Privacy Policy

Effective Date: March 24, 2026

1. Information We Collect

Account Information: When you sign up via Google OAuth, we receive your name, email address, and profile picture. We also collect the username, bio, and peptide preferences you provide during onboarding.

Usage Data: We collect dose logs, research log entries, comments, reactions, and protocol subscriptions that you create on the platform.

Automatically Collected: We may collect basic analytics data such as page views, device type, and browser type to improve the service.

2. How We Use Your Information

We use your information to: operate and maintain your account; display your public profile and tracking data; generate community statistics and consensus (aggregated, anonymous); send you newsletter updates if you opted in; and improve the platform.

3. Public vs. Private Data

Your profile page (username, bio, peptide stack, dose tracker, research logs) is public by default — this is the core function of the platform as a link-in-bio for peptide tracking. Your email address is never displayed publicly.

4. Data Sharing

We do not sell your personal data. We may share aggregated, anonymized statistics (e.g., “X% of BPC-157 users report improved joint mobility”). We use third-party services for authentication (Google OAuth) and database hosting (Supabase), which have their own privacy policies.

5. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

6. Data Retention

Your data is retained as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), secure database hosting, and hashed session tokens. However, no system is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing; and data portability. Contact us to exercise these rights.

9. Children

Peplog is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

10. Newsletter

If you opt in to our newsletter during onboarding, we will send you periodic updates about peptide research, platform features, and community highlights. You can unsubscribe at any time via the link in any email.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or platform notification.

12. Contact

Questions about your privacy? Contact us at privacy@peplog.me.