Privacy Policy

PepKit is a personal peptide reference, calculator, and tracking tool. This policy explains what we collect, why, and the choices you have. Our guiding principle is data minimization: your health, journal, and protocol data stays on your device and is never sent to our servers.

Data that stays on your device

The following are stored only in a local database on your device and are never transmitted to us or any third party:

• Protocols you create, including schedules and reminders
• Dose logs and vial inventory
• Journal entries and how you record feeling
• Any insights generated from your journal

Because this data lives on your device, deleting the app removes it. We cannot access, recover, or restore it. We recommend using your device's backup features if you want to preserve it.

Data we collect

We collect the minimum needed to provide accounts and subscriptions:

• Account email. When you create an account or sign in, we store your email address to authenticate you and manage your account. If you use Sign in with Apple, Apple may provide a private relay email instead of your real address.
• Subscription and purchase status. When you subscribe, the app store (Apple App Store or Google Play) processes your payment. We never see or store your card details. We receive a purchase receipt and subscription status so we can unlock paid features.
• Waitlist email. If you join our waitlist on the website, we store your email to notify you about availability.
• Basic usage analytics. Our website uses privacy-friendly analytics to understand aggregate traffic. This does not identify you individually.

Service providers

We use a small number of trusted providers to run PepKit. They process data only to provide their service to us:

• Supabase — authentication and account backend (stores your account email).
• RevenueCat — subscription management (stores an anonymous app user ID and your subscription status).
• Apple App Store / Google Play — payment processing for subscriptions.
• Vercel — website hosting and aggregate analytics.

We do not sell your personal information, and we do not share it for advertising.

Notifications

PepKit can send you local reminders (for example, when you scheduled a dose). These are generated on your device based on protocols you set up. You can disable notifications at any time in your device settings.

Data retention and deletion

On-device data is retained until you delete it or uninstall the app. Account data (your email) is retained while your account is active. You can request deletion of your account and associated data at any time by contacting us at the address below, or by using the in-app account deletion option where available. We will delete your account data within 30 days of a verified request.

Data security

Data transmitted between the app and our providers is encrypted in transit using industry-standard TLS. No method of storage or transmission is completely secure, but we take reasonable measures to protect your information.

Children

PepKit is intended for adults 18 and older. We do not knowingly collect personal information from children.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

Contact

Questions about this policy or your data? Email us at support@pepkit.app.