Your health data is private. We do not sell, share, or monetise your personal information.
1. Who we are
Peptide Tracker ("the app", "we", "us") is a personal health tracking tool operated by Suhel Daud. You can contact us at suhel.daud@gmail.com.
2. What data we collect
When you create an account or use the app, we collect:
- Account information — your username, email address, and password (stored as a secure bcrypt hash, never in plain text)
- Google sign-in — if you sign in with Google, we receive your name, email address, and Google account ID from Google. We do not receive your Google password.
- Dose logs — peptide name, dose amount, date and time, optional weight, energy level, sleep quality, notes, and photos you choose to attach
- Side effects — symptom, severity, related peptide, timing, and any notes you enter
- Protocol / schedule — your dosing schedule and reminder preferences
- Usage data — login timestamps, IP address, browser type, and device type for security purposes
3. How we use your data
- To provide the app's core features — logging, scheduling, reminders, and history
- To send dose reminders via email or WhatsApp if you enable them
- To detect unusual login activity and protect your account
- We do not use your data for advertising or sell it to third parties
4. Data storage and security
Your data is stored on a private server located in Germany (Hetzner Cloud). We use:
- HTTPS encryption for all data in transit
- Bcrypt hashing for passwords
- Secure HTTP-only session cookies
- SQLite database stored on the server with restricted access
Photos you upload are stored on the server and are only accessible to you when logged in.
5. Third-party services
The app uses the following third-party services:
- Google OAuth — for optional Google sign-in. Google's privacy policy applies: policies.google.com/privacy
- Twilio — for optional WhatsApp reminders. Twilio's privacy policy: twilio.com/legal/privacy
- Gmail SMTP — for sending email notifications and reminders
6. Data retention
Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, contact us at suhel.daud@gmail.com and we will remove it within 30 days.
7. Your rights
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a readable format
To exercise any of these rights, email suhel.daud@gmail.com.
8. Cookies
We use a single session cookie to keep you logged in. It is HTTP-only, cannot be accessed by JavaScript, and expires after 30 days or when you sign out. We do not use advertising or tracking cookies.
9. Children's privacy
Peptide Tracker is not intended for users under 18 years of age. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy from time to time. The effective date at the top of this page will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact
If you have any questions about this privacy policy, contact us at:
suhel.daud@gmail.com
Peptide Tracker