1. Who we are
Peptrack is operated by Peptrack (“we”, “us”). We are the controller of the personal information described in this policy. You can reach us at hello@peptrack.app.
2. What we collect
Account information
- Your email address, and a password if you sign up with email. Passwords are stored in hashed form by our authentication provider and are never visible to us.
- If you choose to sign in with Google, we receive your name, email address and profile picture from Google.
- An optional display name you add to your profile.
Records you enter in the app
Peptrack exists to keep your records, so it stores what you put in it:
- Vials and inventory, such as the name you give a vial, its size, the water added and how much remains.
- Protocols and schedules you create, and reminder times you set.
- Dose log entries, including the time, amount, injection site and any notes.
- Weight entries, nutrition entries and side effects you choose to log.
This is health-related information. You decide what to enter, and you can have it deleted at any time. We process it only to provide the app to you.
This website
- The calculators run in your browser. The values you type are not transmitted to or stored by us.
- This website does not require an account and does not use advertising cookies or cross-site trackers.
- Like any website, our hosting provider processes standard technical data such as your IP address and browser type in server logs, to deliver the pages and protect against abuse.
Messages you send us
If you email us, we keep the message and your address so we can reply and keep a record of the request.
3. What we do not collect
- We do not collect your precise location, contacts, photos library or microphone.
- We do not collect payment information. Peptrack is free and has no in-app purchases.
- The app contains no advertising SDKs and no third-party analytics SDKs.
- Reminders are scheduled on your device as local notifications. We do not collect a push-notification token.
- The in-app assistant answers from a fixed set of built-in responses on your device. Your questions are not sent to an external AI service.
4. How we use your information
- To create and secure your account and keep you signed in.
- To store your records and sync them across your devices.
- To calculate things you ask for from your own entries, such as remaining supply or logging streaks.
- To respond to support requests.
- To keep the service secure and prevent abuse.
We do not sell your information, use it for advertising, or share it with data brokers.
Where the GDPR or similar laws apply, we rely on performance of our contract with you to run your account, on your explicit consent to process the health-related records you choose to enter, and on our legitimate interest in keeping the service secure. You can withdraw consent at any time by deleting the records or your account.
5. Who we share it with
We share information only with service providers that process it on our behalf, under contract, to run Peptrack:
- Supabase provides our database and authentication. Your account and records are stored there.
- Google, only if you choose Google sign-in, to authenticate you.
- Vercel hosts this website.
- Apple and Google distribute the app through their stores and may give us aggregated, non-identifying statistics such as download counts.
We may also disclose information if the law requires it, or to protect the rights, safety and security of our users or the service. If Peptrack is ever acquired or merged, your information would transfer under the terms of this policy, and we would tell you first.
These providers may process information in countries other than your own. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.
6. Storage and security
- Data is encrypted in transit using TLS.
- Database access is restricted per account with row-level security, so one account cannot read another’s records.
- Sign-in credentials on your device are kept in the operating system’s secure storage.
No system is perfectly secure. Please use a strong, unique password and keep your device locked.
7. Retention and deletion
- We keep your account and records for as long as your account exists.
- When you delete your account, your profile and all of your records are deleted from our live database immediately. This cannot be undone.
- Copies in routine encrypted backups are not accessed and are overwritten within 30 days.
- We may keep the email thread about a deletion request as a record that it was completed.
Step-by-step instructions are on the Delete Your Account page.
8. Your rights and choices
- Access and export. Use Settings → Export Data in the app to get a copy of your dose logs, protocols, vials, weight entries and side effects. Email us if you need anything else we hold.
- Correct. Edit any record or your profile in the app.
- Delete. Delete your whole account in the app, remove individual records such as vials and protocols there, or email us to remove anything else.
- Reminders. Turn notifications off in the app or in your device settings.
Depending on where you live, you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. California residents have the right to know, delete and correct, and we do not sell or share personal information as those terms are defined in the CCPA. To exercise any right, email hello@peptrack.app. We respond within 30 days.
9. Children
Peptrack is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect information from them. If you believe a minor has created an account, contact us and we will delete it.
10. Changes to this policy
If we change this policy we will update the date at the top of the page, and for significant changes we will tell you in the app or by email before they take effect. See also our Terms of Service and Medical Disclaimer.