Privacy Policy
Effective July 3, 2026
PepCoach is an educational peptide coach, tracker, and reminder. PepCoach is not a medical service and does not provide medical advice. This policy explains what we collect, why, and your choices.
What we collect
- Account: your email (for sign-in), only if you create an account.
- Profile (all optional): sex, height, weight, age, goals, experience level.
- What you log: protocols and doses, dose logs (site, notes), daily check-ins, body measurements, and progress photos.
- Coach chats: the messages you send the coach, plus a short context summary for personalized (Pro) answers.
- Minimal app state such as free-message counts and badges.
We do not collect your phone number, contacts, precise location, or advertising identifiers. We do not sell your data and we use no advertising trackers.
Where your data lives
- On your device by default (local storage).
- If you sign in: backed up to our cloud provider (Supabase) — an encrypted database and private photo storage, isolated per user. Data is encrypted in transit (HTTPS) and at rest.
Who processes it
- Supabase: authentication, database, and photo storage.
- Anthropic (Claude): processes your coach messages to generate replies. Per Anthropic's commercial terms, your messages are not used to train their models.
- Apple/Google and RevenueCat: app delivery and, if you subscribe, payments.
Your choices and rights
- Export: "Export my data" creates a full backup file.
- Delete: "Delete account & all data" permanently erases your account, records, and photos. You can also "Reset all data" on this device.
- Use without an account: sign-in is optional; guests keep data on-device only.
- Canada (PIPEDA), EU/UK (GDPR), and California (CCPA) residents have additional rights including access, correction, portability, and withdrawing consent. Contact us to exercise them.
Children
PepCoach is intended for adults (18+) making decisions about their own health. Do not use it if you are under 18.
Security
We keep API keys server-side (never in the app), enforce per-user access controls, authenticate the AI service, and rate-limit it to prevent abuse. No system is perfectly secure; use the app at your own risk.
Contact
PepCoach is operated by Jasnoor Parmar (Ontario, Canada). Questions or requests: pepcoachai@gmail.com.