Privacy Policy

Peptidy (“we”, “our”, or “us”) operates the Peptidy web application and iOS app. This policy explains what personal data we collect, how we use it, and your rights.

1. Data we collect

• Account data: your name and email address when you register.
• Profile data: optional fields you choose to enter — weight, age, and goals.
• Protocol data: peptide names, doses, frequencies, injection logs (date, time, site, dose), and reminder settings you create.
• Body metrics: weight, body fat percentage, muscle mass, and waist measurements you choose to log.
• Payment data: subscription payments are processed by Stripe. We store only your subscription status — we never see or store your card details.
• Usage data: standard server logs (IP address, browser/device type, pages visited) for security and performance monitoring.

2. How we use your data

• To provide and operate the Peptidy service.
• To manage your subscription and process payments via Stripe.
• To send transactional emails (password reset, subscription receipts).
• To improve the service through aggregated, anonymised usage analytics.

We do not sell your personal data. We do not use your data for advertising.

3. Data sharing

We share data only with the following third-party processors:

• Stripe — payment processing (stripe.com/privacy)
• Resend — transactional email delivery
• Vercel — web hosting and infrastructure
• RevenueCat — iOS in-app subscription management

4. Data retention

We retain your account and protocol data for as long as your account is active. You may delete your account at any time by contacting us, which will permanently delete all associated data within 30 days.

5. Security

All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Database access is restricted and authenticated.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at privacy@peptidy.io.

7. Cookies

We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.

8. Children

Peptidy is not directed at children under 18. We do not knowingly collect data from anyone under 18.

9. Changes to this policy

We will notify registered users by email of any material changes. Continued use of the service after changes constitutes acceptance.

10. Contact

For any privacy questions or requests: privacy@peptidy.io