Privacy Policy

1. Information We Collect

We collect the following categories of personal information when you create an account, take our quiz, or use our services:

• Account information — email address and first name
• Quiz answers — your goals, health conditions, experience level, and body stats (weight, age, etc.)
• Dose logs — peptide dosing records you choose to track within the app
• Subscription data — plan type, billing status, and payment metadata (we never store full card numbers)

2. How We Use Your Information

• Personalize peptide recommendations based on your quiz responses and profile
• Provide dose-tracking functionality and progress insights
• Process subscription payments and manage your account
• Improve the service, fix bugs, and develop new features
• Communicate important account or policy updates

3. Third-Party Services

We rely on trusted third-party providers to operate MyPepStack. Each provider has its own privacy policy governing data it processes on our behalf:

• Supabase — database hosting and user authentication
• Stripe — payment processing for subscriptions
• Anthropic — AI-powered personalized peptide recommendations
• Vercel — website hosting and deployment

4. Cookies and Analytics

We use session cookies strictly for authentication and keeping you signed in. We do not currently use any third-party tracking cookies or analytics pixels. If this changes in the future, we will update this policy and notify you accordingly.

5. Data Security

All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Your data is stored in Supabase with Row Level Security (RLS) policies enabled, ensuring that each user can only access their own data. While no method of transmission or storage is 100% secure, we implement industry-standard safeguards to protect your personal information.

6. Your Rights

Regardless of where you reside, you have the following rights regarding your personal data:

• Data export — request a copy of the personal data we hold about you
• Data deletion — request that we permanently delete your account and all associated data
• Update your information — correct or modify your profile and account details at any time
• Opt out of marketing — unsubscribe from promotional emails while still receiving essential account notifications

To exercise any of these rights, contact us at support@mypepstack.com.

7. CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to know — you may request details about the categories and specific pieces of personal information we have collected
• Right to delete — you may request deletion of your personal information, subject to certain legal exceptions
• Right to opt-out — you may opt out of the sale of your personal information
• We do not sell personal information — MyPepStack does not sell, rent, or trade your personal data to any third party

8. GDPR (European Union Residents)

If you are located in the European Economic Area, the General Data Protection Regulation (GDPR) provides you with additional protections:

• Lawful basis — we process your personal data based on your consent (e.g., taking the quiz, creating an account) and our legitimate interest in operating and improving the service
• Data processing — your data is processed to provide the services you requested, including personalized recommendations and dose tracking
• Right to erasure — you may request the complete deletion of your personal data from our systems
• Right to portability — you may request your data in a structured, commonly used, and machine-readable format

9. Children

MyPepStack is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via the email address associated with your account. We encourage you to review this page periodically. Your continued use of MyPepStack after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@mypepstack.com