Privacy Policy.

Peptide Tracker is an independent product. We build the iOS and Android apps, the web tools, and the backend that serves them. We are not owned by, controlled by, or operationally entangled with any peptide manufacturer, reseller, or clinic.

We may, however, link to third-party partners in marketing emails and SMS messages you opt into, and we may earn a commission when you purchase through those links. Section 4 below describes that relationship in detail.

You can reach us at hello@peptidetracker.ai. Our backend is hosted in the United States.

We use your data to store your protocols and dose history, to deliver dose reminders, to keep your data in sync across your own devices if you sign in, to diagnose bugs when the app crashes, and to see where people get stuck in product flows so we know what to fix.

If you have opted in via the marketing consent checkboxes, we also use your marketing email and/or phone number to send the kind of message you ticked the box for. Section 4 covers what those messages are and how to stop receiving them.

If you have opted into marketing, we sync a profile snapshot to our email provider, Klaviyo, so the messages you opted into can be relevant rather than generic. The snapshot covers attributes such as your demographics, how engaged you are, and when you were last active. If you have not opted into marketing, nothing is sent to Klaviyo.

If you join the optional Founding Membership, a receipt identifier and your subscription status from the App Store or Google Play are sent to us through RevenueCat, our subscription management provider and a sub-processor acting on our behalf, so we can record that your membership is active. Your payment card details are handled by Apple or Google and never reach us or RevenueCat.

If you use the in-app assistant, your message and a limited slice of context, meaning your active protocols, recent dose logs, and the peptides you track, are sent to our AI provider so it can generate a reply. That provider may retain it for up to 30 days to monitor for abuse. We do not send your notes, your photos, or your contact details, and using the assistant is always your choice.

We send marketing email and SMS only after you have opted in via the corresponding checkbox during onboarding or in Settings. The exact wording of the consent you agreed to, the version number of that wording, and the timestamp are stored in our audit log so we can prove what you consented to.

Marketing emails and SMS messages from us may include offers from health-product partners, including peptide suppliers, lab and diagnostic test providers, at-home test kits, and related services. We personalize which offers you see based on your activity and what you track in the app, including the peptides and protocols in your account and your supply levels, so the offers are relevant to you rather than generic. Peptide Tracker may earn a commission when you purchase through a link in one of those messages. We disclose this relationship in the message itself, not just here. Receiving these offers is not a condition of using the app, opt-in is entirely optional, and opt-out is one tap.

We choose which offers to show you on our own systems, so we don't share your tracked data with those partners. They receive a normal web visit from a tagged URL when you click, but they do not receive your contact details or anything you track in the app.

Our email and SMS messages are delivered through Klaviyo, our email service provider and a sub-processor acting on our behalf. For users who have opted into marketing, Klaviyo receives the activity events and profile attributes described in Section 2 so it can segment and personalize those messages. Klaviyo is contractually our processor. It does not buy your data and may not use it for its own purposes. This is separate from the affiliate vendors above, who receive none of it.

To unsubscribe, reply STOP to any SMS message, click the unsubscribe link in any email, or go to Settings › Marketing in the app. Unsubscribes are honored immediately, and we keep a revocation record in the same audit log so the next time we send to the channel we know to skip you.

California residents: under the CCPA and CPRA, you have the right to opt out of any "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell or share personal data for those purposes. The affiliate links described above pass no personal data to the vendor and do not constitute a sale or share under the CCPA. You may still exercise your access, correction, and deletion rights as described in Section 7.

Your data is stored in a managed database hosted in the United States, and any photos you upload are kept with our cloud storage provider, also in the United States. All traffic between the app and our servers is encrypted in transit over HTTPS, and data at rest is encrypted by our hosting providers.

Authentication tokens live in your device's secure store (iOS Keychain or Android Keystore). We do not store your password in plain text. Password-based accounts use a one-way hash (bcrypt), so even we can't see the original.

We retain your data for as long as you keep the account. If you delete your account, we remove it from the active database within 24 hours and from backups within 30 days.

You can export your data, correct it, or delete it. You don't need to justify a deletion request and we won't try to talk you out of one.

To delete your account, open the app and go to Settings › Danger zone › Delete account. To request an export, email us at hello@peptidetracker.ai from the address associated with your account and we'll send a JSON archive within seven days.

If you are in the EU, UK, or California, you have additional rights under GDPR and CCPA, including the right to object to processing and to lodge a complaint with a supervisory authority. Reach out and we will honor those requests.

This policy does not create a contractual relationship between us. Nothing here is medical advice. Always consult a qualified clinician before starting, pausing, or changing a peptide protocol.