Privacy Policy

This Privacy Policy explains how Automation Launchpad LLC("we", "us", "our") handles information in connection with the My Peppymobile application, also referred to as "Peppy" (the "App"). My Peppy is designed to be private by default.

1. The short version

Your health information, the peptides you track, doses, schedules, weight, injection sites, symptom check-ins and notes, is stored on your device. There is no account and no sign-up. If you are signed in to iCloud, the App can also sync this data across your own Apple devices through your private iCloud account, so it stays with you even if you replace your phone. We never receive or store your health data on our servers, we cannot see your iCloud data, we do not sell it, and we never use it for advertising. To improve the App, we do collect anonymous, non-health usage analytics (such as which screens and features you use); these are off by default (opt-in) and you can decline them, see Section 3.

2. Information we do not collect

• We do not require a name, email address or account to use the App.
• We do not upload, store or have access to your tracking or health data on our servers.
• We do not sell or "share" your personal information (as those terms are defined under applicable law).
• We do not collect, sell or share your "consumer health data" (as defined under laws such as Washington's My Health My Data Act); your health entries stay on your device and, if you use iCloud, in your own private Apple account, which we cannot access.
• We do not use your health or tracking data for advertising or analytics and we never build advertising profiles from it. We do use a limited amount of non-health app and device data to measure our advertising and, with your consent, to understand and improve how the App is used (analytics), see Section 3.

3. Information processed in connection with the App

• On-device data. Your entries are saved locally on your device so the App works with or without an internet connection.
• iCloud sync. When your device is signed in to iCloud (with iCloud enabled for My Peppy), the App mirrors your entries to your own private iCloud databaseusing Apple's CloudKit, so the same data appears on your other Apple devices and can be restored if you get a new one. This data is stored in yourApple account, not on our servers, and travels through Apple's infrastructure under Apple's privacy policy and iCloud terms. We cannot access, read or retrieve your synced data. You can turn this off at any time in your device Settings (see Section 6).
• Notifications. Reminders are scheduled locally on your device. We do not operate a push server and we do not receive your reminder content.
• Subscriptions & purchases. Purchases are processed by Apple through the App Store. To manage entitlements we use RevenueCat as a service provider. RevenueCat receives a randomly generated, app-specific identifier and your subscription status (for example, whether a trial or subscription is active) so the App can unlock features and restore purchases. It does not receive your health data or your Apple ID payment details. See RevenueCat's privacy policy and Apple's privacy policy.
• Advertising & attribution (Meta and TikTok). To measure how well our marketing campaigns perform, the App includes the Meta (Facebook) SDK and the TikTok Business SDK. With your permission (granted through the iOS "Allow Tracking" prompt), these send app events such as installs, launches and purchases, together with your device's advertising identifier, to Meta and TikTok. If you do not allow tracking, this advertising identifier is notshared. These partners may use this data to attribute installs and optimize advertising. Neither Meta nor TikTok receives your health or tracking data. You can limit this at any time in your device Settings under Privacy & Security > Tracking. See Meta's privacy policy and TikTok's privacy policy for how they process it.
• Product analytics (Mixpanel). To understand how the App is used and to make it better, we use Mixpanel to collect anonymous, non-health usage analytics, for example which screens you view, which features you use, basic device information (device model, OS version and app version) and platform, and standard analytics data such as an anonymous device identifier and a coarse location derived from your IP address. This is off by default (opt-in): nothing is sent until you accept analytics on the onboarding consent screen, and you can decline. Mixpanel never receives your health or tracking data, no peptide names, doses, weights, symptoms, schedules or injection sites, only the general shape of how you use the App. See Mixpanel's privacy policy.
• Product analytics & ad measurement (Google Analytics for Firebase). Alongside Mixpanel, we use Google Analytics for Firebase (a Google service) to collect the same kind of anonymous, non-health usage analytics, for example app open and session events, which screens and features you use, and basic device information (device model, OS version and app version), together with an anonymous, app-generated instance identifier and a coarse location derived from your IP address. Like Mixpanel, this is off by default (opt-in): it is enabled only after you accept analytics on the onboarding consent screen, and it does notuse your device's advertising identifier (IDFA). We also use it to share anonymous, non-health conversion events, such as app install, onboarding completion, trial start and subscription, with Google Ads so we can measure and improve our advertising. Google never receives your health or tracking data, no peptide names, doses, weights, symptoms, schedules or injection sites. See Google's Firebase privacy documentation and Google's privacy policy.
• Diagnostics. If you have opted in at the system level, Apple may provide us anonymized, aggregated crash and performance statistics. These contain no health data and do not identify you.

4. How we use information

We use the limited information above only to:

• operate core features (conversions, reminders and tracking) on your device;
• provide, restore and manage your subscription;
• diagnose crashes and improve reliability;
• understand how the App is used and improve it, using anonymous, non-health analytics you have consented to; and
• respond to you if you contact us for support.

5. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process the limited data above on the basis of: performance of our agreement with you (providing the App and your subscription), our legitimate interests (keeping the App reliable and secure), and your consent where required (for example, optional diagnostics and usage analytics, which you can decline or withdraw). Because your health data stays on your device, you remain its controller in everyday use.

6. Your rights & choices

• Access & deletion. Your health data lives on your device, you can view, edit or delete it in the App at any time, and deleting the App removes the local data from your device. If you use iCloud sync, a copy also lives in your private iCloud account; you can remove it in Settings > [your name] > iCloud > Manage Account Storage (or by deleting the entries in the App while signed in, which removes them from iCloud too).
• iCloud sync & permissions. You control iCloud sync, notifications and other system permissions in your device Settings. To stop syncing, turn off iCloud for My Peppy in Settings > [your name] > iCloud, or sign out of iCloud on the device.
• Analytics. Usage analytics are off unless you accept them on the onboarding consent screen. You can decline at that screen, and you can limit device-level ad tracking under Settings > Privacy & Security > Tracking. To withdraw analytics consent after the fact, contact us below.
• EEA/UK (GDPR): you may have rights to access, correct, erase, restrict or port your data and to object to processing. California (CCPA/CPRA): you have rights to know, delete and correct, and to opt out of sale/sharing, note we do not sell or share your personal information. To exercise any right, contact us below.

7. Data retention

Health data is retained on your device until you delete it or remove the App. If you use iCloud sync, a copy is retained in your private iCloud account until you delete it there (or delete the entries in the App). Any anonymized diagnostic, analytics or subscription information held by our service providers (such as Mixpanel, Google and RevenueCat) is retained only as long as needed for those purposes.

8. Security

We design the App to keep your data on your device and, when you use iCloud, in your own private iCloud account, and we rely on the security protections built into iOS and iCloud (including encryption of your data in transit and at rest within Apple's infrastructure). No method of storage or transmission is 100% secure, and you are responsible for securing your own device and Apple account (for example, with a passcode, a strong Apple ID password, two-factor authentication and up-to-date software).

9. Children's privacy

Peppy is intended only for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will address it.

10. International users

The App is operated from Texas, United States. If you use it from another region, you understand that the limited processing described here may occur in countries with different data-protection laws.

11. Changes to this policy

We may revise this Privacy Policy from time to time as the App evolves or as the law requires. When we do, we will post the updated version on this page and update the "last updated" date shown above. We encourage you to review this page periodically so that you remain aware of the current version, which is the one that applies to you. Your continued use of the App after an update takes effect constitutes your acceptance of the revised Privacy Policy.

12. Contact

Questions or privacy requests? Email support@automationlaunchpad.com.