Privacy Policy

Last updated: June 26, 2026

PepMate is a personal medication, peptide, injection-site, reminder, nutrition, and activity tracking app for clinician-directed care. This policy explains what information PepMate handles, how it is used, what is shared, and how you can control or delete it.

Short version: PepMate is designed to be private by default. The app does not require an account for medication tracking, does not use advertising, does not track you across apps or websites, and does not sell your data. Subscription purchase processing is handled through Apple and RevenueCat so PepMate can unlock paid features and restore purchases. Purchase attribution, referral codes, account deletion, and optional payout setup may use a backend account identity through Supabase.

1. Scope

This policy applies to the PepMate mobile app and to the PepMate website at pepmate.app.

PepMate is not a healthcare provider, pharmacy, prescriber, or emergency medical service. PepMate is a tracking and reminder tool only.

2. Data Stored Locally On Your Device

PepMate stores app data locally on your device so the app can remember your setup, reminders, logs, and preferences. This may include:

• Nickname or profile name you enter
• Selected weight, weight unit, weight history, and goals
• Medication, peptide, or custom medication names you add
• Selected medication library items and stack details
• Container amounts, dose amounts, and unit preferences
• Reminder days, dates, intervals, times, and notification preferences
• Injection site notes, injection rotation choices, and related logs
• Daily medication, meal, workout, protein, activity, and steps goals or logs
• Optional profile image selected by you
• App setup, display, and local preference settings

This data is stored on your device. PepMate does not transmit this app data to the PepMate developer's servers, advertisers, data brokers, analytics providers, or third-party marketing services.

Under Apple's App Store privacy-label guidance, data that is processed only on the device and is not transmitted off the device in a way that the developer or third-party partners can access is not considered "collected" by the app. PepMate is designed around that local-only model.

3. Data Collection By The App

PepMate does not collect medication, dose, injection, Health, photo, profile, reminder, or log data from the mobile app for developer analytics, advertising, tracking, marketing, or data brokerage.

PepMate does not collect the following app data on a PepMate server:

• Name or email for a medication-tracking account
• Phone number or contacts
• Precise location
• Advertising identifiers
• Device identifiers for tracking
• Browsing history
• Medication, dose, injection, Health, photo, or log data on a PepMate server

If you subscribe or restore purchases, Apple and RevenueCat process purchase information needed to validate receipts, manage subscription status, prevent fraud, provide customer support, and unlock paid features. This may include purchase history, product identifiers, entitlement status, receipt data, transaction status, app/platform information, and an anonymous app user identifier generated for the purchase system. PepMate does not use this purchase data for tracking or advertising.

If you use a referral code, create an affiliate code, delete a backend account identity, or set up future payout details, PepMate may use Supabase to store a backend user id, referral code records, referral attribution, purchase attribution needed for reward eligibility, payout contact details you provide, and account-deletion status. PepMate does not send medication names, dose amounts, Health data, injection site data, logs, goals, reminders, or profile images to Supabase.

If PepMate's data practices change in the future, this policy and the App Store privacy information will be updated before the changed practice is used.

4. Apple Health / HealthKit

Apple Health connection is optional. If you choose to connect Apple Health, PepMate reads only step count data so it can show today's step progress against your daily goal.

PepMate does not write or modify Apple Health data.

PepMate does not transmit Apple Health data to the PepMate developer's servers or to third parties.

PepMate does not use Apple Health data for advertising, marketing, analytics, data mining, or tracking.

You can revoke Apple Health permission at any time in the iOS Health app or iOS Settings.

5. Notifications

PepMate may request notification permission so it can schedule local reminder notifications at the times you choose.

Notifications are optional. PepMate uses notifications only for user-entered reminder schedules and test notifications you request from the app.

PepMate does not use notifications for advertising or marketing. You can disable notification permission at any time in iOS Settings.

6. Photos And Profile Image

If you choose a profile image, PepMate stores a local copy on your device and uses it only as your in-app profile image.

PepMate does not upload, sell, analyze, or share your profile image.

You can change or remove your profile image in the app, clear local data, or delete the app to remove locally stored profile image data.

7. Third-Party Services And SDKs

The PepMate mobile app does not include third-party advertising SDKs or data broker SDKs.

The app uses Apple platform services, such as iOS notifications, Photos permission, and Apple Health / HealthKit when you choose to enable them. Those services are controlled by your device settings and Apple's privacy terms.

The app uses RevenueCat for in-app subscription purchase processing, receipt validation, entitlement status, and purchase restoration. RevenueCat receives the purchase-related information described above and uses it for app functionality, purchase validation, fraud prevention, customer support, and RevenueCat dashboard reporting. RevenueCat does not receive your medication names, dose amounts, Health data, injection site data, logs, goals, reminders, or profile image from PepMate.

The app uses Supabase for backend account identity, referral-code attribution, affiliate-code records, future payout setup, and account deletion where those features are used. Supabase does not receive your medication names, dose amounts, Health data, injection site data, logs, goals, reminders, or profile image from PepMate.

The PepMate website is hosted through Cloudflare Pages and may load web fonts from Google Fonts. When you visit the website, Cloudflare and Google may process routine technical request information, such as IP address, browser, device, and request metadata, to deliver, secure, and operate the website. PepMate does not use website advertising cookies or website analytics.

8. Data Sharing

PepMate does not sell personal data.

PepMate does not share locally stored app data with advertisers, data brokers, marketing services, or artificial intelligence services.

PepMate does not share Apple Health data, medication data, dose data, injection site data, logs, goals, profile images, or reminder schedules with third parties.

Purchase history and subscription status are processed by Apple and RevenueCat only to operate subscriptions and restore purchases. Referral and affiliate records are processed by Supabase only to attribute qualified referral rewards, operate payout setup, prevent abuse, and support account deletion.

If a future version adds an optional feature that sends any personal data off your device, PepMate will ask for appropriate consent, explain the purpose, and update this policy and App Store privacy information.

9. Tracking And Advertising

PepMate does not track you across apps or websites.

PepMate does not use your data for targeted advertising, advertising measurement, retargeting, profiling, or sale to a data broker.

PepMate does not access Apple's Identifier for Advertisers (IDFA).

10. Data Retention And Deletion

PepMate app data remains on your device until you edit it, clear it, revoke permissions, reset app setup, or delete the app.

You can clear local PepMate data from the Profile tab by using the Clear Data action. This deletes saved PepMate profile data, medications, reminders, logs, goals, locally stored profile image data, and scheduled PepMate dose notifications from the device.

You can revoke optional permissions in iOS Settings or, for Apple Health, in the iOS Health app or iOS Settings.

You can delete the app from your device to remove app data managed by iOS.

If PepMate has created a backend account identity for purchase attribution, referral features, payout setup, or account deletion, you can request deletion from the app. Deleting a backend account identity removes or anonymizes account-linked records where required. Financial, anti-fraud, tax, refund, and payout records may be retained as allowed or required by law, usually in anonymized or ledger form.

Because PepMate does not maintain a server copy of your local medication-tracking app data, the developer usually has no medication, Health, log, reminder, or profile data to access, export, correct, or delete on your behalf. Subscription and purchase records are managed by Apple and RevenueCat according to their retention practices.

11. Security

PepMate is designed to keep sensitive tracking data on your device. Local data is protected by the security features of your device and operating system, such as your passcode, biometrics, app sandboxing, and device backup settings.

No app or storage method can guarantee absolute security. You are responsible for keeping your device, Apple ID, passcode, and backups secure.

12. Children's Privacy

PepMate is not directed to children and is not intended for use by children under 13.

PepMate does not knowingly collect personal data from children. Because PepMate does not maintain a server copy of local medication-tracking app data, the developer does not have a server database of children's medication, Health, reminder, or log data.

13. Medical Disclaimer

PepMate is a tracking and reminder tool only. PepMate does not diagnose, treat, cure, or prevent any disease. PepMate does not prescribe medications, recommend medications or peptides, calculate dosing, or provide medical advice.

Always follow the instructions from your licensed clinician and medication label. For medical questions, side effects, missed doses, dosing decisions, or emergencies, contact a qualified healthcare professional or emergency services.

14. Regional Privacy Rights

Depending on where you live, you may have privacy rights such as access, deletion, correction, portability, objection, or restriction.

Because PepMate does not maintain a server copy of your local medication-tracking app data, the most direct way to exercise deletion or correction rights for that app data is to edit, clear, or delete the local data on your device. For backend account identity, referral, payout, website, or purchase-attribution data requests, contact PepMate using the support contact listed below.

For website-related privacy questions or any privacy request, contact the PepMate developer using the support contact listed for PepMate in the App Store.

15. Changes To This Policy

This privacy policy may be updated when PepMate changes how it handles data or when legal, App Store, or platform requirements change.

The updated policy will include a new "Last updated" date. If a future change materially affects how personal data is collected, used, or shared, PepMate will provide additional notice as appropriate.

16. Contact

For privacy questions, support requests, or data requests, contact the PepMate developer using the support contact listed for PepMate in the App Store.