Privacy Policy

1. Who we are

PeptideWiz is operated by Dapper Dev LLC, doing business as PeptideWiz ("PeptideWiz", "we", "us", or "our"). We provide the PeptideWiz mobile and web application (the "Service"), a personal organization and tracking tool for provider-directed peptide protocols and other routine items such as supplements, vitamins, and medications. This policy explains what information we collect, how we use it, and the choices you have. It applies to the PeptideWiz app and to this website (together, the "Service"). By using the Service you agree to this policy and to our Terms of Use.

2. Information we collect

Information you provide

• Account information: your name, email address, and a password (stored only as a cryptographic hash — we never store your actual password).
• Tracking data you enter: routine items and protocols (names, doses, schedules, inventory), administration logs and their statuses, injection sites, side-effect entries and symptoms, check-ins (mood, energy, sleep, appetite, weight), body measurements, notes, and photos you attach.
• Apple Health data (optional, iOS only): if you connect Apple Health, weight readings you choose to share — see Health-related data below for exactly what is read, stored, and never done with it.
• Preferences: units, time and date formats, timezone, reminder and notification preferences, appearance settings.
• Newsletter email: if you request a resource or updates from this website, the email address you submit and the page you submitted it from.
• Support communications: anything you send us when you contact support.

Information collected automatically

• Session information: sign-in sessions (including approximate device/browser identifiers and IP address) used for account security features such as viewing and revoking active sessions, and to protect against abuse.
• Website analytics (consent-based): if you accept analytics cookies on this website, Google Analytics collects standard usage data such as pages viewed, approximate location (derived from a truncated IP address), device and browser type, and referring page. This is off until you consent — see Cookies & Analytics. The mobile app collects no analytics of this kind.
• We do not use third-party advertising networks or cross-app/cross-site tracking, and the mobile app contains no third-party analytics or advertising SDKs.

3. Cookies & Analytics

A cookie is a small file a website stores in your browser. This website uses two kinds:

• Strictly necessary — required for the site to function and to remember your cookie choice. These are always on and do not require consent.
• Analytics (Google Analytics 4, measurement ID G-WJY02DHXM7) — used only to understand aggregate site traffic so we can improve the site. We are not a covered entity or business associate under HIPAA. We do not use analytics for advertising or to identify you personally.

We implement Google Consent Mode: analytics and all advertising signals default to denied, so no analytics cookies are set and no analytics data is collected until you click "Accept all" in the cookie banner. If you choose "Reject non-essential," analytics stays off. You can change your choice at any time via the "Cookie settings" link in the footer. Advertising and personalization signals remain denied at all times because we do not run ads.

You can also opt out of Google Analytics across all sites using Google's browser add-on, and learn how Google uses data at policies.google.com/technologies/partner-sites. Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of any "sale" or "sharing" (we do neither) and to keep non-essential analytics off. The mobile app does not use cookies or web analytics.

4. Health-related data

The tracking data you enter may include health-related information. We treat all tracking data as private by default. It is used solely to operate the Service for you — to display your schedule, history, reminders, trends, and the reports you generate. We are a consumer tracking tool, not a healthcare provider, and the Service is not intended to create a provider–patient relationship. PeptideWiz is not a covered entity under HIPAA.

Apple Health (HealthKit)

On iOS you can optionally connect Apple Health. This is off by default and only starts if you tap "Connect Apple Health" in the app and grant access in the iOS permission sheet. If you connect it:

• What we read: body weight, heart rate variability (HRV), and sleep analysis. Access is read-only — PeptideWiz never writes anything to Apple Health.
• What is stored: weight readings are saved to your PeptideWiz measurements (with a note marking them as imported), stored with your account exactly like weight you enter by hand, so they appear in your trends and reports. HRV and sleep are displayed in the app only and are not stored on our servers.
• What we never do: we never use Apple Health data for advertising, marketing, or data mining; never sell it; never share it with third parties; and never use it for any purpose other than showing it to you within the Service.
• Turning it off: disable syncing in Profile → Data & Reports → Turn Off Health Sync, and revoke the app's access any time in the iOS Health app under Sharing → Apps. Imported weight entries can be deleted like any other measurement, and deleting your account removes them entirely.

5. How we use information

• To provide and operate the Service (schedules, reminders, history, trends, exports, reports).
• To keep your account secure (authentication, session management, abuse prevention).
• To process subscriptions and honor entitlements.
• To send you the resource, welcome email, or updates you request from this website.
• To respond to support requests.
• To maintain, debug, and improve reliability (aggregate, de-identified operational metrics only).
• To comply with law and to establish, exercise, or defend legal claims.

We do not sell or share your personal information, and we do not disclose it to third parties for their own marketing or advertising.

6. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process your information on these bases: performance of a contract (to provide the Service you sign up for); consent (optional features such as Apple Health, website analytics cookies, and marketing email — which you may withdraw at any time); legitimate interests (securing the Service, preventing abuse, and understanding aggregate usage in a way that does not override your rights); and legal obligation (to comply with applicable law). Where we rely on consent, withdrawing it does not affect processing already carried out.

7. Notifications

If you enable reminders, notifications may be scheduled locally on your device and, when you turn those channels on, delivered as push notifications or emails from our servers. Every channel is controlled by you in the app's notification settings, including a master switch, and can be disabled at any time there or in your device settings. The app's Privacy Level setting controls how much detail appears in a notification: on the default "Private" level, notifications never include the name or dose of any item — we recommend keeping this if others can see your lock screen or inbox.

8. How your data is stored and protected

• Data is transmitted over encrypted connections (HTTPS/TLS).
• Passwords are stored only as salted cryptographic hashes.
• Access to production systems is restricted.
• Your tracking data is stored in our application database and retained while your account is active.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to protect your information using industry-standard practices.

9. Data retention and deletion

Your data is retained while your account exists. You can permanently delete your account and all associated data at any time from Profile → Account → Delete Account in the app. Deletion is immediate and irreversible. You can also request deletion by emailing [email protected] from your account email. To unsubscribe from marketing email, use the link in any such email or reply to it. We may retain limited records where required to comply with law, resolve disputes, or enforce our agreements.

10. Your rights and choices

• Access & portability: export your tracking data as a CSV (Progress → Export CSV) or as a PDF provider report (Profile → Data & Reports).
• Correction: edit your profile and tracking entries in the app at any time.
• Deletion: delete individual entries or your entire account in the app.
• Cookies: accept, reject, or change analytics cookies via the "Cookie settings" link in the website footer.
• Notifications & marketing: opt in or out of reminders and marketing email at any time.

Depending on where you live (for example the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional legal rights, including the right to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, to withdraw consent, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law, and we do not process it for cross-context behavioral advertising. To exercise any right, use the in-app tools above or contact us; we will verify your request against your account email and respond as required by applicable law. You may also have the right to appeal or to lodge a complaint with your local data-protection authority.

11. Service providers & third parties

We share personal information only with vendors that process it on our behalf, under contract, for the purposes below — never for their own marketing:

• Hosting & database — to run the Service and store your data.
• RevenueCat and the Apple App Store / Google Play — to process and validate subscriptions. Payment card details are handled by the app stores, not by us.
• Google Analytics — consent-based website analytics only (see Cookies & Analytics).
• Email delivery — to send account, notification, and requested marketing email.
• Apple Sign in & Apple Health — only if you choose to use them (see Apple Health).

We may also disclose information if required by law, to enforce our Terms, to protect the rights, safety, or property of PeptideWiz or others, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this policy).

12. International users & data transfers

We operate the Service from the United States. If you access it from outside the U.S., you understand that your information will be transferred to, stored, and processed in the U.S., where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as the applicable standard contractual clauses) for cross-border transfers.

13. Children

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us and we will delete it.

14. Changes to this policy

If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or on this website. Continued use of the Service after changes take effect means you accept the updated policy.

15. Contact us

Questions or requests about privacy: [email protected]. PeptideWiz is operated by Dapper Dev LLC (d/b/a PeptideWiz).