Privacy Policy

Last updated: December 4, 2025

Bio1Up ("we," "us," or "our") operates the GLP-1 Observer website and services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account using Google OAuth, we receive and store:

• Your email address
• Your name
• Your profile picture (if available)

Usage Information

We use PostHog for privacy-preserving analytics. This includes:

• Pages visited and features used
• Session duration and frequency
• Device type and browser information
• General geographic location (country/region level)

PostHog is configured to respect user privacy and does not track personally identifiable information beyond what is necessary for service improvement.

Payment Information

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card numbers or banking details on our servers. Stripe's privacy policy governs the collection and use of your payment information.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your account registration and manage your account
• Process transactions and send related information
• Respond to your comments, questions, and support requests
• Send you technical notices, updates, security alerts, and administrative messages
• Analyze usage patterns to improve and optimize the Service
• Detect, prevent, and address technical issues or fraud
• Send you occasional (roughly monthly) product updates, feature announcements, and promotional communications about the Service. You may opt out of these communications at any time by clicking the unsubscribe link in any email or contacting us at glp1_support@bio1up.com

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, including Stripe (payment processing) and PostHog (analytics)
• Legal Requirements: If required by law, regulation, legal process, or governmental request
• Protection of Rights: To protect the rights, property, or safety of Bio1Up, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Secure authentication via Google OAuth
• Regular security assessments and updates
• Limited access to personal information by authorized personnel

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a portable copy of your data
• Opt-out: Opt out of certain data processing activities

To exercise any of these rights, please contact us at glp1_support@bio1up.com.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are small data files stored on your device.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly, including authentication cookies
• Analytics Cookies: Used by PostHog to understand how visitors interact with the Service

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

8. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at glp1_support@bio1up.com.