Privacy Policy
PenWeek is operated by 3Tech L.L.C-FZ ("we", "us"), a company registered in Dubai, United Arab Emirates. This policy explains what data PenWeek collects, why, where it lives, and the rights you have over it. It covers the PenWeek mobile app and the penweek.app website. Questions or requests: hello@3tech.ae.
The short version: your data exists to show you your own week. We don't sell it, we don't run ads, we don't use third-party analytics or tracking. It is stored encrypted in the EU (Frankfurt, Germany), only you can read it, and deleting your account erases all of it.
What we collect
Account data
- Email address - used to sign you in with one-time codes and, if you opt in, to send you your invite or important service notices. There are no passwords.
Health and wellness data you log
PenWeek is a health-tracking app, so the data you enter is health data. You provide it voluntarily, and it is only ever used to show your own logs and summaries back to you:
- Your medication, dose, schedule, and when you started
- Dose logs, including injection sites and skipped doses
- Weight entries and goal weight
- Protein and training logs
- Side-effect (symptom) logs
- Profile details you choose to add: sex, height, units, what you find hardest
What we do not collect
- No advertising identifiers, no ad networks
- No third-party analytics or behavioral tracking SDKs
- No location data
- No contacts, photos, or access to other apps' data
- The penweek.app website sets no cookies and runs no trackers
How we use your data
- To operate the app: showing your logs, curves, streaks, and weekly recaps
- To schedule reminders - these are computed and stored on your device
- To build the doctor export (PDF/CSV) you generate yourself
- To sign you in and keep your account secure
We do not sell your data, share it for advertising, or use it to train AI models. The educational curve in the app is computed from published pharmacology constants and your own schedule - it never leaves your account.
Legal basis
We process your data on the basis of your consent, which you give by creating an account and entering your logs. Health data receives the special-category protections of the EU GDPR (Article 9) and the UAE Personal Data Protection Law. You can withdraw consent at any time by deleting your account.
Where your data lives
All server-side data is stored with our hosting provider Supabase in Frankfurt, Germany (EU), encrypted in transit and at rest. Access is enforced by row-level security: your account can only ever read its own rows. Reminder schedules and notification preferences stay on your device.
Who we share it with
Only service providers that are technically necessary to run PenWeek, acting under contract as processors:
- Supabase - database, authentication, and hosting (EU region)
- Email delivery provider - sends your sign-in codes to your address
No other third parties receive your data. We would only disclose data if legally compelled by a valid request.
Retention and deletion
Your data is kept for as long as your account exists. Deleting your account (Settings → "Delete account & data") permanently erases your account and every log tied to it from our systems - there is no soft-delete or retention window. You can also export your data first from inside the app.
Your rights
Under the GDPR and UAE PDPL you have the right to access, correct, export, restrict, object to processing of, and delete your personal data. Most of these you can exercise directly in the app (export and deletion are built in). For anything else, email hello@3tech.ae and we will respond within 30 days. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority.
Children
PenWeek is intended for adults using prescribed medication and is not directed at anyone under 18. We do not knowingly collect data from minors.
Not medical advice
PenWeek is a tracking and education tool. It is not a medical device, it does not provide medical advice, and it never recommends a dose. See our Terms of Use for the full disclaimer.
Changes to this policy
If we make material changes, we will update the effective date above and notify you in the app before the changes take effect.
Contact
3Tech L.L.C-FZ, Dubai, United Arab Emirates · hello@3tech.ae