Effective September 16, 2026
Operator: NZT48 Inc
Privacy contact: [email protected]
You can use Her Peptide Tracker without an account. Personal records are saved on your iPhone. The sample space is separate and never syncs. Cloud sync is off until you enable it. Turning sync off stops future uploads; it does not delete previously uploaded records.
Locally, the app stores the routine names, schedules, amounts, units, actual recording times, injection sites, inventory, corrections, optional weight, symptoms and notes that you enter. Preferences are also stored locally. You choose what to enter; do not include information you do not want stored.
If you create an account, Supabase processes your email, account identifier and authentication credentials to provide sign-in. Session tokens are kept in the iOS Keychain. If you enable sync, your records, inventory, check-ins, preferences and revision history are stored in Her Peptide Tracker’s dedicated Supabase project in Frankfurt, Germany. Service providers may process technical request information, such as IP addresses and security logs, to operate and protect the service. We use this data to deliver the requested features, maintain security and respond to support requests.
On supported iPhones, Apple’s on-device Foundation Models framework can choose a recordkeeping suggestion. Only counts of records, logging days and check-ins are supplied. Routine names, amounts, symptoms and free-text notes are not supplied to the model. This feature does not send prompts to a third-party AI server. AI output does not change your records or plan.
Apple processes subscription payments. Her Peptide Tracker reads verified subscription entitlements through StoreKit; it does not receive your payment card details. When you export or share a file, you choose the destination and that service’s privacy practices apply. Exported files contain the records you selected. Avoid sending health records in support messages unless necessary.
Her Peptide Tracker contains no advertising or analytics SDKs, does not track you across apps or websites, and does not sell health information or use it for advertising.
Local records use iOS file protection and sessions use Keychain. You may enable the app lock. Notifications omit routine names and amounts. Network requests use HTTPS and account records are isolated with database access policies. No system can guarantee absolute security. Keep your device and account secure. Local records are excluded from automatic device cloud backups; export a copy or opt into sync if you need another copy.
Local data stays until you erase it in Settings or remove the app. Conflict backups remain until you erase local data. Cloud data and revisions remain until you delete your account in Settings. Account deletion removes active account records and revisions; service backups and security logs may remain for the provider’s retention period. Deleting the cloud account leaves local records available for export. Use “Erase records on this iPhone” to remove them too. Signing out does not delete records. Deleting the app or account does not cancel an Apple subscription; cancel it through Apple’s subscription settings.
You may export and correct your records, stop syncing, and delete your account and local records. Depending on your location, you may also have rights to access, deletion, restriction, objection, portability or to complain to a data protection authority. For privacy requests, contact [email protected].