Privacy Policy
Last updated: 2026-11-10
Who we are
Peptidia ("Peptidia", "we", "us", "our") is an educational service operated from Quebec, Canada. Privacy questions, data-access requests, and consent withdrawals can be directed to our designated privacy officer at privacy@peptidia.app.
Private Lab
Starting with V1.5, new Lab administration records, vial history, journal entries, and imported Apple Health observations are stored in an encrypted, account-scoped file on your iPhone. Its key is restricted to that device. Lab files are excluded from device backups. Deleting the app or losing the device can lose these records. Peptidia does not upload Lab data to its servers, analytics, advertising services, or AI providers.
Apple Health connection is optional and read-only. You choose individual data permissions in Apple’s authorization sheet. You can disconnect and remove imported readings in the Lab, and revoke permissions in Apple Health. Refresh occurs when the Lab is open or returns to the foreground. The optional types are weight, sleep, steps, resting heart rate, glucose, and blood pressure. Apple independently controls storage and synchronization of your original Health records.
Earlier journal records remain subject to the server retention and account-deletion rules below. The Lab’s import copies them to your device without deleting the server copy (on request in V1.5; automatically, once per account, starting with V1.6). Lab reminders are scheduled locally and use generic text without compounds, amounts, or measured health values.
Starting with V1.6, you can export your Lab from Settings → Your private Lab → Export my Lab in the iOS app. The PDF or CSV file is created on your iPhone only when you ask, opens in the iOS share sheet, and goes only where you send it. Peptidia does not receive it. Because Lab files are excluded from device backups, an export is also the way to keep your own copy. Treat the file as sensitive: once you share it, the app or person receiving it controls it.
The optional Lab lock (V1.6) uses Face ID, Touch ID or your device passcode through iOS. The app learns only whether unlocking succeeded; Peptidia never receives biometric data. When a Lab record or vial names a product that matches a library profile, the app links to that profile; the match runs on your iPhone against the public library list, so no Lab data is sent.
What we collect
Account data: email address and sign-in identifier (Apple ID / Google ID / magic link). If you use email/password sign-in, password authentication is handled by Supabase; Peptidia does not receive or store your plaintext password.
Profile data: display name and the primary outcome goals selected during onboarding. During onboarding we also ask for an age range (used only to confirm you are 18 or older — we never ask for or store a date of birth), an optional sex question you can skip, your country, and your peptide-experience level; these answers personalize the flow on your device and are not stored on our servers. An optional preferred name, the reasons you select when asked what has made peptide information hard to trust, initial journal weight baseline, and journal-reflection reminder preference also stay on your device. For that question, the anonymous onboarding measurement records only how many reasons you selected or that you skipped it, never which ones. We do not ask for height because V1 has no proportionate use for it.
Sensitive health-adjacent data: outcome goals (sleep, recovery, longevity, etc.) and self-reported safety conditions used to gate Pro features (pregnancy, breastfeeding, active cancer history). Earlier app versions also sent saved journal notes and mood, sleep, energy, and optional weight observations to the server. New V1.5 Lab and journal records stay on your device. Journal metrics never affect library ranking, evidence grades, or AI responses.
App-generated data: AI coach conversation history (starting with V1.6 you can reopen or delete each conversation in the app), audit log entries for sensitive actions (subscription changes, data deletion).
Subscription metadata: RevenueCat subscriber identifier, Apple original transaction identifier, current subscription status. We do not receive your credit card details — those are held by Apple.
Device and notification data: the optional daily journal reminder is scheduled locally and stores its chosen time on your device. If you explicitly enable Research Watch notifications during onboarding or in Settings, we store your preference and an Expo push token tied to the app installation so we can deliver dose-free evidence-update digests. The token is reassigned when accounts change on the device, retired when Expo reports it invalid, and no advertising identifiers are collected.
Diagnostic data: crash reports and performance traces (Sentry), collected to maintain a stable, secure service. Peptidia disables default PII collection and applies automated redaction to emails, credentials, user identifiers, URLs, and nested diagnostic context before sending an event; browser session replay is disabled. No automated filter can be guaranteed perfect, so do not place sensitive personal information in an error report or support message unless necessary. Product-analytics events (PostHog) about how you use the app's features are collected only if you opt in, and this analytics is off by default. In the iOS app, you can change this in Settings → Privacy & data. On the website, use the Analytics privacy control at the bottom of the page. Separately, the iOS app records anonymous funnel events for every user (PostHog): which onboarding screen, paywall, purchase, and account-creation step was reached, with the app version. These events carry a random install identifier, and their details never include your name, email, quiz answers, goals, or health fields. They are used only to measure where people leave onboarding and checkout. Because these events show which screens were reached, a stop after onboarding can reflect the safety screen, and a few screens appear only after certain answers; the answers themselves are never sent. To object to them, write to the privacy officer. Where possible, diagnostic data is not linked to your identity.
What we don't collect
- Advertising identifiers (no IDFA, no ad-tracking).
- Location data.
- Photos, contacts, calendar, or microphone data.
- Apple Health observations on our servers. V1.5 reads permitted observations locally as described above.
- Payment-instrument details.
How we use it
- Deliver the product: show you a personalized library, run the AI assistant, retain earlier cloud journal entries, and track your subscription state.
- Operate safely: detect abuse, enforce rate limits, monitor errors, maintain audit logs of sensitive actions.
- Improve the product: measure feature usage in aggregate via PostHog, only with your consent (opt-in, withdrawable anytime in Settings), and measure anonymous onboarding and checkout steps for all iOS users.
- Communicate with you: transactional emails (welcome, account deletion confirmation), launch announcement (if you opted in).
- Send Research Watch notifications: only if you opt in, deliver at most one dose-free digest a week when our weekly evidence review publishes a material, source-linked change to a library profile's curated evidence: its evidence level, risk level, controlled studies, systematic reviews, completed or reported trials, or structured safety information. A digest names the profile when only one changed, and contains no study titles, figures or doses. It is not a medical conclusion.
We do not sell or rent your data. We do not share data with third-party advertisers.
Where it lives
Our database is hosted by Supabase in Montreal (ca-central-1, Canada). Other sub-processors process data in their own regions:
| Sub-processor | Purpose | Region |
|---|---|---|
| Vercel | Web/API hosting | US |
| Cloudflare | DNS, edge proxy | Global |
| Apple App Store / RevenueCat | iOS subscriptions | US |
| Anthropic | AI assistant inference | US |
| Voyage AI | Vector embeddings | US |
| Resend | Transactional email | US |
| PostHog | Product analytics | US |
| Sentry | Error tracking | US |
| Upstash Redis | Rate limiting | Region per project |
| Expo Push | iOS push delivery | US |
For users in the European Economic Area, transfers to the US occur under Standard Contractual Clauses where applicable. For users in Quebec, our practices are governed by the Act respecting the protection of personal information in the private sector (Bill 25).
Your rights
You have the right to:
- Access and port the personal data we hold about you — export it yourself in-app via Settings → Privacy & data → Download my data, or email privacy@peptidia.app. Lab records on your iPhone are not held by us; starting with V1.6 you can export them via Settings → Your private Lab → Export my Lab.
- Correct inaccurate data (edit profile in-app, or email us).
- Delete your account and user-owned content via Settings → Delete Account in the iOS app, or by emailing us. In-app deletion begins immediately; emailed requests are handled within the response period required by applicable law. Limited de-identified security records and transaction records that Apple, a payment processor, or Peptidia must retain for legal, fraud-prevention, or accounting purposes may remain for the applicable retention period.
- Object to processing for non-essential purposes (e.g., analytics), where applicable.
- Withdraw consent at any time for processing that depends on it — turn product analytics or Research Watch notifications off in Settings → Privacy & data in the iOS app, use the website’s Analytics privacy control, and manage marketing email in the same place.
EEA / UK residents may also lodge a complaint with their local data-protection authority. Quebec residents may complain to the Commission d'accès à l'information du Québec.
Retention
- Account data is retained for the active life of your account.
- Server-held health-adjacent data (earlier journal entries and goals) is retained while the account is active and is automatically purged 12 months after subscription cancellation or expiry, unless you delete the account sooner.
- New Lab records remain on your device until you erase them in the Lab or remove the app. Server retention jobs cannot delete these local records. Lab exports you create stay wherever you send them.
- AI coach conversations are retained while the account is active. Starting with V1.6 you can delete individual conversations in the app; deleting the account removes them.
- Audit log entries are retained for 24 months then anonymized.
- Diagnostic data (Sentry, PostHog) is retained only for the configured processor retention period and is then deleted or de-identified; Peptidia periodically reviews those settings and keeps no diagnostic event longer than reasonably necessary for security, debugging, or aggregate product analysis.
- Research Watch push preferences and tokens are retained while the account is active and the feature is enabled. Opt-out disables delivery immediately; invalid tokens and account-owned tokens on deletion are removed.
Children
Peptidia is not intended for users under 18. Onboarding includes an age gate. We do not knowingly collect data from minors; if you believe we have, contact us at privacy@peptidia.app and we will delete it.
Cookies
The marketing site uses minimal cookies (preference + anti-CSRF). No advertising cookies. If you allow website analytics, the consent choice and anonymous analytics identifier are stored in your browser’s local storage rather than an advertising cookie. The iOS app does not use cookies.
Security
Data is encrypted at rest (Supabase default) and in transit (TLS). Access to production infrastructure is restricted to the founder. Sensitive operations are logged to an audit log.
If a confidentiality incident affects personal information, we will take reasonable measures to reduce the risk of injury and prevent recurrence. Where the incident presents a risk of serious injury, we will promptly notify the Commission d’accès à l’information and affected persons as Quebec law requires, subject to the lawful investigation exception. We maintain the required confidentiality-incident register for at least five years from the date we became aware of each incident. Where the GDPR applies, its separate supervisory-authority deadline may be 72 hours.
Legal rights and remedies
This Policy does not waive or limit any mandatory privacy, consumer-protection, Civil Code, or other legal right or remedy. Peptidia does not require a Quebec privacy dispute to be submitted to arbitration, restrict access to a court, prohibit a class action, or impose a class-action waiver. After a dispute arises, the parties may separately and voluntarily agree to mediation or arbitration where permitted by law.
The Terms of Service contain Peptidia's warranty disclaimer, lawful limitation-of-liability language, narrow indemnification provision, termination rights, governing law, and dispute-resolution terms. Those provisions remain subject to all mandatory privacy and consumer protections.
Changes
We will notify you of material changes by email and update the "Last updated" date above.
Contact
Privacy questions, rights requests, or breach inquiries: privacy@peptidia.app.