Pepfolio Privacy Policy

Last updated: October 23, 2026

Pepfolio ("Pepfolio," "we," "us," or "our") is a mobile application operated by Kevin Guisarde, an individual based in the United States.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use the Pepfolio mobile application, visit getpepfolio.com, or contact us.

Pepfolio helps adults organize peptide routines, record activities, track personal goals and progress, and maintain a private journal.

We recognize that information entered into Pepfolio may be personal and sensitive. We aim to provide clear information about how it is handled and the choices available to you.

For privacy-related questions, contact [email protected].

1. Information We Collect

Account Information

When you create or use an account, we collect information such as:

Your name and email address.
Authentication credentials and account identifiers.
Email verification and account recovery information.
Account creation, login, and session activity information.
Information received from supported third-party sign-in providers, when enabled and used.

Passwords are handled through our authentication system. We do not need access to your password in readable form to operate your account.

Profile and Personal Information

You may choose to provide information such as:

Your first name.
Your age.
Your height.
Your preferred measurement units.
Your personal wellness interests and goals.
Starting weight and other measurements.

Some information is optional and can be updated through the app.

Peptide Routines and Activity

When you use Pepfolio's tracking features, we may store:

Peptide names and personal notes.
Administration methods.
Product strength information you enter.
Recorded amounts and units.
Schedules, reminders, and routine preferences.
Completed, missed, skipped, or other recorded activities.
Historical routine changes and activity records.

This information is provided by you to organize and document your personal routines.

Journal and Progress Information

Depending on the features you use, we collect information such as:

Journal entries, titles, and written notes.
Personal observations and custom tracking fields.
Measurements and progress history.
Personal goals and recorded progress.
Photos uploaded to your Journal or Progress records.
Audio recordings you choose to attach to Journal entries.
Dates and associations between your records.

Photos and audio recordings may contain additional personal or sensitive information beyond the information you intentionally record.

Pepfolio does not use a voice transcription or voiceprint identification service in the reviewed implementation.

Feedback and Support

If you contact us or submit feedback through the app, we may collect:

The type of request or issue.
Your written description.
Screenshots you choose to attach.
Limited device and app diagnostic information, when you explicitly choose to include it.
Information needed to respond to or investigate your request.

Support descriptions may contain information you choose to disclose, including sensitive personal information. We encourage you not to include passwords or other unnecessary confidential information.

Technical and Security Information

When you use Pepfolio, our systems and service providers may process technical information, including:

IP addresses.
Device and browser information.
Operating system and app version.
Session identifiers and timestamps.
Request identifiers.
Authentication and security events.
Operational error and diagnostic information.

We use this information to operate the service, protect accounts, investigate problems, and maintain reliability.

Pepfolio allows you to record information that may reveal aspects of your health, wellness, or personal routines.

This may include peptide use, measurements, goals, observations, photographs, audio recordings, and journal entries.

We process this information to provide the tracking, organization, history, and progress features you choose to use.

We do not sell your personal health-related information or disclose it to advertising data brokers.

We do not use your personal tracking records to provide personalized medical treatment recommendations.

Pepfolio is a personal tracking application and is not a substitute for professional medical advice.

3. How We Use Information

We use personal information to:

Create, authenticate, and manage your account.
Save and display your peptide routines and activity history.
Provide calendars, reminders, and tracking features.
Maintain your Journal, measurements, goals, and progress records.
Store and retrieve photographs and audio recordings you choose to save.
Provide account settings and personal-data export.
Process account deletion requests.
Send account verification, password recovery, and other necessary service communications.
Respond to support requests and investigate reported problems.
Detect unauthorized access, prevent abuse, and maintain service security.
Diagnose technical issues and improve application reliability.
Verify subscriptions and entitlements, manage access to premium features, and analyze subscription purchases.
Meet applicable legal obligations.

We do not use your private Journal entries, photos, or audio recordings for third-party advertising.

We do not sell your personal information to advertisers or data brokers.

We use service providers to operate Pepfolio. Depending on the feature, these providers may process information on our behalf.

These include:

Neon PostgreSQL: Stores account-related and application records, including information you save through Pepfolio.

Cloudflare: Provides infrastructure and private object storage for user-uploaded media, including photographs, audio recordings, and certain support attachments. Cloudflare services may also process operational and security information.

Resend: Delivers account-related emails and certain support notifications. Support notifications may include the description you submit and technical diagnostics you explicitly choose to share.

RevenueCat: Processes your authenticated Pepfolio account identifier, subscription and entitlement information, and purchase history to provide subscription management, purchase verification, premium access, and purchase analytics. Pepfolio does not send your peptide routines, measurements, Journal entries, photos, or audio recordings to RevenueCat through its subscription integration.

Authentication providers: When Google Sign-In or Sign in with Apple is enabled and used, the relevant identity provider processes information needed to authenticate you. Google documents that its iOS sign-in SDK may collect a user identifier and IP address, and may use the IP address to estimate general location for fraud prevention.

Operating-system providers: Apple and Google may process information through device-level functionality, such as notifications, permissions, and operating-system services, according to their own policies.

We may also disclose information when reasonably necessary to comply with applicable law, respond to valid legal requests, protect the security of the service, or address fraud or misuse.

If ownership or operation of Pepfolio changes through a business transaction, information may be transferred as part of that transaction, subject to applicable law.

We do not make your private tracking records publicly accessible through Pepfolio.

5. Photos, Audio, and Device Permissions

Photos

Pepfolio accesses photographs when you choose to select or capture images for supported features.

Selected images may be processed before upload, including normalization that removes embedded metadata.

Photos saved to Pepfolio are stored through private application-controlled storage and are retrieved through authenticated access.

Microphone

Pepfolio requests microphone permission when you choose to record a Journal voice note.

Recordings remain on your device until the applicable save or upload process sends them to Pepfolio's storage.

Pepfolio does not require background audio recording for its Journal feature.

Notifications

Pepfolio may request notification permission to deliver reminders.

The reviewed reminder implementation uses local device notifications.

Depending on your notification preferences, reminders displayed on your device may reveal information about your routines to anyone who can view your notifications.

You can manage notification permissions through your device settings and available Pepfolio preferences.

6. Data Storage and Security

We use technical and organizational safeguards designed to protect personal information.

These include authenticated access to account records, account-scoped authorization controls, protected credential storage, and restricted access to private media.

Information is transmitted through protected connections where supported by our infrastructure.

However, no electronic storage or transmission system can guarantee absolute security.

Pepfolio is not an end-to-end encrypted service. Information must be processed by our application infrastructure and relevant service providers to provide its features.

You are responsible for maintaining the security of your account credentials and devices.

If you believe your account has been accessed without authorization, contact [email protected].

7. How Long We Keep Information

We generally retain your account information and saved tracking records while your account remains active, unless you delete individual records or request account deletion.

Different categories of information may have different retention periods.

Tracking records: Generally retained while associated with your active account.
Photos and audio: Retained while associated with saved records, subject to deletion and storage cleanup processes.
Support submissions: Subject to maintenance rules that make completed feedback records eligible for removal after 90 days.
Temporary uploads: Subject to expiration and cleanup processes when uploads are abandoned or incomplete.
Authentication and security records: May be retained for account security, operational purposes, or applicable legal requirements.
System logs and backups: May remain temporarily under the retention practices of our infrastructure and service providers.

Retention maintenance and cleanup may operate asynchronously. Eligibility for cleanup does not always mean immediate physical deletion.

We may retain limited information where reasonably necessary for legal compliance, security, dispute resolution, or enforcement of applicable agreements.

8. Your Privacy Choices and Rights

Pepfolio provides controls that allow you to manage information associated with your account.

Access and Update

You can view and update supported account, profile, and tracking information through the app.

Export Your Information

You can request an export of your personal Pepfolio information through Settings → Privacy & data.

The export feature is designed to provide a private downloadable archive containing supported account and tracking records, historical information, and saved media.

Certain internal security information, such as password hashes, authentication tokens, and session secrets, is excluded.

Once you download or share an exported file, you are responsible for how that copy is stored and protected.

Delete Your Account

You can request account deletion through Pepfolio's account settings.

Account deletion removes associated application records and initiates cleanup of related private media.

Some cleanup operations occur asynchronously. Limited information may also remain temporarily in backups, operational records, external service-provider systems, or where retention is required or permitted by law.

Deleting your Pepfolio account does not automatically delete copies you previously exported or shared outside the application.

Additional Privacy Requests

Depending on where you reside and applicable law, you may have additional rights to request access, correction, deletion, or information about the processing of your personal information.

You may submit a request to [email protected].

We may need to verify your identity before fulfilling certain requests.

We will respond in accordance with applicable law.

9. Analytics, Diagnostics, and Cookies

Pepfolio uses operational monitoring and diagnostic information to maintain service performance, security, and reliability.

The reviewed application includes server-side operational observability and optional user-submitted diagnostic reports.

Optional PostHog usage analytics: With your explicit Usage Analytics opt-in, eligible Development sessions can send limited events about screen navigation, onboarding and first feature use, feature interactions, plan and paywall views or selections, purchase-flow outcomes, and whether a Journal entry or goal was saved. These events use restricted categories and technical metadata, such as app version, platform, event times, and pseudonymous identifiers. Pseudonymous information is not necessarily anonymous.

Constrained Development error reporting: With your explicit, account-scoped Usage Analytics opt-in and when separate Development error-reporting configuration is enabled, limited reports of unexpected app failures may be sent to PostHog using constrained technical metadata. At this integration's payload boundary, allowlisted event and error builders exclude Journal text, observations, measurement values, goal names and targets, peptide names and amounts, photographs, audio recordings, account contact details, authentication credentials, raw error messages, and request or response contents. PostHog session replay, automatic interaction capture, console-log capture, and SDK exception autocapture are not enabled. A separate application error handler can report eligible Development failures only under the consent and configuration requirements above. As a network service provider, PostHog receives connection information needed to handle requests; these payload restrictions are not a guarantee that no network information is processed.

You can withdraw permission using the Usage Analytics control in Settings. Withdrawal prevents new app events and reports from being submitted through this integration and attempts to discard locally queued events. Events already sent or in flight cannot be recalled by turning the control off. Logging out or switching accounts ends the previous analytics session.

Current availability: PostHog usage analytics and constrained error reporting are limited to eligible, opted-in Development sessions. The current source configuration blocks Production PostHog initialization. This restriction and the Usage Analytics preference do not disable the separate server-side operational monitoring, optional support reports, or RevenueCat subscription processing described in this policy.

RevenueCat also provides subscription purchase analytics, including purchase history and subscription reporting. This is separate from optional support diagnostics and server-side operational monitoring.

Website Analytics

We use Cloudflare Web Analytics to understand how visitors use our website and improve its performance and usability. This includes information such as page views, navigation activity, referral sources, and website performance.

Cloudflare Web Analytics does not use cookies, browser local storage, or visitor fingerprinting to collect analytics measurements.

Website analytics are enabled only when you select "Accept all" in our privacy banner. If you reject analytics, the analytics script does not load.

You can change your choice at any time using the Privacy Choices link on our website. Withdrawing consent prevents future analytics collection, but does not reverse information previously collected.

Your choice is saved in your browser's local storage so the website can remember your preference.

We do not use the reviewed mobile application's tracking records for third-party behavioral advertising.

10. Purchases and Subscriptions

Pepfolio uses RevenueCat to manage subscription status and access to premium functionality.

Where app-store purchases are enabled, Apple or Google processes checkout and payment information through the applicable marketplace.

RevenueCat processes the Pepfolio account identifier associated with your authenticated account, purchase and transaction history, subscription status, and entitlement information. Pepfolio uses this information to verify purchases, support restores, prevent fraud, synchronize premium access, and analyze subscription purchases.

Pepfolio does not directly process payment cards. App-store checkout does not provide Pepfolio with your payment-card number.

11. Children's Privacy

Pepfolio is intended only for adults who are at least 18 years old.

Users must confirm that they meet this minimum age requirement when registering.

Pepfolio is not designed for use by children.

If we learn that an account was created by someone who does not meet our age requirements, we may take appropriate action, including restricting or deleting the account, consistent with applicable law.

If you believe a minor has provided information to Pepfolio, contact [email protected].

12. United States Operations

Pepfolio is initially intended for users in the United States.

Personal information may be processed by infrastructure and service providers operating in locations determined by their service arrangements.

Where applicable law provides additional protections for consumer health data or other sensitive personal information, we will comply with those requirements.

13. Third-Party Services and Websites

Pepfolio may provide links to third-party websites or services.

Those services operate under their own privacy policies and practices.

We encourage you to review the privacy notices of third-party services before providing information directly to them.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to Pepfolio, its features, service providers, legal requirements, or information-handling practices.

When we make changes, we will update the Last updated date above.

If a change requires additional notice or consent under applicable law, we will provide it as required.

The current version will be available at:

https://getpepfolio.com/privacy

15. Contact Us

Pepfolio is operated by:

Kevin Guisarde Pepfolio United States

Privacy inquiries: [email protected]

Website: https://getpepfolio.com

If you have questions about this Privacy Policy, your personal information, or your privacy rights, please contact us using the email address above.