Privacy Policy

Last updated: April 21, 2026

PepChamp ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your information when you use our mobile application. This policy mirrors the in-app Privacy Policy available in Settings > Privacy Policy.

Information We Collect

Account Information

Email address (for authentication)
Display name (if you choose to set one)
If you use Sign in with Apple, only the information you choose to share

Profile Information (Optional)

You may voluntarily provide:

Phone number, address, city, state, ZIP code
Age, height, gender
Goals, experience level, preferences

Health and Wellness Data (Optional)

Peptide dose logs (date, time, dosage, injection site)
Protocol data (peptides tracked, dosing schedule, cycle length)
Inventory records (vial names, quantities)
Blood work values you voluntarily enter
Body measurements, weight
Wellness entries (mood, sleep, energy)

Device Permissions (Optional)

Calendar — used only to create dose-reminder events you schedule
Push Notifications — used only to send dose reminders and app updates you opt into

You can revoke any device permission at any time through your device's Settings app.

AI Data Sharing (Google Gemini)

PepChamp offers three AI-powered features that send data to Google Gemini AI for processing: the AI Q&A Assistant, the AI Research Helper, and the Smart Cycle Planner. No other feature in the app sends data to any AI service. The Interaction Checker does NOT use AI — it queries a local research-backed database.

Recipient

Google Gemini AI (ai.google.dev), operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Google provides equal or equivalent privacy protection to this policy through its own Privacy Policy and the Google API Terms of Service.

Data Sent to Google Gemini

Text you type into the AI Q&A Assistant (questions, follow-ups, and the conversation context within that session)
Questionnaire selections you make in the AI Research Helper (goals, experience level, route preference, frequency, complexity)
Protocol metadata you submit to the Smart Cycle Planner (protocol name, peptide names, doses you entered, frequency, cycle length, adherence percentage)

Data NOT Sent to Google Gemini

Your email, name, phone, address, or account details
Your stored dose logs or injection site history
Your blood work values, weight, or body measurements
Any other personally identifiable information

How Your Data Is Used

Google Gemini processes your text to generate a response, which is returned to the app and displayed to you. Data is transmitted over encrypted HTTPS. PepChamp does not retain or share this data with any other third parties.

Your Consent

The first time you open any of the three AI features, the app shows a full-screen consent modal that identifies Google Gemini as the recipient, lists exactly what will be sent, what will not be sent, and requires you to tap "I Agree." If you tap "Cancel," no data is sent and the feature is not used. You can withdraw consent at any time by signing out — the next sign-in will require consent again before using AI features.

Third-Party Services

We use the following third-party services that may process your data. Each provides equal or equivalent privacy protection to this policy through its own privacy terms.

Supabase Inc. (supabase.com) — Authentication, database hosting, and cloud functions. Your account data, dose logs, protocols, blood work entries, wellness entries, measurements, and forum posts are stored in a Postgres database hosted in the United States. Supabase uses AWS as its underlying cloud provider. See https://supabase.com/privacy.
RevenueCat, Inc. (revenuecat.com) — Subscription and in-app purchase management. Processes purchase receipts and subscription status. See https://www.revenuecat.com/privacy/.
Google LLC — Google Gemini AI powers three features only: AI Q&A Assistant, AI Research Helper, and Smart Cycle Planner. Data sent is limited to what is described above. See https://policies.google.com/privacy.
Expo, Inc. (expo.dev) — Push notification delivery and over-the-air update distribution. See https://expo.dev/privacy.
Apple — App distribution, in-app purchase processing, and (if you use Sign In with Apple) authentication. See https://www.apple.com/privacy/.

Each service has its own privacy policy. We encourage you to review them.

How We Use Your Information

To provide and maintain the app's features
To manage your account and subscriptions
To send dose reminders and notifications (if enabled)
To improve the app based on anonymous usage patterns

Data Storage and Security

Your data is stored on Supabase, which uses industry-standard encryption at rest and in transit. Authentication tokens are stored securely using your device's secure storage (Keychain on iOS). We do not store passwords — authentication is handled through secure providers (email/password via Supabase Auth, or Sign in with Apple).

Your Rights

You have the right to:

Access all data we store about you
Request export of your data
Delete your account and all associated data
Opt out of push notifications
Withdraw consent for data processing

Account deletion is available in Settings > Account Actions > Delete Account. This permanently removes all your data from our servers.

For data export requests, contact us at support@peptidekit.app.

California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

EU Privacy Rights (GDPR)

EU residents have rights under the GDPR including access, rectification, erasure, restriction, portability, and objection.

Children's Privacy

PepChamp is not intended for individuals under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has provided us with information, contact us for removal.

Medical Disclaimer

PepChamp provides educational information only — not medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider before starting any peptide protocol. The app does not provide dosing recommendations.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via in-app notice. Your continued use of the app after changes constitutes acceptance.

Contact Us

Questions, concerns, or requests? Email support@peptidekit.app.