Privacy Policy

Last updated: July 26, 2026

Overview

PepPilot ("we," "us," or "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. PepPilot is a research and protocol tracking tool intended for adults 18 and older.

Data We Collect

We collect only what is necessary to provide the app's core features:

• Account information: your name and email address, used to create and identify your account.
• Protocol and dose logs: peptide names, dosages, schedules, and notes you enter into the app.
• Health data (optional): if you grant HealthKit access, we read steps, heart rate, sleep, and weight to display alongside your protocols. We may write weight entries back to Apple Health. This data is used only within the app and is never transmitted to our servers.
• Usage identifiers: a unique user ID generated at account creation, used to associate your data with your account.

How We Use Your Data

All data collected is used exclusively for app functionality:

• Displaying and syncing your protocols and dose history across sessions
• Delivering push notifications for dose reminders you configure
• Generating AI-powered protocol suggestions based on your logged data
• Providing customer support when you contact us

We do not sell your data. We do not use your data for advertising or share it with third-party advertisers.

Apple HealthKit

HealthKit data is accessed only with your explicit permission. It is processed locally on your device and is never uploaded to our servers or shared with any third party. You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health → PepPilot.

Data Storage and Security

Your account data is stored on secured servers operated by Railway (railway.app) in the United States. We use industry-standard encryption in transit (TLS) and at rest. Authentication is managed by Clerk (clerk.com), which stores your credentials using secure, industry-standard practices.

Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and protocol logs are permanently deleted within 30 days.

Your Rights

You have the right to:

• Access a copy of all data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for HealthKit access at any time

To exercise any of these rights, contact us at the address below.

Children's Privacy

PepPilot is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has provided personal information, we will delete it promptly.

Medical Disclaimer

PepPilot is an educational and research-tracking tool only. Nothing in the app constitutes medical advice, diagnosis, or treatment. Always consult a licensed healthcare provider before beginning any research protocol.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via the app or by email. Continued use of PepPilot after any update constitutes your acceptance of the revised policy.