device. Injection logs, lab values, symptom entries, photos, and chat history live in iOS storage protected by your device passcode and Apple's Data Protection.
- We never sell your data.
- We never share your data with advertising networks or marketing partners.
- AI Coach (Atlas) chat queries do leave your device (sent to DeepSeek — see §4) but contain only the message text and a brief profile context (current protocol, last lab summary, weeks on TRT). They never include your name, your raw lab PDF, or your HealthKit data.
- Lab PDF photos are processed by OpenAI Vision (GPT-4o) for one-shot extraction (see §5) under
store: false — OpenAI does not retain the image per their API terms.
- You consent in-app before any data leaves your device. The first-launch disclaimer requires a separate AI-consent checkbox naming both providers, and the first time you use Lab Snap or send a message to Atlas you see a confirmation dialog naming the provider and what is sent. You can reset both consents in Settings → Debug → Reset onboarding.
1. What we collect locally on your device
The following are stored only on your device in encrypted iOS storage. They never reach our servers.
- Injection log entries (medication name, dose, site, timestamp, optional notes — testosterone cypionate / enanthate, anastrozole, hCG, ancillaries)
- Lab values extracted from your LabCorp / Quest / hospital PDFs (Total T, Free T, SHBG, Estradiol, Hematocrit, Hemoglobin, PSA, etc.) and the lab PDF images themselves
- Symptom entries (libido, mood, energy, joint pain, water retention, etc., severity ratings, optional free-text notes)
- Free Testosterone Calculator inputs (Total T, SHBG, Albumin, age) and Vermeulen-formula outputs
- AI Coach (Atlas) chat history (your messages and Atlas's responses, including cited sources)
- Doctor Visit Prep PDFs (auto-generated locally before each appointment)
- App preferences (theme, push notification opt-ins, bloodwork timing reminders)
You can export all of this via Settings → Data export, or delete it via Settings → Delete all data, at any time.
2. Apple HealthKit
Calibrum reads selected categories from Apple HealthKit, only with your explicit permission, requested when you tap "Connect Apple Health" in Settings.
- What we read: body-mass (weight) samples, blood-pressure samples, and any lab results you have already imported into HealthKit (Total Testosterone, Estradiol, Hematocrit, Hemoglobin, PSA — categories Apple exposes).
- What we do NOT read: other HealthKit categories. We do not request workout, heart rate, sleep, nutrition, mindfulness, or reproductive-health data.
- What we do NOT write: Calibrum does not write any data back to HealthKit in v1.
- Storage: HealthKit reads are stored only on your device, alongside your other Calibrum data. Never uploaded, never shared, never used for advertising.
- Revoking access: at any time in iOS Settings → Privacy & Security → Health → Calibrum. Previously imported readings remain in Calibrum's local database until you delete them.
3. What we collect on our servers
The only data that leaves your device is:
- Anonymous app analytics events (e.g. "log injection saved", "lab decoded shown") with no personally identifying or lab-specific values. Used only to understand which features work — never to profile individual users.
- Crash reports via Apple's standard crash reporting (anonymized, opt-in via iOS Settings).
- Subscription receipts verified by Apple via RevenueCat for entitlement management. These contain only the subscription identifier and an anonymous user ID — no health data.
We do not collect IP addresses for tracking. We do not use cookies. We do not run advertising SDKs.
4. AI Coach (Atlas) chat
When you send a message to Atlas in the Coach tab, the message text and a brief profile context — your current TRT protocol (medication and dose-per-week), the most recent lab summary (T / E2 / HCT only, no demographics), and weeks since last dose change — are sent to DeepSeek, our AI inference provider, via a Cloudflare Worker proxy.
- DeepSeek receives only what you type plus the brief context above. It never receives your name, your full lab history, your symptom log, your injection log, or your HealthKit data.
- DeepSeek does not retain Calibrum user messages for model training (per their API terms in effect at app launch).
- Atlas's responses are generated against a medical-literature corpus bundled inside the app — Endocrine Society Clinical Practice Guidelines on testosterone therapy, AUA TRT clinical guidelines (2024), AAFP TRT monograph, Bhasin et al. 2018 (Endocrine Society meta-analysis), TRAVERSE trial, FDA prescribing information for testosterone products and anastrozole, and 30+ peer-reviewed PubMed studies. The retrieval over this corpus runs entirely on your device.
- Every Atlas response is checked for compliance phrases before display, and includes an "Educational, not medical advice. Consult your prescribing physician." footer with the source citations used.
- Atlas is forbidden by system prompt from recommending a specific dose, telling you to escalate or de-escalate, suggesting starting or stopping anastrozole, or comparing your situation to "what other people do".
5. Lab PDF photos and Lab Snap & Decode
When you photograph or import a LabCorp, Quest, hospital, or telehealth-clinic lab PDF, the image is sent through our Cloudflare Workers proxy to OpenAI Vision (GPT-4o) for one-shot extraction of biomarker names, values, units, and reference ranges.
- The request is sent with
store: false — OpenAI does not retain the image per their API terms.
- Our Cloudflare Worker does not log the image payload.
- The structured result (e.g. "Total Testosterone 412 ng/dL") is stored on your device alongside the original photo.
- The original photo is also stored on your device unless you choose to delete it.
- Photos are never sent to advertising networks, never linked to your name (you don't have an account), and never used for ad targeting.
6. Subscriptions and payments
Calibrum is a subscription app. Subscriptions are managed by Apple's App Store. We use RevenueCat to verify subscription receipts and manage entitlement state. RevenueCat receives only an anonymous user identifier and the subscription receipt — no health data, no name, no email. See RevenueCat's privacy policy at revenuecat.com/privacy.
7. What we do NOT do
- We do not sell your data.
- We do not share your data with advertising networks.
- We do not use HealthKit data outside the Calibrum app (per Apple HealthKit guidelines § 5.1.3).
- We do not derive insights for clinical decision-making, diagnosis, or prescription. Calibrum is an educational companion. It does not replace your prescribing physician or endocrinologist.
- We do not provide Calibrum to anyone under 18.
- We do not market Calibrum to anabolic steroid cyclers, bodybuilders running off-label testosterone, or anyone outside a physician-supervised TRT protocol.
8. Children's privacy
Calibrum is for adult men on a physician-supervised TRT protocol. We do not knowingly collect data from anyone under 18. If you believe we have, contact us at the email below and we will delete the data.
9. Data retention and deletion
All on-device data persists until you delete it (Settings → Delete all data, or by uninstalling the app). Server-side analytics events are retained for up to 24 months and then aggregated. Crash reports are retained per Apple's standard policy.
10. Your rights
Depending on where you live (EU/UK GDPR, California CCPA, etc.), you may have rights to access, correct, or delete your data. Because we hold no personally identifying data on our servers, most rights apply only to your local app data — which you can fully control via Settings → Data export and Settings → Delete all data.
For requests about server-side analytics that may be associated with your anonymous device identifier, contact us:
11. Changes to this policy
If we materially change how data is handled, we will update this page and bump the date at the top. For significant changes (e.g. adding a new third-party provider), we will surface an in-app notice before the change takes effect.
12. Contact
Calibrum is an independent educational companion app. It is not affiliated with, endorsed by, or sponsored by AbbVie, AstraZeneca, Pfizer, Endo Pharmaceuticals, Clarus Therapeutics, Marius Pharmaceuticals, Hone Health, Hims, Maximus Tribe, Marek Health, TRT Nation, Defy Medical, the FDA, the Endocrine Society, the American Urological Association (AUA), the American Academy of Family Physicians (AAFP), Mayo Clinic, Cleveland Clinic, or any other organisation referenced in the app.