Privacy Policy
PepTrack is built with your privacy as a priority. This policy explains what data is collected, where it goes, and how it is used. We keep it simple because there is genuinely very little to disclose.
Short version: Almost all of your data stays on your device and never leaves it. The only information stored on our servers is your optional username and whether you completed onboarding. Anonymous analytics help us improve the app. If you enable Apple Health, your weight data stays on your device and in your own Apple Health, and is never used for ads or analytics. We run paid advertising and use privacy-preserving attribution tools (via Apple's SKAdNetwork) to measure campaign performance — no personal data is shared with ad platforms. We do not sell your data. That is it.
1. What Stays on Your Device
The following data is stored locally on your iPhone or iPad only. It is never transmitted to our servers or any third party:
- All peptide logs and dose entries
- Protocol schedules and reminders
- Any personal notes or custom entries
- App settings and preferences
Deleting the app permanently removes all of this data from your device.
2. Apple Health (HealthKit)
PepTrack integrates with Apple Health so your weight data stays in sync across the apps and devices you already use. This integration is entirely optional and only works after you grant permission.
With your permission, PepTrack:
- Reads body weight from Apple Health, so weigh-ins recorded by your smart scale or other apps appear automatically on your PepTrack progress chart.
- Writes weights you log in PepTrack back to Apple Health, so your data stays consistent everywhere.
Health data is stored only on your device (in local app storage) and, if you choose, in your own Apple Health. It is never sent to our servers.
How we handle your Health data - and how we don't:
- Your Health data is never used for advertising or marketing.
- It is never shared with or sold to any third party, advertiser, or data broker.
- It is never used for analytics. Health data is excluded from our product analytics (PostHog) and our ad-attribution SDK (Meta) - those tools only ever receive anonymous, non-health event counts (for example, that a screen was opened), never your weight or any other Health information.
- Access requires your explicit permission, and you can revoke it at any time in the iOS Settings app or the Apple Health app.
Our use of Apple Health data complies with Apple's HealthKit requirements, including the restriction that Health data is never used for advertising, marketing, or use-based data mining, and is never disclosed to third parties for those purposes.
3. What Is Stored on Our Servers
We use Supabase, a secure cloud database, to store a minimal amount of data:
- Username - optional. If you choose to set one, it is stored on our servers. You can leave this blank during onboarding and nothing is saved.
- Onboarding completion status - a simple flag indicating whether you have completed the initial setup flow.
No dose logs, protocol details, peptide names, or health-related data are ever stored on our servers.
To request deletion of your server-stored data, email support.peptrack@gmail.com and we will remove it promptly.
4. Analytics (PostHog)
We use PostHog to collect anonymous usage analytics. This helps us understand how the app is used so we can improve it. PostHog data is used solely for internal product decisions. We do not sell your data.
PostHog collects:
- A randomly generated anonymous device identifier (not tied to your name, email, or Apple ID)
- Screen views and navigation paths within the app
- Feature interactions, such as which sections are used and in what order
- App events such as notification permission responses and onboarding step completion
- Content interactions, such as which peptide categories are viewed (captured as anonymous event data)
PostHog does not collect your name, email address, location, Apple ID, payment information, or any data that directly identifies you as an individual. All data is associated with an anonymous ID only.
For more information, see the PostHog Privacy Policy.
5. Advertising & Attribution
We run paid advertising campaigns on platforms including Meta (Facebook/Instagram) and may in the future run campaigns on TikTok. To measure whether those campaigns result in app installs or in-app actions, we use ad attribution tools provided by those platforms.
How it works on iOS: Attribution runs through Apple's SKAdNetwork (SKAN) framework. SKAN is privacy-preserving by design — it sends only aggregate, anonymized signals to ad platforms. No individual user is identified, and no personally identifiable information leaves your device through this process.
What Meta may receive: aggregate install and conversion signals via SKAN (e.g., that an install occurred and whether a subscription followed), along with basic device and technical data the Meta SDK collects for campaign measurement. We do not share your name, email, peptide logs, or any health-related data with Meta. For more, see Meta's Privacy Policy.
What TikTok may receive (if/when applicable): similar aggregate attribution signals via SKAN and TikTok's attribution tools. For more, see TikTok's Privacy Policy.
You can review or change tracking permissions at any time in iOS Settings > Privacy & Security > Tracking.
6. Subscriptions (Apple and Superwall)
Subscriptions are processed by Apple via In-App Purchase. Apple handles all payment information and subscription management. We do not receive or store your payment details.
We use Superwall to manage paywall presentation and subscription status. Superwall may receive anonymous subscription status signals to determine which users have active subscriptions. For more information, see the Superwall Privacy Policy.
7. Data Summary
| Data | Where it goes | Purpose |
|---|---|---|
| Dose logs, protocols, schedules | Your device only | Core app functionality |
| Body weight / Health data | Your device + your Apple Health only | Progress tracking |
| Username (optional) | Supabase (our servers) | Account personalization |
| Onboarding completion | Supabase (our servers) | App state |
| Anonymous usage events | PostHog | App improvement |
| Subscription status | Apple / Superwall | Access control |
| Aggregate install/conversion signals | Meta (via Apple SKAdNetwork) | Ad campaign measurement |
| Aggregate signals (if/when applicable) | TikTok (via Apple SKAdNetwork) | Ad campaign measurement |
8. Children and Age Requirements
PepTrack is intended for users who are 16 years of age or older. We do not knowingly collect any information from anyone under 16. If you believe a minor has used the app, please contact us and we will take appropriate action.
9. Data Security
Server-stored data is secured via Supabase, which uses industry-standard encryption in transit and at rest. Local data on your device is protected by iOS device security. That said, no system is perfectly secure, and we cannot guarantee absolute security.
10. Your Rights
You have the right to:
- Skip username creation entirely so nothing is stored on our servers
- Delete all local data by deleting the app
- Request deletion of any server-stored data by emailing support.peptrack@gmail.com
11. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are significant, we will notify users in-app. Continued use of PepTrack after changes are posted constitutes acceptance of the updated policy.
12. Governing Law
This Privacy Policy is governed by the laws of the State of Wyoming, USA.
13. Contact
Questions about your privacy? Email support.peptrack@gmail.com.