Privacy Policy

1. Introduction

PeptideAI LLC ("Peptide AI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Peptide AI mobile application, website, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, username, and password when you register for an account.
• Profile information: age, gender, health and wellness goals, and other optional details you choose to share.
• Health and wellness queries: questions, prompts, and information you submit to our AI consulting tools regarding peptides and wellness topics.
• Payment information: billing name and address. Payment card details are processed exclusively by our third-party payment processor and are never stored on our servers.
• Communications: messages, feedback, support requests, and survey responses you send to us.

2.2 Information Collected Automatically

• Device identifiers: device type, operating system, unique device identifiers (IDFA/GAID), hardware model, and app version.
• Usage analytics: features accessed, screens viewed, AI queries submitted, session duration, tap and scroll interactions, and in-app navigation paths.
• Log data: IP address, access timestamps, referring URLs, and error logs.
• Location data: approximate geographic location inferred from your IP address. We do not collect precise GPS location.

2.3 Information from Third Parties

• Social login providers: if you sign in via Apple, Google, or another provider, we receive basic profile information per your settings with that provider.
• Analytics providers: aggregated data about user interactions from our analytics partners.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create, maintain, and secure your account.
• To provide, personalize, and improve the Service, including AI-generated peptide insights.
• To process transactions and send related information (receipts, confirmations).
• To communicate with you about updates, security alerts, and support.
• To conduct analytics and research to improve user experience and develop new features.
• To train, evaluate, and improve our AI models (using de-identified and aggregated data where possible).
• To send promotional communications where you have opted in or where permitted by law.
• To comply with legal obligations, enforce our terms, and protect rights and safety.

4. Third-Party AI Service & Data Sharing

4.1 AI-Powered Features & Third-Party AI Processing

Our App includes an AI-powered chatbot that provides research-based information about peptides. This feature is powered by Anthropic's Claude API ("Anthropic"), a third-party artificial intelligence service.

When you use the AI chatbot, the following data may be transmitted to Anthropic for processing:

• Chat messages and queries: The questions, prompts, and free-text you submit to the AI chatbot.
• Body metrics: Body metrics you have voluntarily provided (such as age, height, weight, sex, body fat percentage, activity level, and sleep data), when relevant to your query or included in a chatbot conversation for personalized responses.
• Peptide protocol and dosing information: Peptide protocol details and dosing logs you include in your conversations when asking the chatbot about them.
• Conversation history: Prior messages within a consulting session to maintain context and continuity.

What we do NOT share with Anthropic: We do not send your email address, account credentials, or payment information to Anthropic.

How Anthropic uses your data: Anthropic processes this data solely to generate personalized, research-based responses to your queries within the app. Your data is handled in accordance with Anthropic's Privacy Policy. We use Anthropic's API under terms that prevent your data from being used to train Anthropic's AI models (zero-retention API usage).

Equal data protection: We require that Anthropic and any other third-party AI service provider that receives your data maintains technical and organizational security measures that provide the same or equal level of data protection as Peptide AI's own standards, including encryption of data in transit and at rest, restricted access controls, contractual limitations on data use and retention, and compliance with applicable data protection laws. We confirm that any third party we share your data with provides the same or equal protection for your personal data as described in this Privacy Policy.

User consent and control: You consent to this data sharing when you use the AI chatbot feature. You may choose not to use the AI chatbot, in which case no personal data will be shared with Anthropic. You may also withdraw consent at any time through your account settings, though this will limit your ability to use AI-powered features. For data deletion requests, see Section 6 of this Privacy Policy.

4.2 Other Third-Party Service Providers

We may also share your information with the following categories of third-party service providers:

• Cloud infrastructure: hosting, storage, and computing services (e.g., AWS, Google Cloud).
• Analytics providers: services that help us understand usage patterns (e.g., Google Analytics, Mixpanel).
• Payment processors: third-party services that securely process your payment information.
• Communication tools: email delivery and push notification services.
• Customer support: tools that help us provide responsive support.

These providers process your data only on our behalf under contractual data protection obligations. We do not sell your personal information to third parties.

5. Apple HealthKit & CareKit Data

5.1 What HealthKit & CareKit Data We Access

With your explicit permission, Peptide AI may read and/or write the following types of health data through Apple HealthKit:

• Body measurements: weight, height, body mass index (BMI), and body composition data.
• Activity data: steps, active energy burned, exercise minutes, and workout data.
• Vitals: heart rate, resting heart rate, and blood pressure (if available).
• Sleep analysis: sleep duration and sleep stage data.
• Nutrition data: dietary intake information you choose to log.

5.2 How We Use HealthKit & CareKit Data

HealthKit and CareKit data is used exclusively to:

• Display your health metrics within the Peptide AI app to help you track wellness goals.
• Provide personalized AI consulting insights based on your health trends (with your consent).
• Power CareKit-based care plans and health tracking features within the app.

5.3 HealthKit & CareKit Data Restrictions

In compliance with Apple's requirements, we commit to the following:

• HealthKit and CareKit data will not be sold to advertising platforms, data brokers, or any third parties.
• HealthKit and CareKit data will not be used for advertising, marketing, or other use-based data mining purposes.
• HealthKit and CareKit data will not be shared with third parties without your explicit consent, and only with parties who provide health services to you.
• HealthKit and CareKit data will not be disclosed to any third party for purposes unrelated to providing health or fitness services to you.
• We will only request access to HealthKit data types that are relevant to the functionality of the app.

5.4 Your Control Over HealthKit Data

You may revoke Peptide AI's access to HealthKit data at any time through the Apple Health app settings on your device (Settings > Health > Data Access & Devices > Peptide AI). Revoking access will not delete data already stored within the Peptide AI app, but you may request deletion by contacting [email protected].

6. Data Retention

We retain your personal information for as long as your account is active and as needed to provide the Service. Specifically:

• Active account data is retained for the life of your account plus 30 days after deletion.
• Anonymized and aggregated analytics data may be retained indefinitely.
• Backup copies may persist for up to 90 days after deletion from active systems.
• We retain certain data as required by law for compliance, dispute resolution, or fraud prevention.

To request deletion of your account and data, email [email protected].

7. California Consumer Privacy Act (CCPA)

Your Rights

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell your personal information. If this changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Do Not Sell My Personal Information

Peptide AI does not sell your personal information as defined under the CCPA. If our practices change, we will update this policy and provide opt-out mechanisms before any sale occurs. To submit a request or inquiry, contact [email protected] with the subject line "CCPA Request."

We will verify your identity before processing any request and respond within 45 days as required by law.

8. GDPR & International Data Subject Rights

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with applicable data protection laws, you may have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

Our legal bases for processing include: contract performance (to provide the Service), legitimate interests (analytics, security, improvement), consent (marketing), and legal obligations.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected data from a child under 13, we will promptly delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will take steps to delete it.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our website and within the app for the following purposes:

• Essential cookies: Required for core functionality such as authentication, session management, and security.
• Analytics cookies: Help us understand how users interact with the Service, measure feature performance, and identify improvements.
• Preference cookies: Remember your settings and personalize your experience.

You can manage cookie preferences through your browser or device settings. Disabling certain cookies may affect Service functionality. We do not use cookies for third-party advertising.

11. Data Security

We implement commercially reasonable technical and organizational security measures to protect your information, including:

• Encryption of data in transit using TLS 1.2+.
• Encryption of sensitive data at rest using AES-256.
• Role-based access controls limiting data access to authorized personnel.
• Regular security assessments and vulnerability testing.

No security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach requiring notification under applicable law, we will notify affected users as required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on the Service and update the "Last updated" date. For material changes, we will provide additional notice via email or in-app notification. Your continued use after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data requests, or concerns, contact us at:

Email: [email protected]

Company: PeptideAI LLC

Website: peptideai.co

We will respond to all requests within 30-45 days as required by applicable law.