Your log stays on your phone.

01Who we are

Peptide Tracker is an iPhone app for logging peptide injections and how they affect you. This policy covers the app and the website at peptide-tracker.ai. Reach us at hello@peptide-tracker.ai.

We do not run user accounts. There is nothing to sign up for and no password to lose.

02What stays on your device

Everything you enter lives in the app’s storage on your iPhone: the peptides you track, doses and times, injection sites, weights and other trackers, side effects, notes, photos, your onboarding answers and your assistant conversations.

We cannot see any of it. It is not uploaded to us, we hold no copy, and we cannot recover it for you. If you delete the app or reset your phone, that data is gone. Export a PDF first if you want to keep it.

Device backups are your own: if iCloud Backup or an encrypted local backup is switched on, your app data may be included, under Apple’s terms rather than ours.

03Assistant questions

When you ask the in-app assistant something, your question and the relevant context from your protocol — which peptides you track, your doses and schedule — are sent over an encrypted connection to our server, which generates the answer and returns it.

We do not store your question, the context or the answer. They are held in memory only for as long as it takes to produce a reply, and are not used to train models. The conversation itself is saved on your phone, where you can delete it.

We do not attach your name, email or device identifiers to assistant requests, because we do not have them.

04Subscriptions

Purchases are handled by Apple. We use RevenueCat to tell the app whether a subscription is active. That check involves an anonymous, app-generated identifier and the receipt Apple issues — not your name, email or payment details.

We never see your card. Apple does not share your payment information with us. What we can see is aggregate: how many subscriptions are active, and how many were refunded.

05Crash reports

If the app crashes, we collect a diagnostic report: the device model, the iOS version, the app version and a technical stack trace of what failed.

Crash reports do not contain your log. They are used to fix defects and are kept for up to 12 months.

06What we do not do

No advertising, no ad identifiers and no advertising SDKs. No behavioural analytics or usage tracking. No selling or sharing of personal information, in the ordinary sense or in the specific sense CCPA gives those words. No data brokers. No email list unless you write to us first.

07Health information

What you record in Peptide Tracker is health information, and we treat it as the most sensitive category of data there is. Our approach to protecting it is to not hold it.

We are not a healthcare provider, health plan or clearinghouse, so HIPAA does not apply to us and this app is not a medical record. If you share an exported PDF with a clinician, their handling of it is governed by their own obligations.

08Your California privacy rights

Under the CCPA as amended by the CPRA, California residents have the right to know what personal information a business collects, to have it deleted, to correct it, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights.

Because your health log never reaches us, most of these requests have a short answer: we hold none of it. What we can act on is a crash report or a support email, and we will delete those on request. We do not sell or share personal information, so there is nothing to opt out of. You may use an authorised agent, and we will not charge you or degrade the app for asking.

09Children

Peptide Tracker carries a 13+ rating on the App Store. It is not directed at children under 13, and we do not knowingly collect personal information from them.

Because your log stays on your device, we receive no information about any user, of any age. If you believe a child under 13 is using the app, write to us and we will act on it.

10Security

Your data is protected by your device: iOS app sandboxing and the encryption that comes with a passcode-locked iPhone. Set a passcode, and turn on Face ID for the app if you want a second lock.

Assistant requests travel over TLS. No system is perfect, and no method of transmission is completely secure.

11Changes to this policy

If this policy changes in a way that affects how your data is handled, we will post the new version here with a fresh effective date and note the change in the app before it takes effect. If we ever add cloud sync or accounts, it will be opt-in and it will be announced plainly, not buried in a revision.