Privacy Policy

Last updated: October 2, 2026

1. Introduction

PeptIQ ("we," "our," or "us") provides a mobile app, website, and optional AI-powered tools for peptide tracking, education, and related workflows. This Privacy Policy explains what we collect, how we use it, when we share it with service providers, and what choices you have.

Some information stays on your device by default. Other information is sent to our backend, analytics, communications, payment, advertising, or AI processing providers when you choose features that require it.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, login details, and profile information if you create an account
  • Health and Tracking Data: Injection logs, peptide data, protocols, notes, reminders, vitals, and wellness information you choose to record
  • Support and Form Submissions: Messages you send through support, contact, waitlist, or feedback forms
  • AI Inputs: Prompts, images, screenshots, doctor notes, vial labels, and other content you choose to submit to our AI features
  • Community Forum Content: Discussion posts, comments, photos, short videos, peptide tags, likes, bookmarks, follows, blocks, reports, and the public profile details you choose to show (such as username, display name, bio, and avatar) when you use Community

2.2 Automatically Collected Information

  • Device and App Information: Device type, operating system, app version, language, browser details, and coarse device identifiers
  • Usage and Diagnostics: Feature usage, screen views, referral and attribution data, crash data, and performance diagnostics if enabled
  • Website Tracking Data: Cookies, pixels, page views, UTM parameters, referrers, and lead or conversion events on our website
  • Purchase Metadata: Subscription status, entitlement state, product identifiers, and billing platform details from app store purchases

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate your account and sync or restore your data across devices if you enable cloud features
  • Send you notifications and reminders (if enabled)
  • Respond to support requests, feedback, waitlist submissions, and contact forms
  • Analyze usage patterns, campaign performance, and conversion funnels
  • Process subscriptions, restore purchases, and manage entitlement status
  • Provide AI features, including chat, protocol tools, image parsing, and claim-auditing workflows
  • Detect and prevent fraud or abuse
  • Improve products, analytics, research aggregates, and PeptIQ Wiki or community insights derived from usage patterns
  • Operate the Community forum, including publishing posts you create, delivering alerts, enforcing guidelines, screening for prohibited content, and handling reports, blocks, and moderation actions

4. Personal Health Information

Injection logs, dosing records, wellness notes, lab uploads, and other health information you enter are personal health information (PHI). We do not sell or share PHI that identifies you with advertisers, data brokers, or other third parties for their own marketing.

When we work with service providers, we share only what is necessary to operate the Service. Providers are contractually required to protect that information and use it solely to perform services on our behalf, except where you have directed otherwise or the law requires disclosure.

When you delete your account or reset app data, you lose access to your identifiable records. We may retain anonymized or aggregated statistics derived from prior usage that can no longer be linked back to you.

4A. Apple Health and Google Health Connect

If you choose to connect, PeptIQ reads the following from Health Connect (Android) or Apple Health (iOS): weight, body fat, lean body mass, resting heart rate, heart rate (used only to work out a daily resting heart rate when your device does not record one), heart rate variability (HRV), sleep sessions, steps, and active calories burned. On iOS, PeptIQ also reads distance, exercise minutes and workouts from Apple Health for the Steps and Workouts screens. We use this data only to show your trends in the app, such as the Heart Rate & HRV, Steps, Sleep, Weight and Health Insights screens, next to the doses and protocols you log. PeptIQ does not write data to Health Connect and does not read it in the background.

When you are signed in and Cloud Sync for Health Data is on, these readings are stored in your PeptIQ account (Supabase) so they appear on your other devices. You can turn this off in Settings → Health. If you ask the AI companion a question, a short summary of your trends may be sent to our AI processing providers to answer it.

PeptIQ's use of information received from Health Connect follows the Health Connect Permissions policy, including the Limited Use requirements. Health data from Apple Health or Health Connect is never sold or licensed, and it is never used for advertising or shared with advertisers, data brokers or information resellers. It is excluded from the aggregated or de-identified datasets described in Section 5, and we do not use it to determine credit-worthiness or for lending. Humans do not read it unless you ask us to (for example in a support request), it is needed for security or to comply with law, or it has been aggregated for internal operations as permitted by the policy.

You can revoke access at any time in Health Connect settings (Android) or the Health app (iOS), and you can delete synced data by deleting your account or resetting app data.

5. Aggregate and De-Identified Data

We may create anonymized, de-identified, or aggregated datasets from app usage, tracking logs, and related information. These datasets are processed so they cannot reasonably be used to identify you.

We may use aggregate data for statistics, trend analysis, PeptIQ Wiki content, community insights, marketing performance measurement, and product development. We may also license anonymized or aggregated datasets to third parties. Aggregate insights may describe patterns across many users—for example, commonly tracked compounds or typical logging behavior—but they do not reveal your individual records.

This section does not apply to data received from Apple Health or Google Health Connect. That health data is never sold, licensed or used for advertising, and it is excluded from the aggregated and de-identified datasets described here.

6. Local-First Storage and Security

In the mobile app, your logs, protocols, reminders, and wellness data stay on your device by default. If you create an account, enable cloud sync, request support, use analytics, or use AI features, the information needed to provide those services is transmitted to our providers.

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including encrypted transport, access controls, and managed cloud infrastructure. No internet-connected service can be guaranteed to be completely secure, but we work to limit access, retention, and exposure to what is necessary for the Service.

7. Service Providers and Third-Party Sharing

We do not sell personal health information that identifies you. We share data with service providers only to operate the Service, measure performance, communicate with you, process purchases, or provide AI features.

  • Supabase: Authentication, database, and optional cloud sync for account-backed app data
  • RevenueCat and Apple / Google: Subscription processing, purchase validation, and entitlement status
  • PostHog: Optional product analytics, attribution, and diagnostics
  • AppsFlyer and Meta (Facebook) SDK: Mobile attribution and advertising measurement when analytics and tracking are allowed
  • Customer.io and Resend: Lifecycle, transactional, and support email delivery
  • Vercel Analytics, Google Tag Manager, Meta Pixel, and Meta Conversions API: Website analytics, advertising attribution, and lead measurement
  • OpenRouter and model providers such as OpenAI, Anthropic, and Google: AI chat, protocol tools, image parsing, and related AI responses
  • Transcription providers: Claim Auditor prefers post captions when they already contain claims; otherwise it may use Transcript24 and/or OpenRouter audio models to transcribe spoken content from public social posts

8. AI Features and Data Use

If you choose to use an AI feature, we send the content you provide and the context required to fulfill your request to our AI processing providers. This may include free-form text, uploaded images, screenshots, visible text in photos, structured protocol data, or claim-auditing inputs.

Smart Chat and similar assistants are designed not to send identifiable personal health information to model providers. We use AI inputs to generate the requested output, monitor abuse, debug failures, and improve feature reliability. Do not upload content you do not want processed. AI outputs may be inaccurate and should be reviewed before use.

9. Community Forum and Aggregate Data

PeptIQ includes an optional in-app Community forum where members can post discussions, photos, and limited short videos; comment; follow other public profiles; and save or report posts. Community is a moderated discussion space inside the educational tracking app. It is not a general social network, dating product, or marketplace.

Content you publish in Community is public to other members of the Service by default and is associated with your public profile handle. Do not post personal health details, contact information, or other information you do not want shown publicly. Media you upload for Community posts is stored so it can be displayed in the forum.

We process Community content to operate the forum, screen for prohibited activity (including selling, sourcing, harassment, and spam), handle reports and blocks, enforce strikes or bans, and improve safety systems. Automated screening and human moderation may review reported or flagged content. Details of the rules appear in our Community Guidelines.

Separately, if you submit community ratings, outcome reports, or similar contributions, those submissions may be aggregated with other members' data to produce anonymized trend statistics shown in the app, AI answers, or PeptIQ Wiki. Aggregates describe patterns across many users and do not reveal your individual private logs. Do not include identifying information in free-text fields you intend only for anonymous aggregates.

When you delete your account, Community posts, comments, follows, and related account-linked records associated with your user ID are removed or de-identified according to our retention schedule. Soft-deleted or rejected content may be retained briefly for safety, abuse investigation, or legal compliance before permanent removal.

10. Tracking, Cookies, and ATT

Our website uses cookies and similar technologies for analytics, attribution, and advertising measurement. In the mobile app, analytics and attribution features are optional. On iOS, where required, we request App Tracking Transparency permission before enabling cross-app or cross-website tracking.

If you decline tracking or disable analytics, core app functionality will still work, but certain attribution and product analytics features will be limited or disabled.

11. Your Rights and Choices

You can:

  • Access or correct your account information
  • Reset or delete your app data and request account deletion
  • Opt out of analytics, tracking, notifications, or marketing emails
  • Choose whether to enable cloud sync or AI features
  • Control Community participation: keep your profile private, unfollow or block accounts, report posts, delete your own posts or comments, and stop posting
  • Request access, export, or deletion by contacting us

To exercise these rights, use the in-app settings or contact us at [email protected].

12. Data Retention

We keep data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. On-device data remains until you delete it. Cloud, support, purchase, and analytics records are retained according to operational and legal needs, or removed when no longer required.

After account deletion, identifiable account and health records are removed or de-identified according to our retention schedule. Anonymized or aggregated statistics derived from prior usage may be retained because they can no longer be linked back to you.

13. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe we have collected information from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the date on this page and, when required, provide additional notice in the app, on the website, or by email.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Support: peptiq.io/help
Data deletion: peptiq.io/data-deletion