Privacy Policy

Privacy Policy

Effective date: August 3, 2026

This Privacy Policy explains how Peptary ("Peptary," "we," "us," or "our") handles information when you use the Peptary mobile application, peptary.app, and related services (collectively, the "Service").

Peptary is designed as an offline-first peptide calculation and record-keeping application. Peptide-related calculations and records are handled locally on your device as described below.

Information Handled by the Service

Peptide Data Stored Locally on Your Device

Peptide-related data that you enter or create in the Peptary app may include:

• Peptide or mixture names and component amounts;
• Diluent volumes, concentrations, target amounts, syringe settings, and calculation results;
• Calculator history and saved calculation profiles;
• Custom peptide components and syringe presets;
• Dose or injection records, dates, tags, and notes; and
• Statistics derived from your locally stored records.

This data is calculated, processed, and stored locally in the app's database on your device. Peptary does not upload this peptide-related data to our servers, does not synchronize it between devices, does not use it for advertising, analytics, or marketing, and does not send it to third-party services for calculation or storage.

Peptary does not provide or operate cloud synchronization or cloud backup for this data. However, your device's operating system may back up app data according to your device, account, and backup settings. Any such system-level backup is controlled by you and the relevant platform provider, not by Peptary.

The app may allow you to import or export certain records as local JSON files. Data leaves the app only when you deliberately export, share, or otherwise transfer such a file. Once you do so, the exported copy is controlled by you and is subject to the privacy and security practices of the destination, recipient, or third-party service you select.

Because we do not hold a Peptary-operated server-side or cloud copy of your peptide-related data, we cannot view, recover, modify, export, or delete it for you. You can manage individual records through the app where those controls are available. Deleting the Peptary app removes its local database and all peptide-related records stored by the app from that device. Depending on your operating-system and backup settings, a system-level backup may retain or later restore app data. Peptary cannot access, control, or restore such a backup. Files that you previously exported or shared are separate copies and are not deleted when you delete the app.

Purchase and Entitlement Information

The current version of Peptary may offer a one-time in-app purchase. We may offer subscriptions or other purchase options in the future. Purchases are processed by the applicable app marketplace, such as the Apple App Store, and purchase access is managed with RevenueCat.

Depending on the purchase flow, the marketplace and RevenueCat may process information such as an anonymous app user identifier, product identifier, purchase history, transaction or receipt information, entitlement status, device and operating-system information, country or region, and currency. We use this information to display products, complete and restore purchases, verify entitlements, prevent fraud, and provide purchased features.

We do not receive or store your full payment-card number, card security code, or marketplace account password. Payment information is handled by the marketplace according to its own terms and privacy policy. Peptide-related calculation and record data is not provided to RevenueCat or the marketplace.

Website and Technical Information

When you visit peptary.app, we and our service providers may process limited technical and usage information, such as your IP address, browser and device type, operating system, language, referring page, pages viewed, approximate location derived from IP address, timestamps, cookie or session identifiers, and interactions such as clicks and scrolling.

We may use Microsoft Clarity to understand website usability and Trackdesk for referral or affiliate attribution. These tools may use cookies or similar technologies. Their use is limited to the website and does not give them access to peptide-related data stored in the Peptary app.

Information You Provide When Contacting Us

If you contact us, we may receive your name, email address, the contents of your message, attachments you choose to send, and other information you voluntarily provide. Please do not include peptide records or other sensitive health information in a support message unless it is necessary and you choose to do so.

Peptary does not currently require you to create a named user account to use its offline calculation and record-keeping features.

How We Use Information

We use information that we receive outside the local peptide database to:

• Operate, secure, maintain, and improve the Service;
• Provide and restore purchased features;
• Respond to support requests and other communications;
• Understand website performance and usability;
• Measure referrals or affiliate activity;
• Detect fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our Terms of Service.

Cookies and Similar Technologies

The website may use cookies, local storage, pixels, tags, and similar technologies for essential functions, preferences, analytics, and referral attribution. Where required by applicable law, we will request consent before using non-essential technologies. You can manage cookies through the controls we provide and through your browser settings. More information is available in our Cookie Policy.

How We Disclose Information

We may disclose limited non-peptide information to service providers that help us operate the Service, including:

1. Apple App Store or another applicable marketplace

   • Processes in-app purchases, billing, refunds, and marketplace account functions.

2. RevenueCat

   • Manages anonymous app identifiers, purchase validation, entitlement status, product offerings, and purchase restoration.

3. Microsoft Clarity

   • Provides website analytics, interaction measurements, heatmaps, and session-replay functionality.

4. Trackdesk

   • Provides referral and affiliate attribution for the website.

5. Vercel and Cloudflare

   • May provide website hosting, delivery, security, performance, and abuse-prevention services.

These providers do not receive the peptide-related calculation and record data stored in the Peptary app. They may process other information according to our instructions, their agreements with us, and their own applicable privacy terms.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect the rights and safety of users or others, investigate fraud or security issues, or complete a merger, acquisition, financing, or transfer of the Service subject to appropriate protections.

We do not sell peptide-related data, and we cannot sell or disclose locally stored peptide-related data because we do not receive it.

Data Retention

Peptide-related data remains in the app's local storage until you delete the relevant records or delete the Peptary app. Deleting the app removes its local database and all peptide-related records stored by the app from that device. Peptary does not retain a cloud backup, but your operating system may retain or restore app data through a system-level backup according to your device, account, and backup settings.

Purchase and entitlement information is retained by the marketplace and RevenueCat according to their retention requirements and as necessary to validate or restore purchases, prevent fraud, comply with law, and resolve disputes. Website analytics, referral information, security logs, and support communications are retained only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal obligations and provider settings.

Data Security

We use reasonable administrative and technical measures designed to protect information that we process. Peptide-related data remains within the app's local storage and is also protected by the security controls of your device. No storage or transmission method is completely secure. You are responsible for protecting access to your device and for securely handling any files that you export or share.

International Data Transfers

Our website, marketplace, analytics, referral, hosting, and purchase-management providers may process information in countries other than the country where you live. Where required, we rely on appropriate contractual or legal safeguards for international transfers. This does not apply to peptide-related data that remains solely in the app's local database on your device.

Your Privacy Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of personal information held by us, and to object to or withdraw consent for certain processing. You may also have the right to complain to your local data-protection authority.

These requests apply only to information that we or our service providers hold. Because we cannot access your locally stored peptide-related data, you must manage that data through the app and your device.

For users in the European Economic Area, the United Kingdom, or similar jurisdictions, we process non-local information as necessary to provide the Service or purchased features, based on our legitimate interests in operating and securing the Service, with your consent where required, and to comply with legal obligations. You may withdraw consent at any time without affecting processing already carried out lawfully.

If the California Consumer Privacy Act applies to us, California residents may have rights to know, access, delete, and correct personal information, to opt out of the sale or sharing of personal information, to limit certain uses of sensitive personal information, and not to receive discriminatory treatment for exercising their rights. We will honor legally valid browser-based opt-out signals, such as Global Privacy Control, where required.

To exercise an applicable right, contact [email protected]. We may need to verify your request and may retain information where permitted or required by law.

Children

The Service is intended only for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe that a minor has provided personal information to us, please contact [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or applicable law. We will post the updated Policy with a new effective date. We will provide additional notice when required by law or when a change materially affects your rights.

Contact Us

If you have questions, requests, or complaints about this Privacy Policy, contact [email protected].