Privacy Policy

What we collect

PepTalk Peptides collects only what you explicitly enter into the app, plus basic technical data needed to run it:

• Account info: email, name, and profile details you provide at signup.
• Health data you enter: mood, energy, sleep quality, meals, workouts, peptide doses, journal entries, body measurements, medical conditions, medications, and allergies.
• Device health data (if you connect it): steps, heart rate, weight, HRV, VO2 max, sleep stages from Apple Health or Google Fit — only if you grant permission.
• Crash logs: anonymized error reports via Sentry for stability.
• Photos (optional): if you use Meal Scan, the photo is sent to our server for AI analysis and then discarded.

Permissions PepTalk Peptides requests, and why

Every permission below is requested on first use and can be revoked anytime in your device's Settings without breaking the rest of the app.

• Microphone — voice meal logging and voice journaling. Audio is transcribed to text on-device or via a speech-to-text service; the audio itself is not retained on our servers.
• Speech recognition — converts microphone audio into the meal or journal entry you intend to log.
• Camera — barcode scanning for packaged foods and AI Meal Scan (Pro). Images you scan are sent to our AI provider for analysis and discarded after the result returns.
• Photo library — read — attach a photo to a meal, journal entry, or profile. Photos stay tied to the entry you attach them to and are deleted when you delete that entry or your account.
• Photo library — write — save in-app exports (charts, journal pages) back to your camera roll. We only write the file you asked for.
• Apple HealthKit — read — pull steps, body weight, heart rate, resting heart rate, HRV, VO₂ max, oxygen saturation (SpO₂), respiratory rate, sleep stages, active energy burned, and (if you opt in to cycle tracking) menstrual flow, cervical mucus quality, ovulation test results, intermenstrual bleeding, and contraceptive entries into PepTalk Peptides so they appear on your dashboard and rolling summaries. Each category is granted individually in the HealthKit permission sheet. See the Health Data Disclosure for the full list.
• Apple HealthKit — write — mirror your daily check-ins (mood, energy, sleep markers), manually-logged body weight, and mindful minutes back to the iOS Health app, so the data you enter in PepTalk Peptides also appears in Apple Health.
• Android Health Connect — same as HealthKit, on Android. Read access to steps, sleep, heart rate, active and total calories burned, body weight, and body fat percentage.
• Push notifications — daily check-in reminders, peptide dosing reminders, workout reminders, weekly health report ready alerts, community-chat mentions (Plus/Pro). You can disable each notification category in Profile → Settings → Notifications.

PepTalk Peptides does not request Contacts, Location, Calendar, Reminders, Bluetooth, Local Network, or Tracking (no IDFA, no ATT prompt).

What we don't do

• We don't sell your data.
• We don't share your data with advertisers.
• We don't run ads in the app.
• We don't scan your contacts, calls, SMS, or other apps.
• We don't build behavioral profiles to sell.

AI features and data sharing

When you chat with Aimee, generate a recipe, create a meal plan, or scan a meal, the relevant content is sent to our third-party AI service provider for processing. We strip personally identifying information before sending unless you've explicitly opted into personalization via the "AI data consent" toggle in your health profile.

AI responses are not considered medical advice and Aimee is instructed to redirect medical questions to licensed providers.

Where your data lives

Your data is stored in Supabase (hosted on AWS, US region). It is encrypted in transit and at rest. Row-level security ensures only you can access your own records.

Your rights

• Export: Profile → Export My Data — download a JSON of everything.
• Delete data: Profile → Delete My Data — removes all tracked data from this device.
• Delete account: Profile → Delete Account — permanently removes your account and all associated records from our servers.
• Revoke AI consent: Profile → Health Profile → AI data consent toggle.

Children's privacy

PepTalk Peptides is not for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

Subscription billing

PepTalk Peptides+ and PepTalk Peptides Pro subscriptions are processed by Apple (App Store) or Google (Play Store). We never see your payment information. Cancel anytime in your device's subscription settings.

Changes to this policy

If we make material changes, we'll notify you in-app. The "Last Updated" date above always reflects the current version.

Contact

Questions or requests: support@peptalk.bio