Privacy policy
How PepNote handles personal information in the app, on this website, and when you contact us.
Updated
1. Who this policy covers
PepNote (“we”, “us” and “our”) provides the PepNote app and website. This policy explains the information involved when you create an account, keep records, connect Apple Health, use optional cloud AI, subscribe, browse the website or contact support.
For questions or to exercise your privacy rights, email [email protected]. Please do not include passwords, payment-card details or medical documents in an initial support request.
2. Information you provide
Some records can reveal sensitive information about your health. You decide what to enter; do not enter another person’s records without authority to do so.
- Account information: email address, account identifier, authentication and session information. Password-based authentication is handled by Supabase Auth; passwords are not part of your journal or AI context.
- Profile information: the name and optional personal details you choose to save, such as age, gender, height, weight goals, unit preferences and supplies.
- Routine records: compounds, vial stock and preparation details, schedules, planned doses, taken-dose logs, corrections, calendar notes and manually entered weight.
- Saved content: article bookmarks, app preferences, onboarding choices, conversations and unsent drafts, and the text and filenames of documents you review and add to chat.
- Support information: your email, message, attachments you choose to send, and information needed to investigate the request.
3. Apple Health and device-only information
With your permission, PepNote reads weight and steps from Apple Health to display your history and progress. PepNote does not write to Apple Health. Imported readings are held on your device and are excluded from account synchronization and automatic AI context.
Manually entered weight and other app-entered health-related records are different: they can be saved to your PepNote account. If you type health information into a message or send it in a document, that content is processed as chat content.
You can disconnect Apple Health in PepNote and revoke access in Apple’s Health or Settings app. Disconnecting does not erase the source records in Apple Health or separately entered PepNote records. Local reminder settings and the cloud-chat permission receipt are device-specific.
4. Purchase and technical information
Apple handles App Store payments. PepNote does not receive your complete payment-card or bank-account details. RevenueCat processes subscription information, including your app account identifier, products, transactions, receipts or purchase tokens, subscription status and related device/app information. PepNote stores the subscription status needed to manage access.
Requests to our website and cloud services necessarily involve connection and operational information, such as IP addresses, requested resources, timestamps, service errors, authentication events and device or app version information. Infrastructure providers may retain operational logs to deliver, secure and troubleshoot their services. We do not intentionally put journal or health-record content in application diagnostic logs.
5. How information is used
We use information to provide the features you request, keep your records available, authenticate your account, synchronize app-entered data, process subscriptions, answer support requests, deliver optional AI responses, prevent abuse and meet legal obligations.
We do not run advertising in PepNote or send your health records to advertising networks. We do not build an advertising profile from Apple Health data. Optional AI processing has its own data practices described below; it should not be confused with a promise that every AI provider excludes training.
The app’s calculations and AI responses do not determine eligibility for insurance, employment, credit or medical care. PepNote does not make decisions of that kind for you.
6. Account storage and synchronization
App-entered records are stored locally and synchronized to your account through Supabase when connected. This includes profile details, protocol and inventory records, manual weights, bookmarks, saved chats and supported preferences. Your email and account identifier associate those records with your account. Chat drafts and reviewed document text and filenames can synchronize before you press Send; turning off cloud AI does not turn off account synchronization.
The app’s configured database project is hosted in Frankfurt. That database location does not mean that every support, billing, infrastructure or AI service processes information only within Europe.
Signing out leaves the account’s local cache on that device so it can be available after signing in again. Signing out, uninstalling, or canceling a subscription is not the same as deleting your account.
7. Optional cloud AI and documents
Cloud chat requires a separate affirmative choice in the app before AI requests are sent. When you send a message, PepNote sends it, recent conversation, reviewed document text and a bounded snapshot of app-entered inventory, schedules, dose logs and notes through Supabase to OpenRouter and the model provider. The baseline snapshot can include the first 12 compounds and their schedules, 24 recent dose logs and eight recent notes, even if they are not directly relevant to your question. Chat tools may retrieve more app records. These records may include sensitive health information.
OpenRouter routes requests to model providers. The current development configuration uses NVIDIA Nemotron through OpenRouter. Routing, retention and training practices depend on the endpoint and provider. The current configuration permits a provider that may retain prompts and responses or use them to improve models; it does not guarantee zero retention or exclusion from training. Do not submit material you are unwilling to share on that basis.
Photo previews currently remain on the device, and sending photos to the current text-only model is unavailable. Text that you review and send from a document becomes part of the conversation; document conversations are limited to reading records. Other chat conversations may carry out supported changes to your saved records, which you should review.
You can turn cloud chat off in Chat → Chat & your data. This stops new AI requests; it does not recall information already processed by a provider or delete saved conversations. You can delete saved conversations separately. An app update that changes the versioned AI disclosure or bundled PepNote terms/privacy revision will ask for acceptance again before further AI use. The app does not automatically detect changes to an external provider’s website policy.
8. Who receives information
Information is made available to the services needed for the functions you use. Relevant recipients are Supabase for account authentication, database storage and backend requests; RevenueCat for subscription administration; Apple for App Store purchases and platform services; and OpenRouter and its inference providers when you enable cloud chat. Website hosting and email providers process connection data and correspondence needed to provide those services.
RevenueCat is not sent protocol, dose, note or Apple Health records by PepNote. AI requests do not automatically include raw Apple Health readings, your password or payment-card information.
We may disclose necessary information if legally required, to address fraud or threats, or to establish or defend legal claims. If the service changes ownership, information may transfer as part of that transaction, subject to applicable law and notice of material changes. We do not provide an unrestricted license to your health records merely because you use the app.
9. Legal bases where data-protection law requires them
For ordinary account and service information, the relevant basis is performing the service agreement or taking steps at your request before that agreement. Optional access and sharing rely on the permission applicable to that feature. Legal obligations may require some records to be kept. Security, fraud prevention and responding to support requests may rely on legitimate interests, balanced against your rights.
Health information requires additional protection. Where applicable law requires explicit consent or another special-category condition, that condition is necessary in addition to a basis for ordinary personal data. Accepting service terms is not, by itself, consent to unrestricted processing of health data. Cloud AI has a separate permission request, and Apple Health has its own system authorization.
You can withdraw an optional permission at any time. Withdrawal does not undo processing that was lawful before withdrawal. Turning off Health access or cloud chat affects that feature; asking us to stop storing core account records may require deletion of the account. Contact us if you want to withdraw consent or restrict processing beyond the controls available in the app.
10. International processing
Service providers may process information outside your country, including in the United States and other locations used by their infrastructure or subprocessors. A provider’s general privacy policy and the safeguards applicable to our service arrangement are separate matters.
Where required, international transfers must be covered by an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism. You may contact [email protected] to ask which recipients, locations and safeguards apply to your information and request relevant information about those safeguards.
11. Retention and deletion
Account content is retained while your account exists, unless you remove supported content sooner. Deleting your account initiates removal of your Supabase authentication account and associated active cloud documents. After successful server deletion, the app removes that account’s local and recovery files on the device used for deletion.
Deletion does not erase Apple Health source records, copies you exported or shared, or local copies remaining on another device. Other devices should be signed out and their app data removed when you no longer need it. Subscription and transaction records held by Apple or RevenueCat can remain for billing, fraud prevention and legal recordkeeping.
Backup copies, service logs and support correspondence may remain after active records are deleted. The relevant retention criteria include backup rotation and recovery needs, investigation of security incidents or your request, and applicable accounting or legal obligations. Provider copies follow the settings and arrangements applicable to the service. We do not promise immediate erasure from every backup or third-party system; contact us for information about retention applicable to a particular request.
AI providers may retain previously submitted content under their applicable policies. Disabling chat or deleting your PepNote account does not automatically erase copies retained by those providers. Contact us for help making a request; we cannot promise removal of data already incorporated into a provider’s trained model.
12. Security
The app uses protected local files for account records, authenticated cloud requests and access controls intended to separate users’ records. Network connections to our cloud services use HTTPS. No method of storage or transmission can eliminate all risk, and cloud synchronization and AI processing are not end-to-end encrypted from PepNote and all service providers.
Protect your device and account credentials. If you suspect unauthorized access or a privacy incident, contact [email protected]. We will assess incidents and provide notices where required by applicable law.
13. Your choices and rights
Depending on applicable law, you may request access to your personal information, correction, deletion, restriction, objection to certain processing, or a portable copy. You may also withdraw consent and complain to a competent data-protection authority. Rights and exceptions depend on the circumstances; this policy does not limit rights the law gives you.
Use the app’s editors and deletion controls for routine changes. For a copy of your data or other requests, email [email protected] from the address associated with your account. An in-app export feature is not currently available. We may request proportionate information to verify ownership, but will not ask for your password. Authorized representatives may contact us with evidence of authority.
Where GDPR applies, we normally respond within one month and explain any lawful extension. You will not be disadvantaged for exercising privacy rights, although we may be unable to provide a feature without the data needed for it.
14. Website, cookies and external links
The website presents product information, support and educational articles. It does not currently create app accounts, accept payments, request health records or collect waitlist email addresses. Demonstration screenshots do not contain customer records.
We have not added advertising pixels, analytics tools or tracking cookies to the website. The hosting service processes the connection information needed to deliver and protect it. Your browser may cache site assets. Links to Apple, research publications and other services open destinations governed by their own practices.
15. Children and family use
PepNote is not specifically designed or marketed for children. The App Store’s content rating is separate from the legal rules that apply to a child’s personal information or ability to enter a contract. Where parental authorization is required by law, it is required before the relevant processing.
A parent or guardian who believes a child has provided personal information without the necessary authorization should contact [email protected]. We will investigate and take appropriate steps, including deletion where required. No app content should be treated as permission for a child to obtain or use a medicine or research compound.
16. Updates and contact
The date above identifies this version. Material changes will be brought to your attention as required, and new consent will be sought where required before using information for a new purpose. A revised policy does not remove privacy rights or retroactively authorize processing that required your permission.
Questions, data requests and concerns can be sent to [email protected].