Privacy Policy

Effective July 16, 2026

This Policy explains what PeptideU collects, why, and who it is shared with. Effective July 16, 2026. We do not sell your personal information, and we do not use it for third-party advertising.

What we collect

Account: your email, and a display name if you provide one. If you sign in with Apple or Google, we receive the basic identifiers those services return to complete sign-in.

Your age acknowledgment (that you are 18+), with the version and timestamp.

Your research records, which are private to you: research log entries (compound, amount, unit, site, time, symptoms, how you felt, optional photos), vials you track (label, quantities, optional photos), and stacks (peptides you are studying and any plan you set). Photos are stored in private storage and served only to you through short-lived links.

Community content you choose to post: ratings, field notes, and optional tags and coarse demographics (an age band and sex) if you add them to a review. Notes are moderated before they appear.

Learning activity: which lessons you have watched, quiz attempts and scores, and your rank and points.

If you use the AI features: the question text you send the Professor, and the image you submit to the COA scanner, are sent to our AI provider to generate a response.

Subscription status (whether you have an active premium entitlement). Apple and our subscription provider handle the payment itself; we do not receive your card details.

Basic technical data needed to run the app (for example, authentication tokens and, if you enable notifications, a push token).

Why we use it

To provide the app: sign you in, save your private research records, run the curriculum and track your progress, show and moderate community content, generate AI responses, and unlock the features your subscription includes.

To keep the app working and safe: authentication, preventing abuse, and honoring your access level. We check entitlement on the server for paid features.

We do not use your personal information for advertising and we do not sell it.

Who we share it with

Service providers who run the app on our behalf, only as needed to operate it: our hosting, database, authentication, and file storage provider (Supabase); our subscription management provider (RevenueCat) and Apple for payments; our video provider (Mux) for lesson and Vault playback; our AI provider (Anthropic) to process the questions and images you submit to the AI features; our live-session provider (Daily.co) if you join Office Hours; and, only if you choose to link an existing community membership, Circle.

We share only what each provider needs for its function. We do not sell your data or share it for third-party advertising.

We may disclose information if required by law, or to protect the rights, safety, and security of our members and the service.

Your community posts are visible

Reviews, field notes, and community messages you post are shown to other members, attributed to your display name. Do not include anything private you do not want other members to see. Your private research records (logs, vials, stacks) are never shown to other members.

Your choices and rights

You can edit your profile and research focus, and add or remove your own research records, in the app.

You can delete your account from Account settings. This removes your profile and personal research data. Some records may be retained where required by law or for legitimate security and financial purposes (for example, a record that a subscription existed).

You control camera and photo-library access through your device permissions; the app requests them only when you add a photo. You control notifications through your device settings.

Depending on where you live, you may have rights to access, correct, or delete your personal information. Contact support@peptideu.app and we will respond as required by applicable law.

Data security and retention

Access to your data is controlled by per-user security rules, and private files are served only through short-lived signed links. No system is perfectly secure, but we take reasonable measures to protect your information.

We keep your information for as long as your account is active, and delete or de-identify it after account deletion except where retention is required by law or for legitimate security or financial purposes.

Children

PeptideU is for adults 18 and older. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided information, contact support@peptideu.app.

Changes and contact

We may update this Policy; material changes will be reflected by a new effective date. Questions or requests: support@peptideu.app.

Questions: support@peptideu.app