Privacy Policy
Last updated: October 12, 2026
This policy explains what Peptide Protocol collects, where it goes, and the choices you have. It covers the iPhone app, peptide-protocol.app and peptide-calc.app. In short: your protocol records stay on your iPhone, there is no account, we never sell your data, and we never share your health information with advertisers.
1. Your records stay on your device
Peptide Protocol is local-first. Your protocols, doses, schedules, injection sites, vials, check-ins, weight, side effects, notes and progress photos are stored on your iPhone. We do not run servers that receive them, and you do not need an account.
- Progress photos are kept out of iCloud Backup and can be locked with Face ID.
- Your other records are included in your device backup if you use iCloud or computer backups; Apple provides those backups under its own terms.
- Weekly interpretations are written on your iPhone by Apple Intelligence, where available. Your records are not sent to us or to an AI provider.
2. What leaves your device, and who receives it
Product analytics and crash reports — PostHog (EU servers). We record how the app is used — for example screens reached, features used, onboarding answers and the settings you choose — so we can fix problems and improve the app. Events are tied to a random identifier created when you install the app, not to your name or email. Some events include the protocol settings you choose, such as a compound name, dose unit or schedule. PostHog processes this data for us and does not use it for advertising.
Purchases — Apple and RevenueCat. Apple processes payments. RevenueCat manages subscriptions for us: it receives your purchase history, a random app user identifier and, to measure advertising (below), your device's vendor identifier and IP address. It never receives your records.
Apple Search Ads. If you installed the app from an Apple Search Ads ad, Apple tells the app which campaign it came from. We store that campaign information with our analytics and with RevenueCat. No advertising identifier is involved.
Advertising measurement — Meta (Facebook and Instagram). We advertise on Meta. To learn which ads lead to installs and subscriptions, and to show our ads to people likely to find the app useful, we share limited information with Meta Platforms:
- From the app, through Meta's software development kit: that the app was installed and opened, that onboarding was completed, the ad campaign you came from if you tapped a Meta ad, a random identifier created by Meta's SDK, basic device and app information (device model, iOS version, language, time zone, app version) and your IP address. If you allow tracking (section 3), this also includes your device's advertising identifier.
- From RevenueCat, on our behalf, only if you allow tracking: subscription events — trial started, subscription started or renewed — with the product's price and currency, together with Meta's identifier, your advertising and vendor identifiers, your IP address and a hashed form of your app user identifier.
We never send Meta your health information: no compounds, doses, units, injection sites, weights, check-ins, side effects, notes, photos or protocol names. The app is built so that it can only send Meta the events listed above. Meta uses the information it receives under its own Privacy Policy.
3. Tracking and your choices
- The tracking prompt. After you finish setting up the app, iOS asks whether Peptide Protocol may track your activity. If you tap Allow, Meta receives your advertising identifier and RevenueCat sends your subscription events to Meta, as described above. If you tap Ask App Not to Track, neither happens: Meta's SDK runs in a limited mode without your advertising identifier, and Meta says it restricts how that data is used. You can change your answer at any time in iPhone Settings › Privacy & Security › Tracking.
- Meta. You can review and disconnect activity that businesses share with Meta in Meta's “Your activity off Meta technologies” settings.
- Deletion. Deleting the app deletes your records from your device. To have the analytics and purchase records linked to your app identifiers deleted, email contact@peptide-protocol.app.
4. Selling and sharing
We do not sell your personal information. Some US state laws describe sharing data with an advertising platform to measure or target ads as “sharing” personal information; the Meta measurement described above may count as that. You can opt out by choosing Ask App Not to Track, by turning tracking off in iPhone Settings, or by emailing us.
5. Our websites
peptide-protocol.app counts visits with Plausible, a privacy-friendly analytics service that uses no cookies and collects no personal information. The calculators on peptide-calc.app run entirely in your browser; the values you enter are not sent anywhere.
6. Data retention
We keep analytics and purchase records only as long as needed to run and improve the app and to meet legal, tax and accounting obligations. Meta keeps the data it receives under its own policy. Records on your device stay until you delete them or the app.
7. Security
We use reasonable technical and organizational safeguards to protect your information. No method of storage or transmission is completely secure.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete or export your data, and to opt out of sharing. Contact us to use them.
9. Children
Peptide Protocol is for adults and is not directed at children. We do not knowingly collect personal information from children under 13.
10. Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new date.
11. Contact
Questions about privacy can be sent to contact@peptide-protocol.app.