The short version: everything you record in PeptideTracker stays on your device. We do not collect, transmit, sell, or share your personal data. Effective 15 July 2026.
This Privacy Policy applies to the PeptideTracker mobile application ("the App"), published by Novapep ("we", "us"). It covers the App only; the novapep.co website has its own pages and notices. Questions about this policy can be sent to support@novapep.co or via our contact page.
PeptideTracker is built local-first. The App has no server holding your data (the only optional exception is the anonymous invite counter described in section 6). Everything you enter is stored in a private database on your own device and nowhere else:
We cannot see, access, receive, or recover any of this information. It is not backed up to our systems, not synchronised to a cloud service, and not shared with anyone by the App.
Information you record in the App — doses, weight, wellbeing ratings, notes — may be sensitive health-related information. Because the App is local-first, this information is processed only on your device, under your control. It is protected by your device's own security (passcode, Face ID / Touch ID, encryption) — we strongly recommend keeping device security enabled.
Premium subscriptions are purchased through Apple's App Store using your Apple ID. Payment is handled entirely by Apple; we never receive your name, card details, or billing address. To recognise an active subscription, the App may validate an anonymised purchase receipt with Apple and with our subscription-management provider (RevenueCat, Inc.). This receipt contains transaction identifiers only — no health data and none of the content you record in the App. RevenueCat processes it under its own privacy policy.
The App includes an optional referral feature. If you choose to use it, the App sends only two values to our server: your randomly generated invite code and a randomly generated install identifier (used solely to prevent double-counting). These values are created by the App, contain no personal information, and cannot be linked to your name, email, health data, or anything you record. We use them for one purpose only: counting how many friends joined with a code so free months can be granted. Deleting the App discards the identifier permanently. If you never use the feature, nothing is sent.
If you import a protocol by pasting a web address, the App fetches that page directly from your device to read the protocol. We do not receive, log, or store the address or its contents.
Dose reminders are scheduled locally on your device by the App. They are not sent through our servers, and we cannot see when or whether they fire.
You are in full control. You can delete individual records inside the App at any time, and deleting the App from your device permanently deletes all data it stored. Because we keep no copy, deletion is immediate and irreversible — there is nothing for us to retain or erase on your behalf.
The App is intended for adults and is not directed at anyone under 18. We do not knowingly collect information from minors — and by design, we collect no information at all.
Under the EU General Data Protection Regulation (GDPR) and similar laws, you have rights of access, rectification, erasure, restriction, portability, and objection. Because we do not collect or hold your personal data, these rights are exercised directly on your device: everything is already in your hands, exportable from the App, and deletable by you. If you believe we hold any personal data about you, or have any privacy question, contact us at support@novapep.co and we will respond promptly. You also have the right to lodge a complaint with your local supervisory authority.
If we change this policy — for example, if a future version of the App adds an optional cloud backup — we will update this page, revise the effective date above, and describe the change in the App before it applies to you.
Novapep · support@novapep.co · novapep.co/contact.html
See also the PeptideTracker Terms of Use.