Privacy Policy

1.Who we are

Goutly (the “app,” “we,” “us,” “our”) is developed and operated by Hung Le Ngoc, an independent developer trading as XBoost. For anyone in the EEA or UK, we are the data controller for this app. As this policy explains, we hold no health data about you at all, and the only personal data processed on our behalf is the limited subscription and device data handled by the providers described in section 5.

You can reach us any time at andrew@xboostapp.io.

2.The short version

• Your health data stays on your iPhone. Your medications, uric acid readings, and flare logs live in the app on your device, and we never receive them.
• No account. No email, no password, no profile — you just open the app and start.
• No ad tracking. No advertising identifiers (IDFA), no App Tracking Transparency prompt, no cross-app tracking, and we never sell your data.
• Subscriptions use trusted providers. To offer optional premium features, the app uses Apple, RevenueCat, and Superwall, which process limited purchase and device data — never your health data.

3.What stays on your device

To do its job, Goutly stores the information you enter in the app's private storage on your iPhone. This can include:

• Your medications — names, schedules, and daily or as-needed (rescue) doses you set up;
• Your dose logs — what you took and when, including missed or skipped days;
• Your uric acid readings — the value, unit, and source (lab, clinic, or home meter), plus any notes you add;
• Your flare logs — dates, affected joints on the body map, and how you felt;
• Your target and preferences — the target your doctor set, units, language, and reminder settings.

This information never leaves your device through Goutly. If you have iCloud Backup or an encrypted computer backup turned on in iOS, your app data may be included in that device backup — but those backups are created and encrypted by Apple under Apple's privacy policy, and we have no access to them.

4.What we don't collect

Goutly does not collect, request, or receive any of the following:

• Your name, email address, phone number, or any sign-in account or profile;
• Your location, contacts, photos, or calendar;
• Data from Apple Health / HealthKit — Goutly does not read from or write to Apple Health;
• Advertising identifiers (IDFA), device fingerprints, or cross-app tracking data — so there is no App Tracking Transparency prompt and nothing to opt out of;
• Behavioral advertising profiles, or any of your health data sent to a server.

The only information processed off your device is the limited subscription and device data described in the next section, and it never includes anything you record about your health.

5.Subscriptions & paywalls (RevenueCat & Superwall)

Goutly is free to download. Some optional premium features are available through an auto-renewable subscription. To offer and manage subscriptions, and to decide which paywall screen to show you, the app relies on three service providers:

• Apple (App Store & In-App Purchase). All payments are processed and billed by Apple through your Apple ID. We never see or receive your payment card details. Apple's handling of this data is governed by Apple's Privacy Policy.
• RevenueCat. We use RevenueCat to manage subscriptions and check whether your purchase is active. RevenueCat generates an anonymous app-user identifier for your install and processes purchase and transaction data (the product you bought, purchase/renewal/expiry dates, price, currency, and store), together with basic device and platform information (device model, operating-system version, and country). RevenueCat is operated by RevenueCat, Inc. in the United States; see the RevenueCat Privacy Policy.
• Superwall. We use Superwall to build and display the paywall screens and to measure how they perform. Superwall processes a device identifier (such as your device's vendor identifier) and paywall-interaction events (which paywall was shown, which product you chose, and whether you subscribed), along with basic device information (model, OS version, locale, and app version). Superwall is operated by Superwall, Inc. in the United States; see the Superwall Privacy Policy.

We use these companies only as service providers (processors) acting on our instructions, under their respective data processing agreements. We do not sell or share your personal information for advertising.

6.International data transfers

RevenueCat and Superwall store the limited subscription and device data described above on servers in the United States. If you are in the EEA, the UK, or Switzerland, this means that data may be transferred outside your country. Where required, these transfers are covered by appropriate safeguards, such as Standard Contractual Clauses and the providers' data processing agreements. Your health data is not transferred anywhere — it stays on your device.

7.The App Store & Apple

When you download or update the app, Apple processes that transaction under its own terms. Apple may share with us aggregated, non-identifying App Store Connect statistics — for example, the total number of downloads, territories, or device types, and anonymized crash reports if you have chosen to share diagnostics with developers. This information does not identify you and never includes anything you enter in the app. Apple's handling of your Apple ID and purchase data is governed by Apple's Privacy Policy.

8.Your health information

The medications, readings, and flares you record are sensitive health information, and we treat them accordingly: the strongest protection is that they never reach us or anyone else. Goutly keeps them on your device, under your control. We cannot see them, cannot recover them for you, and cannot share them with any employer, insurer, advertiser, or authority — because we do not have them, and neither do our subscription providers.

9.Reminders & notifications

If you enable reminders, Goutly schedules local notifications through iOS so your phone can remind you about a dose. These are handled entirely on your device by iOS; we operate no push-notification server and receive no information about whether a reminder fired or what you did with it. You can turn notifications off at any time in iOS Settings.

10.Keeping & deleting your data

Your health data stays on your device for as long as you keep it there. You are always in control:

• You can edit or delete individual entries inside the app at any time.
• Deleting the Goutly app from your iPhone removes the app's on-device data along with it. (If you have a device backup enabled in iOS, a copy may remain in that Apple-managed backup until it is overwritten or the backup is deleted — that is controlled by you through Apple, not by us.)

There is no account of ours to close and no health data on any server for us to erase, because none exists. The limited subscription and device data held by Apple, RevenueCat, and Superwall is retained by them under their own policies; you can ask us to help you request its deletion, or contact those providers directly.

11.Children's privacy

Goutly is intended for adults managing their own gout treatment and is not directed to children under 13 (or the minimum age of digital consent where you live, if higher). We do not knowingly collect personal information from children. If you believe a child has used the app in a way that concerns you, please contact us.

12.Your rights (GDPR & CCPA)

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to processing or withdraw consent.

Because Goutly stores your health data locally and we hold no copy of it, you exercise those rights directly and immediately: you can view and edit every entry inside the app, and you can erase all of it by deleting the app. For the limited subscription and device data held by our providers, email us at andrew@xboostapp.io and we will help you exercise your rights. We do not sell or share your personal information, and we will never discriminate against you for exercising any privacy right.

13.Security

Your on-device data is protected by the same safeguards as the rest of your iPhone: the iOS app sandbox keeps Goutly's data private to the app, and device-level encryption protects it when your phone is locked. Our subscription providers protect the limited data they process using industry-standard measures. Keeping a passcode or Face ID / Touch ID enabled and installing iOS updates are the best things you can do to keep your health data safe. No method of storage is ever perfectly secure, but keeping your health data on your own device — and off any server — removes the largest risks entirely.

14.Changes to this policy

If we change this policy, we will update the “Last updated” date at the top of this page, and for material changes we will make the update clear before it takes effect. If a future version of the app introduces a feature that would change how data is handled, we will update this policy and ask for your consent where the law requires it.

15.Contact