Last updated October 2026

Privacy Policy

What you track in Peppy stays on your iPhone and in your own private iCloud account. This page sets out the little that does leave your device, and who receives it.

On this page+
  1. 1. The short version
  2. 2. What you enter and where it lives
  3. 3. What we do not collect
  4. 4. Data handled by service providers
  5. 5. Things you choose to share
  6. 6. How we use information
  7. 7. Legal bases (EEA/UK)
  8. 8. Your choices and rights
  9. 9. Data retention
  10. 10. Security
  11. 11. Children
  12. 12. This website
  13. 13. International users
  14. 14. Changes to this policy
  15. 15. Contact
By downloading, accessing, using or continuing to use Peppy, you confirm that you have read, understood and agree to this Privacy Policy and to our Terms & Conditions, and you consent to the data practices described here, including the anonymous usage analytics in Section 4. If you do not agree, please do not use the app.
Not medical advice. Peppy is a tracking and organization tool for informational purposes only. It does not provide medical advice, diagnosis, treatment or dosing instructions, and it does not recommend, prescribe or determine any peptide, dose or schedule. Peppy only records and displays the values you enter, for your own organization. You are solely responsible for those inputs, for independently verifying every dose and unit with a licensed healthcare provider before acting on it, and for any outcome that may arise. Always consult a licensed healthcare provider before making any health-related decision. Your use of the App is also governed by our Terms & Conditions.

This Privacy Policy explains how Automation Launchpad LLC ("we", "us", "our") handles information in connection with the Peppy mobile application for iPhone, listed on the App Store as "Peppy: GLP1 & Peptide Tracker", also referred to as "Peppy: Peptide Tracker" and previously as "My Peppy" (the "App").

1. The short version

Everything you track, the peptides you add, your vials, doses, schedules, injection sites, weight, side-effect check-ins and notes, is stored on your iPhone. There is no account and no sign-up. If your iPhone is signed in to iCloud, the App also backs this data up to your own private iCloud account, so it can be restored if you reinstall the App or replace your phone. We never receive or store your health data on our servers, we cannot see your iCloud data, we do not sell it, and we never use it for advertising.

To improve the App and to measure our advertising, a limited amount of non-health data does leave your device: anonymous usage analytics, app events used for ad measurement, and your subscription status. Section 4 describes each of these and who receives it.

2. What you enter and where it lives

  • Your entries. The details you give during setup (sex, age, height, current and goal weight, your goal and, if you choose, a first name) and everything you log afterwards (peptides, vial details, doses, schedules, injection sites, weigh-ins, side-effect check-ins and notes) are saved on your device, so the App works with or without an internet connection.
  • iCloud backup. When your device is signed in to iCloud, with iCloud enabled for Peppy, the App copies your entries to your own private iCloud database using Apple's CloudKit. This lets the App restore your data on a new or reinstalled device signed in to the same Apple Account. The copy is stored in your Apple Account, not on our servers, and travels through Apple's infrastructure under Apple's privacy policy and iCloud terms. We cannot access, read or retrieve it. You can turn this off at any time in your device Settings (see Section 8).
  • "Used Peppy before" marker. The App saves a simple yes/no marker in your iCloud key-value storage noting that this Apple Account has used Peppy. If you later reinstall and tap "Already a user of Peppy?", the App reads that marker, and checks with Apple for an existing purchase, so it can skip setup. The marker contains no health data and we cannot read it.
  • Widgets. If you add a Peppy widget, the App shares what the widget needs to show (such as your next dose and vial levels) with the widget on your device. This stays on the device.
  • Notifications. Reminders are scheduled locally on your device. We do not operate a push server and we do not receive your reminder content.

3. What we do not collect

  • We do not require a name, email address or account to use the App.
  • We do not upload, store or have access to your tracking or health data on our servers.
  • We do not sell or "share" your personal information (as those terms are defined under applicable law).
  • We do not collect, sell or share your "consumer health data" (as defined under laws such as Washington's My Health My Data Act); your health entries stay on your device and, if you use iCloud, in your own private Apple Account, which we cannot access.
  • We do not use your health or tracking data for advertising or analytics, and we never build advertising profiles from it.
  • The App does not use your location, contacts, photos, camera, microphone or Apple Health data.

4. Data handled by service providers

The App includes software from the companies below. None of them receives your health or tracking data: no peptide names, doses, weights, symptoms, schedules, notes or injection sites.

  • Subscriptions and purchases (Apple and RevenueCat). Purchases are processed by Apple through the App Store. To manage entitlements we use RevenueCat as a service provider. RevenueCat receives a randomly generated, app-specific identifier and your subscription status (for example, whether a trial or subscription is active) so the App can unlock features and restore purchases. We and RevenueCat therefore hold a record of your purchase history (your subscription status and the transactions behind it), which we use only to provide the features you have paid for, restore purchases on a new device and help with support requests; it is not linked to your name or email and is not used for advertising. RevenueCat does not receive your Apple Account payment details. See RevenueCat's privacy policy and Apple's privacy policy.
  • Advertising measurement (Meta and TikTok). To measure how well our marketing campaigns perform, the App includes the Meta (Facebook) SDK and the TikTok Business SDK. From the first time the App is opened, these send app events such as installs, launches, completing setup, starting a trial and purchases (with the price and currency), together with basic device information (such as device model, operating system version, app version and IP address), to Meta and TikTok. Your device's advertising identifier is included only if you tap Allow on the iOS "Allow Tracking" prompt; if you do not allow tracking, it is not shared. These partners may use this data to attribute installs and optimize advertising. You can change your choice at any time in your device Settings under Privacy & Security > Tracking. See Meta's privacy policy and TikTok's privacy policy.
  • Product analytics (Mixpanel). To understand how the App is used and to make it better, we use Mixpanel to collect anonymous, non-health usage analytics: for example which setup screens you view, which features you use, basic device information (device model, OS version and app version), an anonymous device identifier and a coarse location derived from your IP address. Nothing is sent until you tap Accept and Continue on the App's consent screen. See Mixpanel's privacy policy.
  • Product analytics and ad measurement (Google Analytics for Firebase). We use Google Analytics for Firebase (a Google service) to collect the same kind of anonymous, non-health usage analytics, together with an anonymous, app-generated instance identifier and a coarse location derived from your IP address. It is switched on only after you accept the consent screen, and it does not use your device's advertising identifier (IDFA). We also use it to share anonymous conversion events, such as completing setup, starting a trial and subscribing, with Google Ads so we can measure and improve our advertising. See Google's Firebase privacy documentation and Google's privacy policy.
  • Product analytics and session replay (PostHog). We use PostHog to collect the same kind of anonymous, non-health usage analytics (including when the App is opened and sent to the background), with an anonymous app-generated identifier and a coarse location derived from your IP address. We may also use PostHog to record session replays: a low-frequency series of screen captures and touch positions that show how the App is navigated, so we can find confusing screens and bugs. Whenever session replay is in use, all text and all images are masked before a capture leaves your device, so a replay shows layout, taps and navigation but never your peptide names, doses, weights, symptoms, schedules, injection sites or anything you type. Like the other analytics, this is switched on only after you accept the consent screen, and it does not use your device's advertising identifier. See PostHog's privacy policy.
  • Diagnostics. If you have opted in at the system level, Apple may provide us anonymized, aggregated crash and performance statistics. In addition, the third-party software components described above (from Meta, Google/Firebase and PostHog) may collect crash data and other diagnostic data about their own operation, such as whether the App terminated unexpectedly, error and performance information, and whether analytics events were delivered. This is used only to keep the App and those components working reliably; it is not linked to your identity by us, is not used for advertising or tracking, and contains no health data.

5. Things you choose to share

  • Feedback and support email. If you send feedback from the App or email us, your message opens in your own mail app and we receive your email address, whatever you write, and a short footer the App adds with the app version, your iOS version and device type. We use this only to reply and to fix problems. Please do not include health details you would rather not share.
  • The Peppy community on WhatsApp. The App links to an optional WhatsApp group for Peppy users. Joining is your choice and happens in WhatsApp, not in the App. Other members of the group, and we, will be able to see your phone number, profile name and anything you post. The group is operated on WhatsApp under WhatsApp's privacy policy. The App does not record whether you joined, and nothing you track in the App is shared with the group.
  • Sharing the App. If you use "Share Peppy", iOS sends a link to the App through the app you pick. We do not receive who you shared it with.

6. How we use information

We use the limited information above only to:

  • operate core features (conversions, reminders and tracking) on your device;
  • provide, restore and manage your subscription;
  • diagnose crashes and improve reliability;
  • understand how the App is used and improve it, using anonymous, non-health analytics;
  • measure and improve our advertising; and
  • respond to you if you contact us.

Where the GDPR or UK GDPR applies, we process the limited data above on the basis of: performance of our agreement with you (providing the App and your subscription), our legitimate interests (keeping the App reliable and secure and measuring our advertising), and your consent where required (usage analytics, and the advertising identifier under the iOS tracking prompt). Because your health data stays on your device and in your own iCloud account, you remain its controller in everyday use.

8. Your choices and rights

  • Your entries. You can view, edit or delete what you have logged in the App at any time. To remove everything, delete the App from your iPhone and delete Peppy's data from iCloud in Settings > [your name] > iCloud > Storage. Deleting the App alone leaves the iCloud backup in place, and reinstalling would restore it. Step-by-step instructions are on the Your data page.
  • iCloud backup and permissions. You control iCloud, notifications and other system permissions in your device Settings. To stop the backup, turn off iCloud for Peppy in Settings > [your name] > iCloud, or sign out of iCloud on the device.
  • Ad tracking. You decide whether the App may use your advertising identifier on the iOS "Allow Tracking" prompt, and you can change that at any time under Settings > Privacy & Security > Tracking.
  • Usage analytics. By accepting the App's consent screen and using the App, you agree to the anonymous usage analytics described in Section 4. They begin once you tap Accept and Continue and are part of how the App works. If you do not agree to them, please do not use the App.
  • Privacy rights. Depending on where you live (for example the EEA or UK under the GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, restrict or port your data, to object to processing, and to opt out of the sale or sharing of personal information (we do not sell or share it). In practice you exercise these rights yourself, because your data is on your own device and in your own iCloud account. The analytics, advertising and subscription records described in Section 4 are tied to random identifiers rather than to your name, email or Apple Account, so we have no means of finding which records are yours and are generally unable to retrieve or delete them on request. You can write to us with any privacy question at the address in Section 15.

9. Data retention

Your entries are kept on your device until you delete them or remove the App. If you use iCloud, a copy is kept in your private iCloud account until you delete it there. Anonymous analytics, session-replay, advertising and subscription information held by our service providers (Mixpanel, Google, PostHog, Meta, TikTok and RevenueCat) is retained only as long as needed for the purposes above and under each provider's own retention rules. Emails you send us are kept for as long as needed to handle your request.

10. Security

We design the App to keep your data on your device and, when you use iCloud, in your own private iCloud account, and we rely on the security protections built into iOS and iCloud (including encryption of your data in transit and at rest within Apple's infrastructure). No method of storage or transmission is 100% secure, and you are responsible for securing your own device and Apple Account (for example, with a passcode, a strong password, two-factor authentication and up-to-date software).

11. Children's privacy

Peppy is intended only for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will address it.

12. This website

This website (mypeppy.io) is separate from the App and never has access to anything you track in it. To understand how many people visit and which pages they read, the website uses Google Analytics, which sets cookies in your browser and collects standard visit information such as the pages viewed, the site that referred you, your browser and device type, and an approximate location derived from your IP address. By using this website, you agree to this. You can block or delete these cookies in your browser settings, or use Google's opt-out add-on. See Google's privacy policy.

13. International users

The App is operated from Texas, United States. If you use it from another region, you understand that the limited processing described here may occur in countries with different data-protection laws, including the United States.

14. Changes to this policy

We may revise this Privacy Policy from time to time as the App evolves or as the law requires. When we do, we will post the updated version on this page and update the "last updated" date shown above. We encourage you to review this page periodically so that you remain aware of the current version, which is the one that applies to you. Your continued use of the App after an update takes effect constitutes your acceptance of the revised Privacy Policy.

15. Contact

Questions about privacy? Email support@automationlaunchpad.com.