Privacy Policy

Peptide Wizard ("we", "our", "the app") is an educational tracking companion for peptide compounds. This Privacy Policy explains what data we collect, why we collect it, and how you control it.

1. What we collect

• Account data — email address and a bcrypt-hashed password when you register.
• Protocol data you enter — active peptide stacks, injection logs (dose, site, ratings), lab values, progress photos, vial purchases, wizard chat history.
• Subscription state — whether you are on the free or Pro tier. Payments are processed by Stripe; Peptide Wizard never sees your card number.
• Device metadata — anonymous crash logs and API request timestamps for reliability.
• Optional wellness metrics — weight, HRV, sleep, resting heart rate, when you choose to enter them.

2. What we DO NOT collect

• We do NOT collect precise location.
• We do NOT collect contacts, calendar, camera, or microphone data unless you explicitly grant permission and use a feature that needs it (e.g. progress photos).
• We do NOT sell, rent, or share your data with third-party advertisers.
• We do NOT run any advertising SDKs.

3. How we use your data

Your data powers the features you see — dose tracking, cycle analytics, wizard chat responses, interaction warnings, weekly insight reports, and lab-based recommendations. Data is stored in an encrypted MongoDB database hosted on secure cloud infrastructure.

4. Third parties

• Stripe — processes subscription payments. See stripe.com/privacy.
• Emergent AI / Google Gemini — powers "Ask the Wizard" responses. Chat contents are sent to the language model provider for the purpose of generating a reply; they are not retained by the model for training.
• Apple App Store / Google Play — receipt validation for subscriptions.

5. Your rights

You may:

• Export your complete data at any time from Settings → Data Export (JSON download).
• Delete your account and all associated data from Settings → Delete Account. This is irreversible and executes immediately.
• Cancel your Pro subscription at any time via the App Store subscription settings or the Stripe customer portal.
• Email support@peptidewizard.app to request a copy or deletion of your data (GDPR / CCPA compliance).

6. Data retention

Account and protocol data is retained until you delete your account. Anonymous crash logs are retained for 90 days. Deleted accounts are purged within 30 days.

7. Children

Peptide Wizard is intended for users aged 17 and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Not medical advice

Peptide Wizard is an educational tracking tool. It does not provide medical advice, diagnosis or treatment. Always consult a licensed physician before starting or modifying any peptide protocol.

9. Changes to this policy

We may update this policy from time to time. The "Effective" date at the top reflects the latest revision. Material changes will be announced in-app.

10. Contact

Questions about this policy? Email support@peptidewizard.app.