Everything is stored locally
Protocols, injections, weight, inventory and profile answers live on your device. The app does not send your data to us or to third parties — there is nowhere to send it: no server exists. Deleting the app deletes all the data. If you have device backups enabled (iCloud or a computer), the app’s data may be part of them — those are controlled by you and Apple, not by us.
Apple Health — optional
Only with your explicit permission. Reads: weight, body fat, steps, calories, sleep and resting heart rate — in order to show them to you. Writes: only the weight you enter manually. Declining limits nothing — manual entry always works. You can revoke access at any time in Settings → Privacy & Security → Health → PeptCycle.
Sign in with Apple — optional
Entirely optional: the app is fully usable without it and nothing is locked behind a sign-in. If you do sign in, Apple returns an identifier and, if you choose, your name and email — you can hide your real address through Apple. Those values are written only to your device, into the same local database as everything else, and are used solely for personalisation. They are sent nowhere — there is no server. Revoke access in Settings → Apple Account → Sign in with Apple; deleting the app removes what was stored.
Notifications are local
Dose reminders are scheduled on your device. No push servers are involved, and nobody knows when or what you logged. Turn them off at any time in Settings → Notifications → PeptCycle.
Subscriptions and payments
Payments are handled entirely by Apple through the App Store. We never see or store card, bank or payment details — they never reach the app. All we receive from Apple is the subscription status (active or not), which is kept locally to unlock the Premium features. Manage, cancel or restore purchases in Settings → Apple Account → Subscriptions.
Health data ≠ advertising
Your Apple Health data and your records are never used for advertising, marketing or profiling, and are never shared or sold — including to data brokers. The app does not upload health information to iCloud or any other cloud. Full stop.
Not for children
The app and this site are intended for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has left us an email address, write to us and we will delete it.
Retention, deletion and your rights
In the app: data stays on your device until you delete it — you can export it as CSV first. The waitlist: kept until the app launches or until you ask us to delete it. Site statistics: only after consent, which you can withdraw at any time on this page. You have the right to access, correct, delete and port your data, and to lodge a complaint with the Bulgarian Commission for Personal Data Protection or the supervisory authority in your country — for any request, just write to us.
This website
The site may use Google Analytics for anonymous statistics with IP anonymization — only after your consent via the cookie banner. Without consent, nothing that tracks you is loaded. Site statistics have no connection whatsoever to the data in the app. Withdraw your consent with the button below:
The waitlist
If you leave an email so we can tell you about the launch, we keep the address only, plus which language page it came from. It is stored in a database with our hosting provider, Cloudflare. We pass it to nobody, send no newsletter, and delete it on request or once the app has shipped. To limit abuse we also store a one-way hash of the IP address — no address can be recovered from it.
Third parties
The only third parties that touch any data at all are Cloudflare (hosting for the site and the waitlist database) and Google (site statistics — only after consent). Both provide the same or equivalent protection of your data as described in this policy. The app contains no third-party advertising or analytics SDKs and shares data with no one.
When this policy changes, we update the date at the top of the page; a material change will be flagged visibly on the site.
Questions about privacy, or a deletion request? Write to us.