1.Who We Are
Peptora is a tracking and reference tool for peptides. It records the schedule you set for yourself and keeps your log. It also includes a reference library that cites its sources and a reconstitution calculator that works on numbers you enter. Peptora does not recommend doses and does not sell peptides or medication.
This Privacy Policy explains what information Peptora collects, how it is used, who processes it, and the choices you have. It applies to peptora.io, to the Peptora apps for iPhone and Android, and to any other Peptora service that links to this policy.
2.Information We Collect
Account information: your email address, your name if you give one, a hashed version of your password (we never store the password itself), whether your email is verified, when you accepted the terms, and when you last signed in.
What you save in Peptora: your protocols (the name, the vial amount, the water volume, the amount and schedule you set, and any notes), your log entries (the amount, the time and any note you add), and calculations you choose to save. You decide what goes into these fields.
Purchases made in the iPhone app: Peptora Pro is sold there as an App Store subscription. Apple handles the payment. Peptora receives from Apple a signed record of the purchase: which plan was bought, when it started, when it expires or renews, and a transaction identifier. Peptora never receives your card details or your Apple ID email address.
Purchases made on the web: your submitted payment reference, the amount and date you report, the name on the sending account, any note you add, and the receipt file you upload as proof of payment. Peptora has no card processor on the web and never receives or stores card numbers. Receipt files are kept in private storage, can be read only by the Peptora administrators who review your payment, and are never publicly accessible.
Access information: whether your account has Peptora Pro, how it was obtained (a trial, an App Store subscription or a purchase on the web), and when it ends.
Device and technical information: a hashed device fingerprint that is used to give each device one trial and to prevent abuse, a hashed form of your IP address recorded with sign-in and security events, the type of device or browser you use, and the session cookies or tokens that keep you signed in.
Notifications: if you allow notifications in the mobile app, a push token for your device, so that a reminder can be delivered to it. You can turn notifications off in your device settings at any time.
Communications: messages you send us, and the emails we send you to verify your address, reset your password or tell you about your account.
3.How We Use Information
We use this information to create and secure your account, to keep you signed in, to store and show you what you have saved, to work out whether your account has Peptora Pro, to send the emails and notifications described above, to prevent fraud and abuse, and to meet legal obligations.
Peptora does not use your information for advertising, does not build advertising profiles, and does not use advertising or analytics trackers. Peptora has no AI features, and nothing you enter is sent to an AI provider.
Peptora is not a healthcare provider. What you enter into Peptora is your own record. It is not a medical record, and Peptora should not be used for emergencies, diagnosis or treatment decisions.
4.Cookies, Sessions and Device Fingerprints
On the web, Peptora uses cookies only to keep you signed in and to protect your session. They are httpOnly authentication cookies and are not used for advertising or tracking. The mobile app stores its sign-in tokens in the secure storage provided by your phone.
Peptora generates a hashed device fingerprint from signals such as the browser or device model, the system version, screen size, timezone and language. It is recorded when a trial is granted, so that each device receives one trial, and it helps reduce abuse. It is not used to follow you across other sites or apps.
5.How We Share Information
We do not sell your personal information. We share it only with the service providers that run Peptora for us, and only as far as each one needs: Railway hosts the API, the database and the private file storage; Vercel hosts the website; Resend delivers our emails; and Expo, together with Apple and Google, delivers push notifications to your device.
When you buy Peptora Pro in the iPhone app, the purchase is made with Apple under Apple's own terms and privacy policy. Apple tells us about the purchase as described in section 2. Web payments are verified by hand by Peptora administrators, and receipt files are not shared with anyone outside Peptora. If you pay through a payment link we send you, that payment is handled by the provider named on the payment page.
We may also disclose information when the law requires it, to protect Peptora or its users, to investigate abuse, or as part of a merger, acquisition or other transfer of the business.
6.Data Retention
We keep your information for as long as you have an account. When you delete your account, everything described in section 9 is deleted at once.
Receipt files for web payments are deleted twelve months after the payment is reviewed, or sooner if you delete your account.
Email verification codes and password reset links expire shortly after they are issued.
7.Security
We use technical and organisational safeguards to protect your information, including encrypted connections, hashed passwords, secure session cookies and access controls. No internet service can guarantee absolute security.
You are responsible for keeping your password confidential and for using a secure device when you access Peptora.
8.Your Choices and Rights
You can see and change what you have saved inside Peptora, and you can delete your account yourself as described in section 9. An App Store subscription is managed and cancelled in your App Store account settings, not by Peptora.
Depending on where you live, you may have the right to ask for access to your information, for it to be corrected, deleted or exported, or to object to or restrict how it is used. To make a request, email us at the address in section 13. We may need to verify your identity first.
You can control cookies through your browser. Blocking the sign-in cookies will prevent you from logging in on the web.
9.Account Deletion
You can permanently delete your Peptora account at any time, yourself, without contacting us.
How to delete your account
If you cannot sign in, email info@peptora.io from the address on the account with the subject line "Account deletion request". We will delete the account within 30 days.
Deleting your account erases your profile, email address and login, every protocol and log entry, your saved calculations, your notification token, any web payment records and receipt files, and the link between your account and any App Store subscription. A deleted account cannot be recovered.
Two things remain, and neither identifies you: the hashed device fingerprint that records that a device has already had its trial, and an entry in our security log that an account was deleted, with no account attached. If our hosting provider keeps routine backups, deleted data can remain in them until those backups expire.
Deleting your account does not cancel an App Store subscription, because only you can do that. Cancel it in your App Store account settings so that Apple does not charge you again.
10.International Users
Peptora may process and store information in countries other than your own. Those countries may have data protection laws that differ from the laws where you live.
Where required, we rely on appropriate legal mechanisms for international transfers, such as contractual protections with our service providers.
11.Children
Peptora is for adults. It is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given information to Peptora, contact us so that we can delete it.
12.Changes to This Policy
We may update this Privacy Policy from time to time. When a change is material, we will take reasonable steps to tell you, such as updating the effective date, posting a notice, or sending an email to your account address.
13.Contact
For privacy questions or requests, email info@peptora.io or use the support page.