← Back to Home

Privacy Policy

Last updated: October 8, 2026

All American Atlas LLC ("Fawn," "we," "us," or "our") operates the Fawn mobile application, website (fawnglp.com), and associated services. This privacy policy explains how we collect, use, store, share, and protect your information when you use Fawn.

Fawn is a wellness companion for people using GLP-1 medications. It is not a medical device and does not provide medical advice, diagnosis, or treatment.

This policy describes how we handle your information when you use Fawn. Where the law requires your consent for a particular use — for example, optional analytics and advertising tools on our website in the EEA, the UK, and Switzerland, or the AI features in the app — we ask for it separately and you can withdraw it at any time. Using Fawn is not itself consent to those uses.

Your Privacy Choices. You can request that we limit the sharing of your personal information for cross-context behavioral advertising or analytics. To exercise this right, email us at privacy@fawnglp.com with the subject "Privacy Choices" and the email associated with your Fawn account. We respond within 15 business days. On our website, you can also use the Privacy choices control at the bottom of the page. See Section 7 below for state-specific and country-specific rights, and our Cookie Policy for what our website stores on your device.

1. Information We Collect

Information You Provide

Account Information

Health Data

AI Interaction Data

Community Data

Web Onboarding Data

App Onboarding Answers

When you set up the Fawn app, we ask multiple-choice questions about your GLP-1 journey, goals, and preferences. Your answers are stored with your account identifier on our own servers and analysed in aggregate to understand who Fawn works for and to improve the product. This analysis stays on our own systems: onboarding answers are never shared with analytics or advertising vendors. Free-text responses stay on your device, and weight is only ever represented as a broad range on our servers, never an exact number.

Support Data

Information From Connected Health Platforms, Apps, and Devices

Fawn can connect to health and fitness platforms provided by your device or operating system — including Apple Health on iOS and Health Connect on Android — and to other apps, wearables, scales, and services you choose to link. These connections are optional and off until you turn them on.

When you enable a connection, we may receive categories of health and wellness information from that source, such as body measurements and body composition, weight, height, activity and exercise, sleep, and similar wellness measurements. Where you enable it, information you record in Fawn may also be shared back to the connected platform so your records stay consistent across the apps you use. The specific categories depend on the platform and on the permissions you grant.

We use information received from connected platforms only to provide and personalize the features you have enabled — for example, so you do not have to re-enter measurements by hand, and so your trends, plans, and guidance reflect current information. We do not use it for advertising or marketing, we do not sell it, and we do not share it with advertising networks or data brokers.

You are always in control of these connections. You can grant or revoke access at any time in your device or platform settings, or by disconnecting the integration in Fawn. Revoking access stops any further collection from that source; information we already received remains subject to this policy until you delete it or your account.

Information Collected Automatically

Usage Analytics

We collect pseudonymous usage events from both the app and our website (such as "check-in completed," "lesson opened," or "quiz step viewed") to understand how features are used and improve the experience. In the app, these events are linked to a randomly generated account identifier. On the website, they are linked to a pseudonymous customer identifier — not your name or email. Health values (your actual weight, mood scores, symptom names, or medication details) are never included in analytics events.

Product Session Recording

We use product analytics tools that may record how you interact with our app and website — such as screens viewed, taps, scrolling, and navigation paths — so we can diagnose problems, understand where people get stuck, and improve the experience. These tools are configured to mask the content of health entries and free-text you type, so that the recording reflects how you moved through the product rather than the personal details you recorded in it. You can ask us to exclude your account from this recording by emailing privacy@fawnglp.com.

Technical Data

Attribution Data

Information We Derive

We calculate the following from data you provide: days on medication, check-in streak, weekly progress summaries (habit adherence rates, average mood, symptom counts), next injection date, and estimated medication level.

2. How We Use Your Information

Purpose Data Used
Provide core tracking features Health data (stored on your device and private iCloud)
Power AI companion chat Your message, health context summary, and recent conversation history — sent to our servers for AI processing
Power AI voice companion Your voice audio, health context summary, and first name — streamed to our AI voice provider
Analyze meal photos Your food photo — sent to our servers for AI nutritional estimation
Display community features Your nickname, avatar, posts, and comments
Improve the app and develop new features Pseudonymous usage analytics, user behavior patterns, and feature usage data
Understand who Fawn works for App onboarding answers (multiple-choice only, with weight as a broad range), stored on our own servers and analysed in aggregate; never shared with analytics or advertising vendors
Research and analytics Anonymized and aggregated data, including health data, to understand wellness trends, improve AI quality, and conduct internal research
Train and improve AI models Anonymized and de-identified data to improve the quality of AI responses and develop new AI features
Marketing and promotion Anonymized and aggregated data, community posts, testimonials, and user feedback to promote the Services
Measure advertising effectiveness Install attribution events (sign-up, purchase)
Manage your subscription Account identifier and purchase data
Process web payments Email and payment method (handled entirely by Stripe — card details never touch our servers)
Provide customer support Messages you send in the support chat
Generate health reports All health data compiled locally into PDF/CSV — shared only where you choose
Sync data across your devices Health data synced to your private iCloud database

We do not use your individually identifiable health data for targeted advertising. We will not sell your personal information or health data to data brokers or advertising networks.

Anonymized and De-Identified Data

We may create anonymized, aggregated, or de-identified data from information we collect, including health data, by removing or altering information that could reasonably be used to identify you. Once data has been anonymized or de-identified so that it can no longer reasonably identify you, it is no longer personal information and we may use and disclose it for any lawful purpose, including research, analytics, product improvement, AI model training, marketing, publishing aggregate wellness trends, and sharing with third parties. Anonymized data is retained indefinitely and is not subject to deletion requests.

3. How We Store Your Information

On Your Device and iCloud

All health tracking data (medications, injections, weight, check-ins, symptoms, journal entries, and chat messages) is stored locally on your device and synced to your private iCloud database. This is Apple's end-to-end encrypted private database — we cannot access it. Only your iCloud account can read this data.

Preferences and settings are stored on your device. Authentication tokens are stored in the iOS Keychain, which is hardware-encrypted by the device's Secure Enclave.

On Our Servers

The backend that powers the app's AI features is stateless — it does not have a database and does not persistently store your health data, messages, or photos. Health context passes through to AI services for processing and is discarded. Backend logs record only event types and data sizes; message content, health values, and AI responses are not logged.

When you sign up or purchase through our website, we create your account and store your account record, together with the information you provide through our website, in our cloud database.

In Third-Party Services

Your account record is stored in our cloud database for authentication, community features, and account setup. The health tracking data you enter in the app — medications, injections, weight, check-ins, symptoms, journal entries, and chat messages — stays on your device and in your private iCloud database, and is not stored in our cloud database. Information you provide through our website, including questionnaire responses, may be stored on your account record so we can set up and personalize your Fawn experience.

4. How We Share Your Information

Third-Party Service Providers

We share information with the following service providers who process data on our behalf:

Category of Service Provider Data Shared Purpose
Artificial intelligence and machine learning providers Health context, your messages, search queries that may contain medication or symptom keywords, voice audio, first name, and meal photos AI companion chat and voice responses, knowledge retrieval, and nutritional analysis of food photos
Cloud database, authentication, and app infrastructure providers Account record, information provided through our website including questionnaire responses, social posts, usage events, crash reports Authentication, account setup, community, analytics, reliability
Email delivery providers Email address, first name, and the content of the emails we send you Delivery of account and service emails
Product analytics providers Usage events from app and website, account identifiers (including email used to maintain a consistent cross-device profile), and marketing attribution metadata from our attribution partner. Does not include individually identifiable health data. Product analytics
Marketing attribution providers Sign-up and purchase events, device identifiers, pseudonymous customer ID for web-to-app attribution Marketing attribution
Advertising measurement providers, including Meta (Facebook Pixel) Conversion and subscription events with associated values (such as transaction amount). Excludes questionnaire answers, individually identifiable health data, and email. Advertising measurement
Payment processors, including Stripe Email, payment method details Payment processing for web subscriptions
Subscription management providers Anonymous app user ID, purchase receipts Subscription management
Hosting, content delivery, and security providers Bot verification tokens and network request metadata Website delivery and security
Apple (CloudKit) All health tracking data Private iCloud sync across your devices
Customer support providers Support chat messages (user-initiated) Customer support
Internal team communication and workflow tools Your email address and name, account and payment events (such as a subscription starting, renewing, failing, being refunded or cancelled), and any survey or feedback response you choose to give us, which may include that you have stopped or paused a GLP-1 medication. Excludes your health tracking data, your onboarding questionnaire answers, and the contents of messages you send us through the website contact form. Alerting our team to account events so that a person can act on them, and reaching you about your account

With one exception, these service providers process data on our behalf, under contract, and are not permitted to use it for their own purposes. The exception is internal team communication and workflow tools, which we use as an ordinary business customer under the provider's standard terms; those terms permit the provider to use and retain content posted to the service in order to operate and improve the service itself. We limit what we send to those tools to what a person on our team needs in order to act, as described in the table above. We may add, replace, or remove individual providers within these categories from time to time without updating this policy, provided the category of provider and the purpose of the processing remain as described. If you would like to know which specific providers we currently use, contact us at support@fawnglp.com.

What We Do NOT Share

AI Service Data Handling

We access our AI providers under commercial API terms, not consumer terms. Under those terms, your inputs and the responses generated from them are not used to train their models, and are not retained beyond what is needed to process your request and meet their legal obligations. Voice sessions are processed in real time. Within the app, the AI consent screen identifies the providers that power the AI features at the time you grant consent.

Other Disclosures

We may disclose your information if required by law, regulation, legal process, or governmental request. We may also disclose information to protect the rights, property, or safety of Fawn, our users, or the public.

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Community Features

When you post in the Fawn community:

6. Data Retention

Data Category Retention Period
Health tracking data (on-device + iCloud) Until you delete it or delete your account
Chat messages (on-device) Until you clear chat history or delete your account
Health data sent to AI services Processed in real-time, not persistently stored by our backend
Account information Until you delete your account
Information provided through our website, including questionnaire responses Until you delete your account
Community posts and comments Until you delete your account
Usage analytics Per our analytics provider's retention settings
Usage analytics (app platform) Per Google's retention settings (default 2 months)
Attribution data Per our attribution provider's retention policy
Crash reports Limited retention, then deleted or aggregated
Support chat messages Local session cleared on account deletion. Server-side conversation logs retained per our support provider's data retention policy for support and legal compliance
iCloud data after account deletion May take up to 30 days to fully propagate per Apple's data handling
Anonymized and de-identified data Retained indefinitely; not subject to deletion requests

7. Your Rights and Choices

All Users

You can:

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

To exercise these rights, email us at privacy@fawnglp.com for privacy-specific requests, support@fawnglp.com for general support, or use the in-app account deletion feature. We will respond within 45 days.

Washington Residents

If you are a Washington resident, you have additional rights under the Washington My Health My Data Act (RCW 19.373). Please see our Consumer Health Data Privacy Policy for full details on how we collect, share, and handle consumer health data as required by Washington law.

Virginia, Colorado, Connecticut, and Other State Privacy Laws

If you reside in a state with comprehensive privacy legislation, you may have similar rights to access, correct, delete, and port your data, and to opt out of targeted advertising. We do not engage in targeted advertising using your individually identifiable health data. Contact us at support@fawnglp.com to exercise your rights.

If You Are in the European Economic Area, the United Kingdom, or Switzerland

This part applies to you if you are in the EEA, the UK, or Switzerland, under the GDPR, the UK GDPR, and the Swiss Federal Act on Data Protection. It supplements the rest of this policy and applies where the two differ.

Controller. All American Atlas LLC, United States. Contact privacy@fawnglp.com for anything in this section. We have not appointed a Data Protection Officer; the law does not require one for an organisation of our size and activities.

Purposes and legal bases.

Purpose Data Legal basis
Run the website and quiz, take payment, create and manage your account and subscription, send account emails, answer support Email, first name, plan and payment status (card details stay with Stripe), non-health quiz answers Contract (GDPR art. 6(1)(b))
Store the two quiz answers that reveal GLP-1 medication use, to personalise your welcome email Journey stage and pre-dose feeling, on your account for 14 days. Everything else you answer stays in your browser. Your explicit consent (art. 9(2)(a)): the separate, unticked box on the email screen. Withdraw any time by email.
Security, fraud and bot prevention, error monitoring IP address, device and browser data, error reports with text and inputs masked Legitimate interests (art. 6(1)(f)) in a service that works and is not abused
Analytics: where people get stuck in the quiz, testing variations of the site, reviewing masked recordings of sessions that hit an error Pseudonymous identifiers and usage events (which step, not what you answered about your health) Your consent (art. 6(1)(a)) via the privacy-choices sheet, which also covers the storage on your device (ePrivacy Directive art. 5(3))
Advertising measurement: which ads bring paying customers, including reporting a purchase to the ad platform Pseudonymous identifiers, advertising cookies, campaign parameters from the link you arrived on, and on purchase or renewal a hashed email address, first name and country Your consent (art. 6(1)(a)) via the privacy-choices sheet
Records we must keep, and a record of the choices you made here Payment records; your consent decisions with time and policy version Legal obligation (art. 6(1)(c)); legitimate interest in demonstrating your choices (art. 7(1))

We make no decisions about you based solely on automated processing that have legal or similarly significant effects.

Your choices on this website. Nothing optional runs until you choose on the privacy-choices sheet. Change your mind any time from Privacy choices at the bottom of the page; withdrawing stops the tools at once and clears what they stored in your browser, without affecting what was done while your consent applied. Details in our Cookie Policy.

Your rights. Access, rectification, erasure (Settings > Delete Account in the app does this at once), restriction, portability (the app's PDF/CSV export covers your health data; email us for the rest), objection to processing based on our legitimate interests, and withdrawal of consent at any time. You may also complain to a supervisory authority: your national data protection authority in the EEA (list), the ICO in the UK (ico.org.uk), or the FDPIC in Switzerland (edoeb.admin.ch). We would welcome the chance to address your concern first.

To exercise a right, email privacy@fawnglp.com from the address on your account. We respond within one month (up to three for complex requests, and we will say so). No fee unless a request is manifestly unfounded or excessive.

Retention. Section 6 applies. In addition, the two health-related quiz answers are kept for 14 days after purchase, and consent records for no longer than five years after your last decision.

Transfers. We are in the United States and collect your information there directly from you. Where we pass personal data to providers outside the EEA, the UK, or Switzerland, we rely on the EU-U.S. Data Privacy Framework (with its UK Extension and the Swiss-U.S. DPF) where the provider is certified, and otherwise on Standard Contractual Clauses (with the UK Addendum) and appropriate supplementary measures. Email us for the safeguards that apply to a given provider.

8. Account Deletion

When you delete your account (Settings > Delete Account), the following occurs:

Data that may persist after deletion:

Web subscriptions: If you purchased a subscription through our website, you can cancel via the Stripe customer portal linked in your confirmation email or by contacting us at support@fawnglp.com.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect your information:

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

10. Health Breach Notification

In the event of a breach of security involving your health information, we will:

11. Children's Privacy

Fawn is not intended for children under 18. GLP-1 medications are prescribed to adults, and the app's content is designed for adult users. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us at support@fawnglp.com.

12. International Data Transfers

We are based in the United States, and your information is stored and processed there and in other countries where our service providers operate. Those countries may have data protection laws that differ from those of your country of residence.

Where the law of your country restricts such transfers, we rely on an approved mechanism: for the EEA, the UK, and Switzerland, the EU-U.S. Data Privacy Framework (with its UK Extension and the Swiss-U.S. DPF) where the provider is certified, and otherwise Standard Contractual Clauses (with the UK International Data Transfer Addendum) and appropriate supplementary measures. See the section for EEA, UK, and Swiss residents in Section 7 for more, including how to ask for details.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy within the app and updating the "Last updated" date. We will provide at least 10 days' notice before material changes take effect. Where required by applicable law, we will obtain your consent before applying materially different practices to previously collected data.

Your continued use of Fawn after any changes to this policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have questions about this privacy policy or want to exercise your privacy rights, contact us:

All American Atlas LLC
Email: support@fawnglp.com

15. Third-Party Privacy Policies

Fawn relies on the categories of service providers described in Section 4. Each of them has its own privacy policy governing how it handles data. Several are named directly where you encounter them: Apple (iCloud sync), Stripe (payment processing), and Meta (advertising measurement). Within the app, the AI consent screen names the providers that power the AI features. If you would like the current list of the other providers we use, or a link to a specific provider's policy, contact us at support@fawnglp.com and we will provide it.