Privacy Policy

1.Who we are

Goutly (the “app,” “we,” “us,” “our”) is developed and operated by Hung Le Ngoc, an independent developer trading as XBoost. For anyone in the EEA or UK, we are the data controller for this app — though, as this policy explains, the app is designed so that we hold no personal data about you at all.

You can reach us any time at andrew@xboostapp.io.

2.The short version

• Everything stays on your iPhone. Your medication history, uric acid readings and flare logs live in the app on your device.
• No account. No email, no password, no profile — you just open the app and start.
• No servers of ours. Nothing you enter is uploaded, synced or backed up to us. We operate no server that receives your data.
• No analytics, no trackers, no ads. There are no third-party analytics or advertising SDKs in the app.
• Nothing to sell. We never sell or share your information, because we never receive it in the first place.

3.What stays on your device

To do its job, Goutly stores the information you enter in the app's private storage on your iPhone. This can include:

• Your medications — names, schedules, and daily or as-needed (rescue) doses you set up;
• Your dose logs — what you took and when, including missed or skipped days;
• Your uric acid readings — the value, unit, and source (lab, clinic, or home meter), plus any notes you add;
• Your flare logs — dates, affected joints on the body map, and how you felt;
• Your target and preferences — the target your doctor set, units, language, and reminder settings.

This information never leaves your device through Goutly. If you have iCloud Backup or an encrypted computer backup turned on in iOS, your app data may be included in that device backup — but those backups are created and encrypted by Apple under Apple's privacy policy, and we have no access to them.

4.What we don't collect

Goutly does not collect, request, or receive any of the following:

• Your name, email address, phone number, or any account or profile;
• Your location, contacts, photos, or calendar;
• Data from Apple Health / HealthKit — Goutly does not read from or write to Apple Health;
• Advertising identifiers (IDFA), device fingerprints, or cross-app tracking data;
• Third-party analytics, crash-reporting SDKs, or behavioral profiles.

Because we don't collect this data, there is no App Tracking Transparency prompt and nothing to opt out of.

5.No servers, no third parties

Goutly does not run a backend. We use no cloud database, no hosting provider that receives your data, and no third-party processors. Nothing you enter is transmitted to us or to anyone acting on our behalf. This means there is no server-side copy of your data to be breached, subpoenaed, or sold.

6.The App Store & Apple

When you download, update, or (in future) pay for the app, Apple processes that transaction under its own terms. Apple may share with us aggregated, non-identifying App Store Connect statistics — for example, the total number of downloads, territories, or device types, and anonymized crash reports if you have chosen to share diagnostics with developers. This information does not identify you and never includes anything you enter in the app. Apple's handling of your Apple ID and purchase data is governed by Apple's Privacy Policy.

7.Your health information

The medications, readings, and flares you record are sensitive health information, and we treat them accordingly: the strongest protection is that they never reach us. Goutly keeps them on your device, under your control. We cannot see them, cannot recover them for you, and cannot share them with any employer, insurer, advertiser, or authority — because we do not have them.

8.Reminders & notifications

If you enable reminders, Goutly schedules local notifications through iOS so your phone can remind you about a dose. These are handled entirely on your device by iOS; we operate no push-notification server and receive no information about whether a reminder fired or what you did with it. You can turn notifications off at any time in iOS Settings.

9.Keeping & deleting your data

Your data stays on your device for as long as you keep it there. You are always in control:

• You can edit or delete individual entries inside the app at any time.
• Deleting the Goutly app from your iPhone removes the app's on-device data along with it. (If you have a device backup enabled in iOS, a copy may remain in that Apple-managed backup until it is overwritten or the backup is deleted — that is controlled by you through Apple, not by us.)

There is no account to close and no server data for us to erase, because none exists.

10.Children's privacy

Goutly is intended for adults managing their own gout treatment and is not directed to children under 13 (or the minimum age of digital consent where you live, if higher). We do not knowingly collect personal information from children — and, as described above, we do not collect personal information from anyone. If you believe a child has used the app in a way that concerns you, please contact us.

11.Your rights (GDPR & CCPA)

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to processing or withdraw consent.

Because Goutly stores everything locally and we hold no copy of your data, you exercise these rights directly and immediately: you can view and edit every entry inside the app, and you can erase all of it by deleting the app. We do not sell or share your personal information, and we will never discriminate against you for exercising any privacy right. If you have questions or want to make a request, email us at andrew@xboostapp.io and we will help — though in most cases the fastest route is right inside the app.

12.Security

Your data is protected by the same safeguards as the rest of your iPhone: the iOS app sandbox keeps Goutly's data private to the app, and device-level encryption protects it when your phone is locked. Keeping a passcode or Face ID / Touch ID enabled and installing iOS updates are the best things you can do to keep your health data safe. No method of storage is ever perfectly secure, but keeping your data on your own device — and off any server — removes the largest risks entirely.

13.Changes to this policy

If we change this policy, we will update the “Last updated” date at the top of this page, and for material changes we will make the update clear before it takes effect. If a future version of the app ever introduces a feature that would change how data is handled, we will update this policy and ask for your consent where the law requires it.

14.Contact