Ozemplus
Draft: the highlighted passages must be confirmed before publishing.

Ozemplus Privacy Policy

Last updated: October 31, 2026

Ozemplus is a personal diary for people who use GLP-1 medications. Your journey. Your diary. Your results. This policy explains, in plain language, what data the app stores, what it is used for, who it is shared with, and how you stay in control.

It applies to the Ozemplus app (bundle ID com.jumaapps.ozemplus) on the App Store and Google Play and to the website https://ozemplus.jumaapps.com. It is available in English.

Who is responsible for your data

The data controller is Juma Apps LLC exact legal name, registration number, and postal address.

What Ozemplus is — and what it is not

Ozemplus records what you write down: weight, injections, pen stock, habits, symptoms, measurements and photos. It is not a medical device and provides no medical advice. The app never recommends, suggests or adjusts doses; it only stores what you enter.

Ozemplus is intended for adults aged 18 or over who use medication prescribed by their own doctor minimum age 18. Decisions about your treatment are always yours and your doctor's.

Data we collect

Data you enter in the app

All of it is optional and only exists if you type it in:

  • Display name (from your sign-in provider or typed by you)
  • Email address (only if you sign in with Google or Apple)
  • Height, starting weight and goal weight
  • Chosen medication and dose
  • Injection weekday and time
  • Weigh-in history
  • Injection log (date, dose and injection site)
  • Pen and dose inventory (stock)
  • Reminder settings
  • Daily habits (for example water, steps, sleep and protein)
  • Daily side effects and symptoms
  • Body measurements (waist, hips, arm, etc.)
  • Progress photos

Most of this is health data. See "Health data and your consent".

Account data

You can use Ozemplus in three ways. There is no email-and-password or email-code sign-in, and we never store a password.

  • Google: we receive your name, email address and a Google account identifier.
  • Apple: we receive your name and email address (or Apple's relay address, if you choose to hide your email) and an Apple account identifier.
  • Without an account ("Continue without an account"): we ask for no name or email. The app creates an anonymous account with a random identifier, which you can link to a Google or Apple account later (More → Link account).

Authentication and the cloud database run on our own servers, hosted by Hetzner Online GmbH.

Data collected automatically

Very little. Ozemplus contains no advertising, crash-reporting or general app-analytics SDKs; the only usage measurement is on the subscription screen, by Superwall, and it never covers your diary. What exists:

  • IP address: the app's main typeface is bundled with the app, but two typefaces are downloaded from Google Fonts servers when needed: the one on the "Sign in with Google" button, and, for PDF reports in Japanese, Korean and Chinese, the matching Noto Sans font. In those requests, Google receives your device's IP address.
  • Subscription and paywall data: the app user ID that RevenueCat and Superwall receive is the random identifier of your Ozemplus account — it contains no name or email. When the subscription screen (paywall) is shown, Superwall receives that ID, basic device information (such as platform, operating system and app version, and language) and paywall events (which screen was shown, whether you closed it, started a trial or bought). If you subscribe, the store (App Store or Google Play) processes the payment, and RevenueCat receives the same ID, the purchase receipt or transaction details, and the device platform. None of them receives health data.

How we use your data

  • To show your diary, charts, streaks and reminders
  • To back up your diary to the cloud and bring it back when you sign in on a new device
  • To manage your account and subscription
  • To respond when you contact support
  • To keep the service secure and prevent fraud
  • To comply with legal obligations

What we do not do: we do not sell your data, we do not use it for advertising, we do not build commercial profiles, and we do not track you across other companies' apps or websites. That is why Apple's App Tracking Transparency prompt never appears in Ozemplus.

Weight, measurements, medication, dose, injections, symptoms, habits and progress photos reveal information about your health. Under the Brazilian LGPD (Art. 5, II and Art. 11) they are sensitive personal data; under the GDPR and UK GDPR (Art. 9) they are special category data.

We process this data only with your specific and explicit consent, which you give at the moment you enter each item in the app. Ozemplus never collects it on its own, from sensors or from other apps.

You can withdraw consent at any time: by deleting entries inside the app, by deleting your account, or simply by no longer using Ozemplus. Withdrawing consent does not affect processing that already happened, but without this data the diary cannot work.

We do not integrate with Apple Health or Health Connect, and we do not share health data with advertisers, insurers, employers or data brokers.

Who we share it with

Only with the parties needed to make the app work, and each receives only what it needs:

  • Hetzner Online GmbH — hosts the servers that run our authentication and cloud database. Stores the synchronized data listed under "Where data is stored" and, if you sign in with Google or Apple, the name and email address those providers share.
  • Google — Google Sign-In; Google Fonts (IP address); Google Play (subscription billing on Android).
  • Apple — Sign in with Apple; App Store (subscription billing on iOS).
  • RevenueCat, Inc. — processes and validates App Store and Google Play subscriptions on our behalf and tells the app whether Premium is active. Receives the random app user ID, the receipt or transaction details, and the platform. Never receives health data.
  • Superwall, Inc. — displays the subscription screen (paywall) on our behalf and measures how it performs. Receives the random app user ID, basic device information and paywall events, and purchase status from the store. Never receives health data.

Hetzner, RevenueCat and Superwall act as our processors (service providers) and may only use the data to provide their service to us.

We may also disclose data when the law requires it, to protect rights, safety or property, or in a merger or sale of the company. In that last case you will be notified beforehand.

We do not sell your data and do not share it for behavioral advertising. In the terms of the CCPA/CPRA (California), we do not "sell" or "share" personal information.

Where data is stored

Ozemplus is offline-first. Everything is saved to a local database on your device before anything else.

Every account (including anonymous ones) sends the following to our cloud database: profile, weigh-ins, injections, pen inventory, reminders, daily habits and habit goals, symptoms and body measurements. When you sign in to the same account on a new device, this data is downloaded back to it. Data from an anonymous account can only be recovered on another device if you linked it to Google or Apple first.

This cloud copy is private to your account: row-level security means no other user can read it. The people at Juma Apps who operate the service can technically access the database, and do so only to provide support you ask for, to keep the service secure, or when the law requires it.

Progress photos stay on your device only and are never uploaded. If we ever offer cloud backup for photos, it will be opt-in and this policy will be updated first.

Exports (CSV, PDF and the shareable "story" image) are generated on the device and only leave it when you choose to share them.

Our servers are located in Helsinki, Finland (European Union), which may be outside your country.

International transfers

When your data leaves your country, we rely on the safeguards the law provides: in Brazil, the mechanisms of Article 33 of the LGPD (ANPD-approved standard contractual clauses or an adequacy decision); in the European Union and the United Kingdom, Standard Contractual Clauses (SCCs) or the UK IDTA, or an adequacy decision; and equivalent contracts elsewhere.

How long we keep it

  • While your account exists, your data is kept.
  • After a deletion request, we delete the account and synchronized data within 30 days.
  • Backups are purged within 30/90 days.
  • Purchase and transaction records may be retained as required by tax and accounting law.
  • Data on your device, including photos, is removed when you uninstall the app.

Device permissions

  • Notifications: for injection, weigh-in, water and stock reminders. They are scheduled locally on the device; we use no push-notification service.
  • Camera and photo library: only when you add a progress photo.
  • Run at boot (Android, RECEIVE_BOOT_COMPLETED): to re-schedule reminders after the phone restarts.

We do not request location, contacts, microphone, or access to Apple Health or Health Connect.

Subscription and payments

The core diary is free: profile, injection log, weigh-ins, daily habits, reminders, progress charts and up to 3 progress photos. In the free plan, history lists and charts show the last 30 days; older records are kept, not deleted, and appear again with Premium.

Ozemplus Premium adds pen and dose stock (inventory), PDF reports and CSV export, the shareable Story image, body measurements, symptom tracking, side-by-side photo comparison, full history and unlimited progress photos. In Brazil it costs R$ 19.90 per month or R$ 129.90 per year. If an offer includes a free trial, its length is shown in the store before you buy. Prices vary by country and are shown in the store before you buy. Billing is handled by the App Store or Google Play, and the subscription auto-renews until you cancel it in the store. RevenueCat processes the store receipts for us and Superwall displays the subscription screen. Neither we nor they ever have access to your card number.

Security

Data in transit uses TLS. In the cloud, it is encrypted at rest and protected by row-level security, which prevents one account from reaching another account's data. On the device, the local database lives inside the sandbox the operating system reserves for the app. No method is 100% secure; if an incident affects your data, we will notify you and the competent authority as the law requires.

  • Performance of a contract: providing the diary, sync and subscription.
  • Explicit consent: health data (LGPD Art. 11, I; GDPR Art. 9(2)(a)).
  • Legitimate interests: security, fraud prevention and service improvement. We never rely on this basis for health data.
  • Legal obligation: tax records and responses to authorities.

Your rights

At any time you can:

  • Access your data and learn how it is processed
  • Correct incomplete or outdated data (directly in the app)
  • Delete entries or your whole account
  • Take your data with you (portability): export CSV or PDF inside the app
  • Restrict or object to a processing activity
  • Withdraw consent
  • Complain to an authority: the ANPD in Brazil, the ICO in the United Kingdom, or your national data protection authority in the European Union

If you live in California: you have the right to know, delete and correct your information, and not to be discriminated against for exercising those rights. Because we do not sell or share personal information, there is no opt-out to exercise.

To exercise any right, write to [email protected] from the email address of the Google or Apple account you sign in with. If you use Ozemplus without an account, there is no email to match: delete entries or the account inside the app, or write to us and we will explain how to identify the account. We respond within 15 days (LGPD, simplified format) or 30 days (GDPR, UK GDPR and CPRA). We may ask you to confirm your identity first.

Delete your account

You can delete your account inside the app (More → Account → Delete account); the account and synchronized data are deleted right away. If you can no longer open the app, email [email protected] or see https://ozemplus.jumaapps.com/delete-account — we then fulfil the request within 30 days, deleting the account and all synchronized data. Data on your device is removed when you uninstall the app. Full details are on the deletion page.

Children

Ozemplus is not directed to anyone under 18, and we do not knowingly collect their data. If we learn that we have, we will delete it. If you are a parent or guardian and believe a minor has created an account, write to [email protected].

Changes to this policy

When we change something material, we will notify you inside the app and on the website, and update the date at the top. Changes that require new consent, such as cloud backup for photos, take effect only after you accept them.

Contact