Where your data goes.
Keel holds information about your body, your medication and what you eat. This page says exactly where each of those things goes. It is written to be read, not to be survived.
- No account, no password The app never asks for your name, email or phone number. This website asks for an email only if you want to hear when Keel launches.
- Your health data stays on your phone In the app's own database and your normal iPhone backup. No copy on our server.
- Analytics never get a measurement Not your weight, a protein figure or your dose. Enforced in code, not by policy.
- Nothing is sold No advertising in Keel, and no third party is paid for access to anything you enter.
What Keel stores, and where
Everything you log stays on your phone. It is written to a database in the app's own storage, Keel works with no network connection, and there is no copy on our server.
If you add Keel's widget to your Home Screen, today's protein figure and which days of your week cleared your floor are also copied to a small store the widget shares with the app, on the same phone. It goes nowhere else.
Your phone's own backup is the only other copy. If you do not back up your phone, a lost phone is lost history — there is no account for us to restore it from.
What leaves your device, and to whom
Six services, and nothing else: our server (Supabase), analytics (PostHog), crash reporting (Sentry), food lookups (USDA FoodData Central and Open Food Facts), the language parser (Google Gemini) and subscriptions (RevenueCat). Each one gets the narrowest thing that lets it work.
Analytics receive counts and rough bands — and one thing spelled out rather than buried: which class of medication you are on, never the brand or dose.
When you log a meal by voice, your iPhone turns your speech into words itself. No audio leaves the phone and no recording is kept; the words go to the parser as typed ones do.
Apple Health
If you connect it, Keel reads your height, date of birth and weight to calculate your floor, and can write each weigh-in and the protein in each food you log. It only ever changes what Keel itself wrote. Connecting is optional; every value can be typed in instead.
Who we are to you
On first launch, Keel generates a random identifier for your installation, which our server and RevenueCat both know you by. It is not derived from your device or your Apple Account. We never see your name, your email or your payment details.
Your choices
Use Keel without Apple Health. Share nothing — share cards are made only when you make one, with your weight left off unless you turn it on. Take a copy of everything you've logged as one JSON file from Settings, under Data — it goes only where you send it, and your answers to the health questions are not in it. Delete everything from the same place.
This website
keel-glp.com is served by Cloudflare, which counts visits with Cloudflare Web Analytics: no cookie, no identifier, nothing that follows you to another site.
If you leave your email for the launch list, it is stored on our server (Supabase) with the date you left it, and Resend sends two messages to it: a note that it arrived, and one when Keel reaches the App Store. The second carries a one-time App Store code for your first year, and we keep which code went to your address so it is never sent twice. Reply to either and we delete it.
If you write to us from the contact page, Resend delivers your message and your address to our inbox so we can reply. We keep no other copy; Resend keeps its own record of each message it delivers.
Medical disclaimer
Keel tracks and educates. It is not medical advice. It does not recommend a dose, a titration schedule, or when to start or stop medication. A target set by your clinician always overrides the one Keel calculates.