Privacy Policy & Health Data Notice
Last updated: 2026-09-06. These changes take effect on 2026-09-22; until that date the previous version of this Policy continues to apply.
The short version
- TrackPep is a private record-keeping tool for peptides and GLP-1s, food, training and habits — not a medical service and not medical advice.
- We collect your account info, subscription status, device diagnostics, and the health, food, training and habit data you choose to log (doses, side effects, weight, body measurements, hydration, meals, workouts, habits, bloodwork, sleep, photos, notes).
- We never sell your data or your consumer health data, and we never share it for advertising. We do not use your health data to train AI models, and our AI provider does not use what you send to train theirs.
- The camera and your photo library are used only when you open Meal Scan or the barcode scanner and only for the photo you take or pick. If you use Meal Scan, that meal photo is sent to our AI provider — but only after you have explicitly agreed to AI features.
- We use a small set of infrastructure providers (Supabase, Polar, RevenueCat, DeepSeek, PostHog, Sentry) — each limited to what a specific feature needs. We do not send your health entries to analytics tools.
- You can access, correct, export, or delete your data at any time in the app or by emailing support@trackpep.com.
This summary is for convenience only. The full policy below controls.
This Privacy Policy & Health Data Notice explains how TrackPep ("TrackPep", "we", "us") collects, uses, stores, discloses, and protects your information when you use the TrackPep website and mobile app (together, the "Service"). By using the Service you agree to this Policy.
1. What TrackPep is — and is not
TrackPep is a personal record-keeping and journaling tool for people who want to keep their own log of medications, peptides, doses, injection sites, side effects, weight, body measurements, hydration, meals, workouts, habits, sleep, bloodwork, and related notes, and to see their own history and simple trends.
TrackPep is not a medical service and does not provide medical, pharmaceutical, or health advice. Specifically, TrackPep does not provide medical advice, diagnosis, treatment, or dosing instructions; does not recommend, prescribe, sell, or endorse any medication, peptide, or dosage; is not a healthcare provider, pharmacy, telehealth service, or medical device; and does not verify anything you choose to record. See our Medical Disclaimer for more. You are solely responsible for your own health decisions — always consult a qualified healthcare professional.
2. Information we collect
- Account data — email address, optional display name, your authentication provider (Google, Apple, or email), and your language and unit preferences.
- Onboarding data — goals, experience level, and preferences you provide to personalize the app.
- Health journal data (sensitive) — anything you choose to log: compounds, inventory, doses, injection sites, side effects, weight, body measurements, hydration, sleep, bloodwork, daily check-ins, progress photos, and notes. We treat this as sensitive personal data and consumer health data.
- Food, training and habit data — meals and their items, calories and macronutrients, foods you search for or scan by barcode, workout sessions, sets, exercises and training plans, and the habits, wellness ratings, mood check-ins and other daily metrics you choose to track. We treat this as sensitive personal data and consumer health data too.
- Camera & photo library — TrackPep asks for camera access so you can photograph a meal (Meal Scan) or scan a product barcode, and for photo library access so you can pick an existing meal photo instead. We access the camera only while one of those screens is open, we do not read your photo library — you choose one photo and only that photo is used, and barcode frames are processed on your device and never uploaded.
- Meal photos — a photo you take or pick in Meal Scan is resized on your device and uploaded to your own private folder in our storage, then read once by our AI provider to estimate what is on the plate. See section 5A.
- AI feature inputs — what is sent to our AI provider depends on which feature you use. Section 5A lists this feature by feature. Nothing is sent until you have explicitly agreed to AI features, and AI output is educational only and is never medical advice.
- Device & technical data — operating system, app version, language, crash reports, and basic diagnostics.
- Product analytics — de-identified usage analytics (PostHog) and crash reports (Sentry). We do not send your health journal entries to analytics or crash tools.
- Subscription data — processed by Apple, Google, RevenueCat (mobile), and Polar (web). We receive only your entitlement status (Free/Pro) and purchase metadata; we never receive or store your full card details.
3. Health Data Privacy Notice
This section describes how we handle health data and "consumer health data" as defined under laws such as the Washington My Health My Data Act, Nevada's consumer health data law, and similar state laws.
We collect health data only that you choose to enter, and we use it to provide the Service's core tracking, history, reminder, and personalization features, to sync your data across your devices, to provide AI features you request, to maintain security, and to respond to support requests.
- We do not sell consumer health data.
- We do not share consumer health data for targeted advertising.
- We do not use your personal health data to train TrackPep-owned AI models.
- We do not use geofencing to identify or track you near healthcare facilities.
If we ever intend to materially change how we use, disclose, or process consumer health data, we will update this Policy and obtain any consent or written authorization required by applicable law before those practices begin.
4. How we use your data — and what we never do
We use your data only to provide the Service to you: showing your own timeline and trends, syncing your devices, sending reminders you set, generating exports and reports you request, and providing AI features you ask for. We do not profile or process your health data for our own commercial purposes.
We never sell your data. We never share your health or medical data with any third party for advertising or their own use, and we never share it with data brokers. Your medical data is for you, and you alone.
5. Service providers (subprocessors)
To run the Service we rely on a small number of providers that process data strictly on our behalf, bound by data-protection terms, and only to operate the feature involved:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Auth, database, storage, sync | Account + health journal data (encrypted, row-level secured) |
| DeepSeek | Pep Bot, Insights, Meal Scan, weekly review, safety checks | Message text AND the meal photos you submit to Meal Scan, plus the summaries described in section 5A. Not used to train models. |
| USDA FoodData Central | Food and nutrition lookup | Your search text only — no account or health data |
| Open Food Facts | Barcode product lookup | The barcode number only — no account or health data |
| RevenueCat | Mobile subscription management | Entitlement status, purchase metadata |
| Polar | Web billing & subscriptions | Subscription status, purchase metadata |
| Apple / Google | App Store billing | Subscription status and purchase data |
| PostHog | Product analytics | De-identified usage events (no health entries) |
| Sentry | Crash & error reporting | Diagnostics and crash logs (no health entries) |
| Vercel | Website hosting & delivery | Request metadata (e.g. IP) for routing and security |
We may also disclose data where required by law, subpoena, or legal process, or to protect the rights, safety, and security of our users and the Service. If TrackPep is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Policy and applicable law.
5A. AI features — exactly what is sent
AI is for reviewing records and app assistance, not medical decisions. Requests and generated replies may undergo additional safety checks with the same AI provider before a reply is shown. These checks use the conversation or report text already covered by your AI consent; they do not grant access to additional records. Replies outside the record-keeping scope are withheld. Withdrawing AI consent also disables these checks and AI responses. No prompt or reply is written to operational logs.
TrackPep's AI features run on DeepSeek, a third-party AI provider. Nothing below happens until you have explicitly agreed to AI features on the consent screen; declining leaves every other part of the app working. Your name, email address and account identifiers are never sent to the AI provider, your inputs and outputs are not used to train any model — ours or theirs — and neither the prompt nor the reply is written to our logs.
Availability. Meal Scan is a feature of the TrackPep mobile app from version 1.6.0 onward. The web app cannot photograph or scan a meal, and earlier versions of the mobile app could not either — so on those, no photograph of yours has ever been sent anywhere. The other rows in this table describe features you may already have.
| Feature | What leaves TrackPep |
|---|---|
| Pep Bot | The message text you type, and the conversation so far. |
| Insights | A summary of the period you select: doses and the compounds they relate to, side effects, weights, and — where you log them — calories and protein, training sessions and volume, habit consistency and sleep. |
| Meal Scan | The meal photo you took or picked, and any note you typed about it. The photo is read once to identify foods and portions. |
| Coach | A summary of one week: your goals and targets, body weights, meal calories and macros, workout duration, volume and effort, your heaviest lifts, and habit check-ins. Deliberately excluded: doses, compounds, side effects, bloodwork, and every free-text field you have typed — meal names, workout notes, habit notes and journal notes are never sent. |
| Legacy workout plan generator (retired in this update) | Your goal, experience level, available equipment, days per week and session length. No health journal data. |
Meal photos. The photo is resized on your device, stored in a private folder only your account can read, and kept until you delete the meal or your account — so you can look back at what you ate. We record that a scan happened (when, how confident the result was, how many items it found); we never store the AI provider's raw reply, and the photo is never written to a log.
Withdrawing consent. You can withdraw your consent to AI features at any time in Settings. Withdrawing takes effect on our servers, not just in the app: Pep Bot, Insights, Meal Scan, the weekly review and the plan generator all stop working on every one of your devices, and the rest of the app is unaffected. It stops anything further being sent — it does not recall what was already sent before you withdrew.
Reporting an AI answer. If you report an AI reply as inaccurate, harmful, or as medical advice, we keep a copy of that reply and the request that produced it so we can investigate. If you later delete your account, that text is erased along with the rest of your data — see section 6.
5D. Home-screen widgets
If you add a TrackPep widget to your home screen, the app writes a small summary to shared storage on your device so the widget can draw itself. It contains what is due next and when — the name on your reminder, which may be a compound name if that is what you called it, plus an injection site and a countdown — and your calories and protein for today against your targets.
None of it leaves your device. The widget makes no network request, never contacts our servers or any AI provider, and holds no account credentials. Signing out erases it, so a widget cannot keep showing a previous account's information.
A widget contains no dose amount — not one you typed and not one we derived. That is deliberate, because a home screen is the one place in TrackPep that anyone can read without unlocking your phone.
Worth knowing when you set one up: the name on your reminder is what shows, so if you called it after a medication, that name is readable by anyone who glances at your screen. You choose what it says — name the reminder something only you will recognise and the widget stays useful and tells a passer-by nothing.
6. Storage & retention
Your data is stored only so the Service can show it back to you and keep your devices in sync. It is encrypted in transit and at rest and protected with row-level security, so only your account can read it.
| Data type | Retention |
|---|---|
| Account & health journal data | While your account is active, unless you delete it |
| Saved photos (progress, vial) | Until you delete them or delete your account |
| Meal photos | Until you delete the meal or your account; deleting your account removes them from storage |
| Reports you file about an AI answer | The report survives account deletion as a safety record, but its content does not — the message, the reply and your note are erased and your identifier removed |
| Subscription records | As needed for billing, support, and legal compliance |
| Crash & diagnostic logs | A limited period for debugging, then deleted or aggregated |
| De-identified / aggregated data | May be retained indefinitely |
When you delete your account, your records — including your meal, workout, habit and photo data, and every file in your private storage folders — are removed promptly (generally within 30 days) and roll off backups shortly after. Some records may be retained where required for legal, tax, or fraud-prevention purposes. If you reported an AI answer, the report itself survives as a safety record — but its content does not: the message, the model's reply and your note are erased and your identifier is removed, so what remains is only that a report of that kind was filed.
7. Your privacy rights
Depending on where you live (e.g. under the GDPR, UK GDPR, CCPA/CPRA, or other US state laws), you have rights to access, correct, delete, export, and restrict the processing of your data, to withdraw consent, and to opt out of sale, sharing, or targeted advertising (which we do not do). In the app you can:
- Access & export your data (Settings → Export);
- Correct any entry (every record is editable);
- Delete your account and all data (Settings → Delete account);
- Withdraw consent to optional analytics (Settings → Privacy);
- Withdraw your AI consent (Settings → Privacy), which turns off Pep Bot, Insights, Meal Scan, Coach and the plan generator everywhere.
US state residents. If you live in California, Colorado, Connecticut, Virginia, Oregon, Washington, Nevada, or another state with a privacy law, you may have additional rights, including the right to confirm, access, delete, and appeal, and rights regarding consumer health data. We do not sell personal information or consumer health data. To exercise any right, or to appeal a decision, email support@trackpep.com.
8. Security
We use encryption in transit (TLS) and at rest, row-level security, and provider-managed authentication. The mobile app supports an optional biometric / passcode lock. No system is perfectly secure, but we work to protect your data and to notify you of material incidents as required by law.
9. International users
TrackPep is operated from the United States. If you use the Service from outside the US, your information may be transferred to and processed in the US and other locations where our providers operate. Where required, we use appropriate safeguards for international transfers.
10. Children
TrackPep is intended only for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact support@trackpep.com and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, take additional steps such as notifying account holders.
12. Contact
Questions about this Policy or your data: support@trackpep.com.