Peptico — Privacy Policy

Effective Date: July 14, 2026

This Privacy Policy explains how SSSSTUDIOS ("Peptico", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the Peptico iOS application (the "Service"). It is written to align with the Apple App Store guidelines, Apple's HealthKit requirements, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

1. Who We Are & Scope

The "data controller" for the purposes of GDPR and the "business" for the purposes of the CCPA is:

• SSSSTUDIOS, publisher of Peptico.
• Contact: [email protected]

This Policy applies to the Peptico iOS app and related online services we provide. It does not apply to third-party apps or websites we link to from inside Peptico.

2. Information We Collect

2.1 Account Information

• Email address and name that you choose to share through Sign in with Apple or Sign in with Google.
• A pseudonymous account identifier used to sync your data across devices.

2.2 Health & Protocol Data (entered by you)

• Body weight, goal weight, height, age range, and biological sex.
• Peptides, protocols, doses, schedules, injection sites, and reconstitution values.
• Progress notes and progress photos you choose to add.

2.3 Nutrition Data

• Food entries, calories, and macros.
• Food photos you capture or select. When you use food scanning, the image may be sent to our AI provider to estimate calories and macros, then discarded.

2.4 AI Chat

• Messages you send in the in-app AI chat are transmitted to our AI provider to generate a response. Do not share information you consider sensitive that you do not want processed by a third-party model.

2.5 Device & Technical Information

• iOS version, device model, app version, and locale.
• Diagnostics and app-event data (crashes, performance, errors).
• Pseudonymous analytics identifiers and, with your consent, an advertising identifier (see Section 6).
• Push notification token, if you enable notifications.

2.6 Subscription & Purchase Information

• Transaction IDs and entitlement status from Apple In-App Purchase, relayed through RevenueCat.
• We never see your payment card number — Apple handles all payment data.

3. Health Data & HealthKit

With your permission, Peptico can read certain metrics from Apple Health (such as body weight, heart rate, and activity) to show them alongside your protocol. Peptico's use of HealthKit data follows Apple's requirements:

• HealthKit data and the health entries you make in Peptico are used only to provide the app's features to you.
• We do not use health data for advertising, marketing, or data-broker purposes, and we do not share it with advertising or attribution partners.
• Health data is stored on your device and in your private iCloud backup. If account sync is enabled, it is stored in our backend solely to sync it back to you.

4. Information We Do Not Collect

5. How We Use Your Information

• Create and operate your account and sync your data across devices.
• Run the core features: reconstitution math, dose and site logging, protocols, reminders, progress charts, the peptide library, nutrition tracking, and AI chat.
• Process and manage your Peptico Pro subscription.
• Send push notifications you opt into (dose reminders).
• Improve and debug the Service through pseudonymous analytics and crash reports.
• Measure and optimize our marketing, with your consent (see Section 6).
• Detect and prevent fraud, abuse, and security incidents, and comply with legal obligations.

We do not sell your personal information.

6. Advertising, Attribution & Your Choices

To understand how people find Peptico and to measure our marketing, we work with advertising and attribution partners (including Meta and AppsFlyer). On iOS, before any tracking that uses your device's advertising identifier (IDFA), we show Apple's App Tracking Transparency prompt.

• If you allow tracking, we may share limited app-event and device-identifier data with these partners to attribute installs and measure campaign performance.
• If you decline, we do not use the advertising identifier, and only privacy-preserving, aggregated measurement is used.
• You can change this anytime in iOS Settings > Privacy & Security > Tracking.

Your health data is never included in advertising or attribution.

7. Legal Bases (GDPR)

• Performance of a contract — to provide the account, features, and subscription you signed up for.
• Consent — for optional permissions (camera, photos, notifications, Health access) and for advertising/tracking. You may withdraw consent at any time.
• Legitimate interests — to secure the Service, prevent abuse, debug, and improve the product.
• Legal obligation — to comply with applicable laws.

8. Sharing & Third-Party Services

We may also share information when required by law or to protect the rights, safety, and property of Peptico, our users, or the public. If the Service is acquired or merged, your information may transfer to the successor entity, subject to this Policy.

9. International Data Transfers

We and several of our providers operate in the United States and other countries. Where required, we rely on safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum for transfers from the EEA/UK.

10. Data Retention

• Account & health data — retained while your account is active.
• Account deletion — email [email protected] and we remove your account data within 30 days. Residual copies may remain in encrypted backups for up to 90 days.
• Subscription & transaction records — retained as required by tax and accounting laws (typically up to 7 years).
• Analytics & crash data — pseudonymous, retained on a rolling basis (typically up to 12 months).
• Food-scan images & AI messages — processed to generate a result and not retained by us for longer than needed to provide the response.

11. Your Rights (GDPR, CCPA, & More)

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing, to data portability, to withdraw consent, and to non-discrimination for exercising these rights. To make a request, email [email protected]. We respond within the timeframes required by applicable law (typically 30 days under GDPR; 45 days under CCPA). We may verify your identity first. We do not sell personal information or share it for cross-context behavioral advertising as defined by the CCPA/CPRA.

12. Children's Privacy

Peptico is intended for adults and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

13. Security

We use industry-standard technical and organizational measures, including encryption in transit (TLS) and at rest, backend access controls, and reputable infrastructure providers. No system is 100% secure. Notify us at [email protected] if you suspect unauthorized access to your account.

14. Permissions

• Health (HealthKit) — optional. To read metrics like weight, heart rate, and activity to show alongside your protocol.
• Camera & Photos — optional. To scan food for calories and macros and to add progress photos.
• Notifications — optional. For dose reminders.
• Tracking (ATT) — optional. For advertising measurement (see Section 6).
• Motion — optional device motion access.

You can change these anytime in iOS Settings > Peptico.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will provide reasonable notice in the app or by email. The "Effective Date" at the top always reflects the latest version.

16. Contact

• Support & privacy requests: [email protected]
• Publisher: SSSSTUDIOS

Last updated: July 14, 2026