Privacy Policy

Peptide Pilot ("we", "us", "the app") is a personal logging tool for peptide protocols, weight, meals, and body measurements. This policy explains what we collect, how we use it, and the choices you have.

We process these data to provide the app and the features you choose:

• Your account identifier, email address, and sign-in information.
• Profile details you enter during onboarding (display name, date of birth, sex, height, current and target weight, activity level, goal).
• Logs you create: weights, peptide doses, vials, schedules, meals, body measurements, daily signals.
• Reminder preferences and weight unit preference.
• Feedback and support messages you send us, with app and browser details.
• Subscription purchases and entitlement status needed to manage access.
• Account activity records used to operate app features, including food searches and selections. BuyFlow provides website attribution. PostHog analytics, Ahrefs analytics, and session replay are disabled in this release.

Your data is stored in our managed backend, encrypted at rest, with row-level security so each account can only read its own rows. We do not sell, rent, or share your data with advertisers.

Peptide Pilot collects health-related information that you choose to log: weight, body measurements, hunger and energy ratings, meals and macros, peptide injections (name, dose, site, vial), and reminder schedules. This data is:

• Stored in our managed backend and protected by account access controls.
• Never linked to advertising identifiers.
• Never sold, rented, or shared with data brokers.
• Never used to track you across other apps or websites.
• Used to provide your records, dashboards, reminders, and features you request.

You can at any time:

• Export your saved account records for free (Settings → Account → Export my data).
• Request permanent deletion of your account and all data (Settings → Account → Delete account).
• Update or correct your profile from the Settings tab.
• Cancel an AI food search and use manual entry instead.
• Change reminder preferences in Settings and notification permissions in iPhone Settings.

Deleting your account removes its active records; it does not cancel an Apple subscription. Manage subscriptions in your Apple account. If no revocable Sign in with Apple credentials are available, the deletion confirmation gives instructions to remove the remaining Apple authorization.

Peptide Pilot is not directed to children under 13. Peptide-related logging features are intended for adults (18+).

Supabase provides account and database services. Cloudflare hosts our app. Service providers process the data needed to operate these services, including network requests and service logs. BuyFlow provides website attribution through its tracking script. PostHog analytics, Ahrefs analytics, session replay, and Telegram activity notifications are disabled in this release.

BuyFlow records page visits, outgoing link clicks, referring pages, campaign tags, device type, and random visitor and session identifiers to measure how people find and use the app. It stores identifiers and queued events in browser storage. Its page URLs omit query strings and fragments; campaign tags are collected separately. We do not send your account identifier or saved health records to BuyFlow. Its script respects browser Do Not Track and Global Privacy Control signals when your browser provides them.

To operate subscriptions on the App Store we share the minimum data required for receipt validation with RevenueCat, Inc. (our subscription infrastructure provider). This includes your app account identifier, purchase and subscription history, product identifiers, and transaction or receipt information supplied by Apple. The account identifier is linked to your account; it is not anonymous. RevenueCat uses these records to validate purchases, manage access, prevent fraud, and provide subscription reports. Apple processes your payment details; we do not receive your payment-card details. No health, weight, peptide, measurement, meal, or reminder data is shared with RevenueCat or any other third party for advertising or analytics purposes.

Before each AI search, we ask permission to send the food text you entered to OpenAI to estimate nutrition. You can cancel and enter food manually. Do not include names or medical details in the search.

If you select an AI food, its description and nutrition are added to the shared food catalog. Your private food search history is linked to your account. OpenAI may retain API content for abuse monitoring under its service terms; see OpenAI’s privacy policy.

Your saved health logs remain until you delete them or your account. Operational records may be removed earlier under service retention rules. Account deletion removes linked records from the active app database. Email suppression records are retained to prevent unwanted messages. Provider backups and required transaction records can have separate retention periods. Contact us for questions about prior analytics or notification records and provider deletion requests.

When this policy changes we update the "Last updated" date at the top and surface a notice in the app for material changes.

Privacy questions, data requests, or deletion requests: