Privacy Policy

Marji is made by Tortuga ("we", "us"). This policy explains what information the Marji app collects, how we use it, and the choices you have. The short version: your health data is yours. We never sell it, never use it for ads and never use it to train AI models.

What we collect

• Health logs you enter. Blood sugar readings, context tags, meds, insulin, shots and notes.
• Apple Health data, if you allow it. If you connect Apple Health, Marji reads your blood glucose readings, such as those saved by a continuous glucose monitor (CGM). Marji only reads the types of data you approve.
• Your setup. Your routine (wake, meal and check times), testing goal, medications, thresholds, units and, if you choose to add it, your last A1C.
• Account details. Your phone number, used to sign in with a text message code, and an account ID.
• Product usage. Events such as finishing onboarding, saving a log or opening a notification. These never include your reading values.

We don't collect your location or contacts.

Apple Health

Data Marji reads from Apple Health is used only to show your readings, trends and Marji's mood, and to build your doctor export. It is never used for advertising or marketing, never sold, never shared with data brokers and never used to train AI models. You can change or turn off Marji's access at any time in your iPhone's Settings under Health > Data Access & Devices.

How we use it

• To run the app: show your readings, trends and Marji's mood, and create your doctor export.
• To schedule reminders. Reminders are scheduled on your device.
• To sync your logs to your account so they're backed up and available if you change phones.
• To understand how Marji is used and make it better, using usage events that never contain your readings.
• To respond when you contact support.

What we never do

• Sell your personal or health data.
• Use your health data for advertising.
• Use your health data to train AI models.
• Track you across other companies' apps or websites.

Where your data lives

Marji is local-first: your logs are stored on your device and work offline. When you're online, they sync to our backend provider (Supabase) so they're tied to your account. Product usage events go to our analytics provider (PostHog) and are linked only to your account ID. Text message codes for sign-in are sent through an SMS provider. These providers process data on our behalf and only as needed to provide their service.

Sharing

We only share your information with the service providers above, or when required by law. When you share a doctor export, you choose who receives it through your phone's share sheet; we don't see who you send it to.

Keeping your data safe

Data is encrypted in transit, and our database uses row-level security so each account can only access its own records. No system is perfectly secure, but we work to protect your information and limit who can access it.

Your choices

• Edit or delete any log at any time from inside the app.
• Turn reminders on or off in Settings or in your iPhone's notification settings.
• Delete your account from Settings. This permanently removes your account and all of your logs from our servers.
• Ask us for a copy of your data or for help with deletion by emailing support@bytortuga.com.

Retention

We keep your data for as long as your account is active. When you delete your account, we delete your data from our active systems promptly, and from backups as they expire.

Children

Marji is for adults. We don't knowingly collect information from anyone under 18.

Changes

If we make meaningful changes to this policy, we'll update the date above and let you know in the app.

Contact

Questions about your privacy? Email support@bytortuga.com.