Privacy Policy
This Privacy Policy explains how Tuned Tech LLC ("PepTrack," "we," "us," or "our") handles information when you use the PepTrack mobile application, the pep-track.app website, advertising landing pages, web onboarding, Superwall web checkout, purchase-redemption flows, and related support services (together, the "Service").
PepTrack is a tracking and organizational tool, not a healthcare provider or medical device. It does not provide medical advice, diagnosis, treatment, prescriptions, or dosing instructions.
Plain-language summary: Core tracking information such as compounds, schedules, dose logs, notes, reminders, and weight entries is stored locally on your device. Your individual web onboarding answers stay in your browser and are not sent to PepTrack, Meta, PostHog, Superwall, or Stripe; we do receive information about which onboarding screens were reached so we can find and fix places where onboarding breaks. We store limited anonymous account, access, and creator-attribution records in Supabase; use PostHog for pseudonymous product analytics; use Meta tools for advertising measurement; and use Apple, Superwall, and Stripe to manage subscriptions and web checkout. Apple Health information is optional and is never used for advertising or analytics. We do not sell personal information or consumer health data.
1. Information Stored Locally in the App
The following information is stored in PepTrack's local app storage on your device:
- Compounds you add or select
- Dose logs, dates, amounts, and related entries
- Protocol schedules and reminders
- Personal notes and custom entries
- Weight entries, goals, and display preferences
- Other app settings and onboarding selections
PepTrack does not upload this core tracking information to our Supabase database. Deleting the app removes information held in PepTrack's local app storage from that device. Information separately written to Apple Health remains subject to your Apple Health settings and must be managed there.
2. Web Onboarding and Browser Storage
PepTrack's web onboarding asks questions that may include what you are tracking, how long you have been tracking it, your current tracking method, general challenges, goals, and an age range. These answers are processed in your browser to personalize the pages you see. PepTrack does not save or transmit your individual answers, and refreshing or closing the page clears them.
So that we can find and fix places where onboarding fails, we do send our product-analytics provider information about your progress through onboarding, including which screens you reached, how many screens were in your path, and how long each screen took. Because some onboarding screens are shown only to people who gave a particular answer, the screen names in that diagnostic information can indicate the general category of answer you gave. It does not include the answers themselves.
Our advertising landing page temporarily stores the page's campaign query string and landing path in browser session storage. Campaign parameters such as source, campaign, advertisement, creator, angle, or funnel identifiers may be carried into the Superwall paywall so we can measure campaign performance. Reserved email and user-ID parameters are not forwarded by the PepTrack onboarding page. Session-storage values generally last until the browser tab or session ends.
Our website is hosted by GitHub Pages. GitHub and ordinary internet infrastructure may process technical request information such as IP address, browser or device type, requested page, referring page, and request time to deliver and protect the site. See the GitHub Privacy Statement.
3. Apple Health (HealthKit)
PepTrack optionally integrates with Apple Health after you grant permission. With permission, PepTrack can read body weight from Apple Health and write weights you enter in PepTrack back to Apple Health.
How we handle Apple Health information:
- Apple Health access is optional and controlled through your device and Apple Health settings.
- Apple Health information is not sent to Supabase, PostHog, Meta, Superwall, Stripe, advertisers, or data brokers.
- Apple Health information is never used for advertising, marketing, profiling, or product analytics.
- We do not sell Apple Health information.
- You can revoke access at any time in iOS Settings or the Apple Health app.
Deleting PepTrack does not necessarily delete information that was already written to Apple Health. You can view or delete those records and manage PepTrack's permissions in Apple Health.
4. Limited Account and Access Information
PepTrack uses Supabase to create and maintain a minimal anonymous app profile. Supabase may process:
- A randomly generated account and profile identifier
- An optional display name
- Account creation and update timestamps
- Onboarding-completion and paywall-reached status
- Paid-access, entitlement-mirror, or administrator-approved bypass status
- A creator or referral code redeemed in the app
- Authentication and security information needed to maintain the anonymous session
Supabase does not receive your compound names, dose logs, protocol details, notes, weight values, Apple Health information, or web questionnaire answers from PepTrack. See the Supabase Privacy Policy.
5. Product Analytics (PostHog)
We use PostHog for pseudonymous product analytics so we can understand onboarding completion, feature use, reliability, and where users encounter problems. Analytics events are associated with a randomly generated analytics identifier rather than a name, email address, Apple ID, or payment card.
PostHog may receive:
- App opens, lifecycle events, screen views, and navigation paths
- Onboarding screens reached and steps completed
- Notification-permission responses
- The number of compounds selected, but not their names
- The number of weight entries, but not weight values, dates, or goals
- Creator or referral codes and whether a redemption was valid, invalid, bypassed, skipped, or unavailable
- Paywall, access-gate, and technical error events
- Basic app, operating-system, device, network, and event-delivery metadata
PepTrack does not intentionally send compound names, dose amounts, dose logs, schedules, notes, weight values, Apple Health information, web questionnaire answers, display names, email addresses, or payment information to PostHog. Session replay is not currently enabled in the PepTrack app. See the PostHog Privacy Policy.
6. Advertising and Meta Measurement
We use Meta advertising tools in separate parts of the Service to measure how advertising performs:
- PepTrack website Pixel: Our advertising landing pages and web onboarding load the Meta Pixel. These pages may send events recording that a page was viewed, that onboarding was started or finished, and that a checkout link was tapped. These events record that a step happened and do not carry your individual onboarding answers. Meta may receive the page URL and campaign parameters, referring page, browser and device information, IP-derived information, and Meta cookie or similar identifiers.
- Superwall Web2App Pixel: Meta's browser Pixel inside Superwall may receive paywall views, checkout starts, completed purchases, paywall or account-management interactions, product and paywall identifiers, transaction or redemption interaction identifiers, price, and currency.
- Meta iOS SDK: The PepTrack app uses Meta's iOS SDK for automatic app-event logging and advertising measurement. Meta may receive app-install, app-open, conversion, device, and technical signals, subject to Apple platform rules and your tracking permission where required.
- Apple attribution: Apple privacy-preserving attribution technologies, including SKAdNetwork where applicable, may provide Meta with aggregate installation or conversion signals.
These sources may use the same Meta data source, and Meta may associate signals across browsers, devices, checkout, and the app under its own policies. PepTrack does not send web questionnaire answers, compound names, dose logs, protocol schedules, notes, weight values, or Apple Health information to Meta. We do not currently use Superwall's Meta Conversions API integration.
You can manage browser cookies through your browser and review iOS tracking permissions under Settings > Privacy & Security > Tracking. Blocking advertising technologies may reduce measurement but should not prevent you from using PepTrack's core tracking features. See Meta's Privacy Policy and Cookies Policy.
7. Subscriptions, Web Checkout, and Payments
PepTrack subscriptions may be purchased through Apple In-App Purchase or through Superwall Web Checkout powered by Stripe.
- Apple purchases: Apple processes payment and manages the App Store subscription. PepTrack and Superwall receive subscription and entitlement status needed to provide premium access.
- Web purchases: Superwall presents the web paywall, creates the Stripe checkout flow, manages purchase redemption, and connects an eligible purchase to PepTrack access.
- Stripe: Stripe processes checkout information such as email address, payment method, billing details, transaction information, tax, fraud-prevention signals, and subscription records. For eligible Managed Payments transactions, Stripe may act as merchant of record.
Tuned Tech LLC does not receive or store your full payment-card number. We and our providers may receive or access checkout email, subscription status, product, price, currency, transaction identifiers, renewal or cancellation status, and related support information. Superwall may email purchase receipts, redemption links, and subscription-management links to the address used at checkout.
Resetting PepTrack, deleting the app, or requesting deletion of app data does not automatically cancel a subscription. Apple subscriptions must be managed through Apple, and web subscriptions must be managed through the Superwall or Stripe management flow provided with the purchase. See the Superwall Privacy Policy, Stripe Privacy Policy, and Apple Privacy Policy.
8. Support Communications
If you contact us, we process your email address and the information you choose to include so we can respond, troubleshoot, keep a record of the request, and protect the Service. Please do not include sensitive health information in a support request unless it is necessary for us to assist you.
9. Consumer Health Data Notice
Depending on where you live, information you enter about compounds, doses, schedules, weight, or related routines may be considered consumer health data even when it is not protected health information under HIPAA.
In short: the contents of your tracking entries stay in local app storage, Apple Health information stays on your device and in Apple Health, your individual onboarding answers stay in your browser, and we do not sell consumer health data or use its contents for targeted advertising.
Our full Consumer Health Data Privacy Policy describes the categories we collect, where they come from, why we process them, who receives what, and how to exercise your rights, including withdrawing consent and requesting deletion. You may also contact us at support.peptrack@gmail.com.
10. How We Share Information
We disclose limited information to service providers only as needed for the purposes described in this policy:
| Provider | Information | Purpose |
|---|---|---|
| Supabase | Anonymous profile, access, and referral metadata | Authentication and access state |
| PostHog | Pseudonymous usage events and count-only properties | Product analytics and reliability |
| Meta | Landing, paywall, checkout, app-event, campaign, and conversion signals | Advertising measurement |
| Superwall | Paywall, entitlement, redemption, subscription, and checkout information | Paywalls and subscription access |
| Stripe | Checkout, contact, billing, transaction, tax, and fraud information | Web payment processing |
| Apple | App Store purchase information and optional Apple Health information | Subscriptions and user-requested HealthKit features |
| GitHub Pages | Website request and technical information | Website hosting and security |
We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or security issues, protect users or the Service, or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. Any successor's handling of information remains subject to applicable law and the privacy commitments in effect at the time of transfer.
11. Retention
- Local app information remains until you delete individual entries, use available reset controls, or delete the app.
- Apple Health information remains according to your Apple Health settings and deletion choices.
- Web questionnaire answers last only in page memory; campaign parameters in session storage generally last for the browser session.
- Supabase profile, access, and creator-attribution records remain as needed to operate access, prevent abuse, preserve attribution, and comply with deletion requests or legal requirements.
- Analytics and advertising providers retain information according to our settings and their policies.
- Purchase and transaction records may be retained for subscription management, receipts, accounting, tax, fraud prevention, disputes, refunds, and legal compliance.
- Support communications are retained as reasonably necessary to respond and maintain appropriate records.
12. Your Choices, Reset, and Deletion
You can delete individual tracking entries in the app, revoke notification or tracking permissions in iOS Settings, manage Apple Health access and records in Apple Health, manage browser cookies through your browser, and export supported PepTrack data from the app.
Using PepTrack's in-app reset or deletion control clears local compounds, schedules, dose logs, reminders, display-name and onboarding selections, resets the current Superwall identity, resets portions of the anonymous profile state, and signs the current anonymous profile out. Weight entries can be managed separately in the app. This control does not cancel an Apple or web subscription, remove records held by Apple Health, or necessarily erase subscription, transaction, fraud-prevention, legal, or creator-attribution records.
Deleting the app removes its local app storage from that device but does not cancel a subscription or automatically remove Apple Health, payment-provider, analytics-provider, or server-held records.
You may request access to, correction of, or deletion of eligible server-held personal or consumer health information by emailing support.peptrack@gmail.com. We may need to verify enough information to locate the relevant anonymous profile or purchase. We will respond in accordance with applicable law and may retain information when reasonably required for billing, fraud prevention, security, legal obligations, or the establishment or defense of legal claims.
13. Security and International Processing
We use reasonable administrative, technical, and organizational safeguards designed to protect information. Local information is protected by your device's security, and service providers use their own security controls for information they process. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
PepTrack and its providers are based in or operate from the United States and other locations. Information may therefore be processed outside your state, province, or country under the safeguards and legal mechanisms used by the applicable provider.
Users in the European Economic Area, the United Kingdom, and Switzerland. Where those laws apply, we process personal information on the following bases: to perform our agreement with you and provide the Service you request; for our legitimate interests in product analytics, security, fraud prevention, and measuring how our advertising performs; with your consent where consent is required, including Apple Health access, notifications, and app tracking permission; and to comply with legal obligations. You may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with your local supervisory authority. Because PepTrack profiles are anonymous, we may be unable to locate information about you unless you provide enough detail to identify the relevant profile or purchase. To make a request, email support.peptrack@gmail.com. Information transferred to the United States is protected by the safeguards and transfer mechanisms used by the applicable provider.
14. Children and Age Requirements
PepTrack is intended for users age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information through the Service, contact us so we can investigate and take appropriate action.
15. Changes to This Policy
We may update this Privacy Policy as the Service, providers, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law. Material new collection or use of consumer health data will be disclosed and handled in accordance with applicable consent requirements.
16. Governing Law
This Privacy Policy is governed by the laws of the State of Wyoming, USA, except where another jurisdiction's law applies.
17. Contact
Tuned Tech LLC operates PepTrack. For privacy questions or requests, email support.peptrack@gmail.com.