Privacy policy.

Effective 4 July 2026 · Tech Quarters Pty Ltd, Australia

This Privacy Policy explains what data Peptmate collects, how it is used, and the choices you have. Peptmate is operated by Tech Quarters Pty Ltd (ABN provided on request), Australia. By using Peptmate you agree to this policy. If you do not agree, do not use the app.

What Peptmate is

Peptmate is an iOS application that helps you keep a private record of research peptides you choose to track: a personal library, reconstitution and dose details, logged doses, and journaling of subjective effects such as mood, weight, and free-text reflections.

Peptmate does not provide medical advice. All content in the app is descriptive and educational only.

Information we collect

We collect only the information you provide directly through the app, plus minimal device-level telemetry needed to run the service. We do not collect data from third-party trackers, advertising networks, or background sensors.

Account information

• Email address (your login identifier)
• Optional display name, date of birth, biological sex, height
• Account creation date and last login timestamp

Sign-in providers

You can create your account with email and password, Sign in with Apple, or Google Sign-In. If you use Apple or Google, we receive only your basic profile from them: your name and your email address (Apple lets you hide your real address behind a private relay address, which works fine with Peptmate). We never receive your Apple or Google password, and we get no access to anything else in those accounts. We send nothing back to Apple or Google about how you use Peptmate.

Data you choose to log

• Peptides in your library (name, vial strength, dose, schedule)
• Logged doses (date, time, injection site, optional note)
• Weight entries, mood entries, and journal reflections you write
• Peptide lifecycle events (added, reconstituted, refilled, marked finished)
• Preferences (notifications, units, time format, appearance)

You decide what to enter. You can leave any field blank.

Device and usage information

• App version, iOS version, and device model (when you submit feedback)
• In-app analytics events (which screens you open, when you log a dose, when you complete onboarding). Event names are factual; we do not capture screen contents or your written text in analytics.

Information we do not collect

• No access to your contacts, photos, microphone, camera, calendar, or location
• No third-party advertising or analytics SDKs
• No Apple HealthKit access
• No tracking across other apps or websites
• We never sell or rent your data to anyone

How we use your information

• Authenticate you and let you sign in across devices
• Show your library, dose history, weight chart, and journal back to you
• Deliver the reminder notifications you configure (scheduled locally on your phone)
• Improve the app by reviewing aggregated analytics
• Respond to feedback or support requests you send

We do not use your data for advertising, profiling, or any purpose other than running Peptmate.

Where your data is stored

Your data lives in two places: locally on your iPhone in the app's sandboxed storage, and on Supabase, our backend infrastructure provider, which hosts our database. Supabase's data processing terms are at supabase.com/privacy. Row-level security on every table means you can only ever access your own data; other Peptmate users cannot see your information.

Service providers we use

• Supabase hosts our database and authentication service.
• Resend delivers our account emails (confirmation links, password resets). It processes your email address for delivery and nothing else.
• Apple and Google act as sign-in providers if you choose them.

None of these providers may use your data for their own purposes, and we have no advertising or data-broker relationships with anyone.

How long we keep your data

We keep your data as long as your account exists. When you delete your account in Settings, your data is permanently removed from our servers within minutes, including your authentication record. Routine server request logs may persist for up to 30 days; they do not contain your personal content.

Your rights

• Access. Everything Peptmate stores about you is visible in the app. For an exported copy, email us.
• Correct. Edit any field directly in the app.
• Delete. Settings → Delete account. Immediate and permanent, and the email address becomes reusable for a fresh account.
• Sign out at any time without deleting. Your data stays on the server; sign in again to restore it.

If you are in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. Peptmate does not sell personal information. To exercise any right, email us.

Children's privacy

Peptmate is not intended for anyone under 17, and we do not knowingly collect information from anyone under 17. If you believe a minor has signed up, contact us and we will delete the account.

Changes to this policy

If we materially change how we collect or use your data, we will update this page and the effective date above, and notify active users in the app or by email at least 14 days before the change takes effect.

Contact

Email: we@peptmate.com
Tech Quarters Pty Ltd, Australia