Privacy Policy

1. Introduction

Welcome to PeptidePal ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

2. Information We Collect

Information You Provide to Us

We collect information you directly provide when using our App, including:

Account Information: Email address and password when you create an account
Health and Fitness Data: Peptide schedules, dosage information, inventory data, body measurements, weight tracking, and progress photos
Usage Data: Information about how you interact with our App, including features used and actions taken
Support Communications: Information you provide when contacting our support team

Information Collected Automatically

When you use our App, we automatically collect certain information, including:

Device Information: Device type, operating system version, unique device identifiers
Usage Information: App features accessed, time spent in the App, crash reports
Analytics Data: Anonymous usage statistics to improve our services

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process and manage your subscription
Send you technical notices and support messages
Respond to your comments, questions, and customer service requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Personalize and improve your experience
Comply with legal obligations

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following situations:

Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as:
- Cloud Hosting and Database Management: Firebase (Google) for data storage and real-time synchronization
- Analytics: Google Analytics for Firebase to help us understand how users engage with the App
- Subscription Processing: RevenueCat for managing subscriptions and purchases
- Error Tracking: Crashlytics (Google) for identifying and fixing app crashes
These service providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.
Legal Requirements and Law Enforcement: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
- Comply with a legal obligation, subpoena, or court order
- Protect and defend the rights or property of PeptidePal
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of users or the public
- Protect against legal liability
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
Aggregated Information: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Data Storage and Security

We use industry-standard security measures to protect your personal information from unauthorized access, use, or disclosure. Your data is encrypted both in transit and at rest. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your data is stored on secure servers provided by Firebase (Google Cloud Platform) with appropriate technical and organizational measures in place.

6. Data Retention

We will retain your personal information for as long as your account is active or as needed to provide you with the Service. If you choose to delete your account, we will permanently delete all of your personal data from our active systems within 30 days. Please note that:

We may retain anonymized or aggregated data for analytical purposes
We may retain certain non-personal data as required to comply with our legal obligations
Backup systems may retain data for up to 90 days before permanent deletion
We may retain data necessary to resolve disputes and enforce our agreements

7. Your Data Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete information about you.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data from our systems. Please note that deleting your account will result in the permanent deletion of all data associated with it.
Right to Restrict Processing: You have the right to request that we restrict the processing of your data under certain conditions.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at jiveshbhatti@hotmail.com. We will respond to your request within the time frame required by applicable law (generally within 30 days). For your protection, we may need to verify your identity before fulfilling your request.

8. International Data Transfers

Your information, including personal data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

9. Children's Privacy

Our Service is not intended for use by anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.