PepShot Privacy Policy
PepShot keeps your protocol data on your device and is upfront about the small amount of information collected to make the app work and to improve it. This policy describes exactly what happens with your data.
Your protocol data stays on your device
Everything you enter about your protocol — peptides, dose logs, injection sites, vial inventory, notes, and your onboarding quiz answers — is stored locally on your device in the app's private storage. We do not operate a server for this data, cannot see it, and never transmit it anywhere. It is included in your device backups (iCloud or local) under the terms of Apple's backup encryption, which we do not control and cannot read.
Deleting the app deletes all of this data.
Analytics (Amplitude)
PepShot uses Amplitude to understand, in aggregate, how the app is used — which screens people visit, which onboarding steps get skipped, whether a feature is helping or being ignored. This is standard product analytics, not advertising:
- We do not use this data for cross-app or cross-site tracking, and we do not share it with ad networks or data brokers.
- Events are things like "opened Calculator" or "completed onboarding step," tied to an anonymous, app-generated identifier — never your name, and never the contents of your peptide protocol (dose amounts, compound names, or notes are not sent to Amplitude).
- Amplitude processes this data on our behalf under its own privacy and security terms: amplitude.com/privacy.
You are not asked for App Tracking Transparency permission because PepShot does not track you across other companies' apps or websites.
Subscriptions (RevenueCat + Apple)
Subscription purchases are processed by Apple through the App Store and managed on our behalf by RevenueCat, which tells the app whether your subscription is active. RevenueCat receives your purchase and subscription status (not your payment details — those stay with Apple) so the app can unlock correctly across your devices. RevenueCat's handling of this data is governed by its own privacy policy: revenuecat.com/privacy. Apple's handling of payment data is governed by Apple's Privacy Policy.
Notifications
Dose reminders are local notifications scheduled entirely on your device. No notification content is sent to us or to any third party.
What we don't do: we don't sell your data, run ads in the app, or share your protocol details (peptides, doses, notes) with anyone — Amplitude and RevenueCat only ever see the limited, non-health data described above.
Exports
The CSV export feature creates a file on demand and hands it to the iOS share sheet. Where you send it is entirely up to you; no copy is retained or transmitted by PepShot.
This website
This site is static: no cookies, no analytics, no tracking scripts. The web calculator runs entirely in your browser and sends nothing anywhere.
Health disclaimer
PepShot is a personal tracking tool. It does not provide medical advice, diagnosis, or treatment recommendations, and it never suggests doses. Always consult a licensed clinician about your protocol.
Changes to this policy
If a future version of PepShot ever changes any of the above — for example by adding optional cloud sync — this policy will be updated first, and the change will be called out in the App Store release notes.
Contact
Questions? Email paolofmanca@gmail.com.