Privacy Policy
Plain English: PeptidePilot has no accounts, analytics, advertising, or tracking SDKs. Your journal stays on your devices and, if you enable sync, in your private iCloud account. Data is shared only when you deliberately export it or create an encrypted caregiver pass.
1. Who runs PeptidePilot
PeptidePilot is published by an individual developer for personal-tracking purposes. We are not a healthcare provider, pharmacy, clinic, or peptide vendor. Contact: peptidepilotsupport@gmail.com
2. What data the app handles
The app handles the following on your devices and, when enabled, through your private iCloud sync:
- Peptide names and dose information you enter
- Schedules and notification times
- Dose logs — status, time, optional injection site, optional notes, optional 1–5 ratings
- Medication records — label/source details, lot, opened/expiry dates, storage notes, optional photo
- Health-profile and wellness information you choose to enter
- App preferences (Face ID toggle, default reminder lead time)
- Achievements you've earned (stored in iOS UserDefaults)
If you grant Apple Health access, the app can read the categories shown in its Apple Health settings, including body measurements, resting heart rate, blood glucose, blood pressure, sleep, and supported medication information. It does not write to Apple Health.
If you grant photo library or camera permission, vial photos you take are stored in the app's local SwiftData store. They are not uploaded.
3. What data we collect
We do not receive or use your journal for analytics, advertising, tracking, or marketing. There are no analytics SDKs, crash reporting services, advertising identifiers, fingerprinting, or telemetry.
Apple Push Notification Service is not used — all notifications are local, generated and scheduled by the app itself on your device.
The in-app Research library (Settings → Tools → Research library) fetches a public JSON file from cadercreates.github.io/peptidepilot-site/research.json listing curated FDA labels, PubMed papers, and clinical-trial summaries. The request contains no journal information and the file is cached on your device.
FDA recall checks send only the product, manufacturer, NDC, or lot search terms you entered to the official openFDA drug-enforcement API. Optional iCloud sync is handled by Apple CloudKit.
When you create a caregiver pass, PeptidePilot encrypts the selected snapshot on your device with AES-256-GCM before uploading it to CloudKit. The decryption key remains in the shared link and is not stored in the cloud record.
4. What data we share
We do not sell or disclose your information for advertising or tracking. PeptidePilot shares data only at your direction, such as through an export, an encrypted caregiver pass, or a link you open in another service. Caregiver passes are read-only and can be revoked in the app.
5. Backup, sync, and export
If you enable iCloud sync, Apple stores your app database in your private iCloud account so it can appear on your devices. If you choose to Create backup (Settings → Backup), the app generates a password-protected file. You decide where it goes — Files, iCloud Drive, AirDrop, email, or another destination.
The PDF and CSV exports work the same way — generated locally, shared only where you send them.
6. Children
PeptidePilot is rated 17+ and is not directed at children. We do not knowingly handle data from anyone under 17.
7. Apple App Store / TestFlight
When you install the app from the App Store or TestFlight, Apple receives standard install metrics under their privacy policy. We see only the aggregate counts Apple shows in App Store Connect; we do not see who you are.
8. Your rights
You can delete journal data in the app, revoke caregiver passes from Safety & Care, disable Apple Health permission in iOS Settings, and manage iCloud data through your Apple account. Deleting the app removes its local data; synced copies and files you previously exported may need to be removed separately.
9. Changes to this policy
If we change anything material, we will update the "Last updated" date and post the new policy at this URL. Continued use after a change means you accept the updated policy.
10. Disclaimer
PeptidePilot is a personal journal. It is not medical advice, does not diagnose or treat any condition, and does not sell or recommend peptides. Consult a licensed clinician before starting, stopping, or changing any care plan.